/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to dracut-module/password-agent.c

  • Committer: teddy at recompile
  • Date: 2020-01-12 01:44:43 UTC
  • mto: This revision was merged to the branch mainline in revision 396.
  • Revision ID: teddy@recompile.se-20200112014443-kjpllaz75e1ox0jr
mandos-ctl: Minor code clarification

* mandos-ctl (dbus.SystemBus.call_method): New virtual method, for
  clarity only.

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
/* -*- mode: c; coding: utf-8; after-save-hook: (lambda () (let* ((find-build-directory (lambda (try-directory &optional base-directory) (let ((base-directory (or base-directory try-directory))) (cond ((equal try-directory "/") base-directory) ((file-readable-p (concat (file-name-as-directory try-directory) "Makefile")) try-directory) ((funcall find-build-directory (directory-file-name (file-name-directory try-directory)) base-directory)))))) (build-directory (funcall find-build-directory (buffer-file-name))) (local-build-directory (if (fboundp 'file-local-name) (file-local-name build-directory) (or (file-remote-p build-directory 'localname) build-directory))) (command (file-relative-name (file-name-sans-extension (buffer-file-name)) build-directory))) (pcase (progn (if (get-buffer "*Test*") (kill-buffer "*Test*")) (process-file-shell-command (let ((qbdir (shell-quote-argument local-build-directory)) (qcmd (shell-quote-argument command))) (format "cd %s && CFLAGS=-Werror make --silent %s && %s --test --verbose" qbdir qcmd qcmd)) nil "*Test*")) (0 (let ((w (get-buffer-window "*Test*"))) (if w (delete-window w)))) (_ (with-current-buffer "*Test*" (compilation-mode) (cd-absolute build-directory)) (display-buffer "*Test*" '(display-buffer-in-side-window)))))); -*- */
 
2
/*
 
3
 * Mandos password agent - Simple password agent to run Mandos client
 
4
 *
 
5
 * Copyright © 2019 Teddy Hogeborn
 
6
 * Copyright © 2019 Björn Påhlsson
 
7
 * 
 
8
 * This file is part of Mandos.
 
9
 * 
 
10
 * Mandos is free software: you can redistribute it and/or modify it
 
11
 * under the terms of the GNU General Public License as published by
 
12
 * the Free Software Foundation, either version 3 of the License, or
 
13
 * (at your option) any later version.
 
14
 * 
 
15
 * Mandos is distributed in the hope that it will be useful, but
 
16
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 
17
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 
18
 * General Public License for more details.
 
19
 * 
 
20
 * You should have received a copy of the GNU General Public License
 
21
 * along with Mandos.  If not, see <http://www.gnu.org/licenses/>.
 
22
 * 
 
23
 * Contact the authors at <mandos@recompile.se>.
 
24
 */
 
25
 
 
26
#define _GNU_SOURCE
 
27
#include <inttypes.h>           /* uintmax_t, PRIuMAX, PRIdMAX,
 
28
                                   intmax_t, uint32_t, SCNx32,
 
29
                                   SCNuMAX, SCNxMAX */
 
30
#include <stddef.h>             /* size_t */
 
31
#include <sys/types.h>          /* pid_t, uid_t, gid_t, getuid(),
 
32
                                   getpid() */
 
33
#include <stdbool.h>            /* bool, true, false */
 
34
#include <signal.h>             /* struct sigaction, sigset_t,
 
35
                                   sigemptyset(), sigaddset(),
 
36
                                   SIGCHLD, pthread_sigmask(),
 
37
                                   SIG_BLOCK, SIG_SETMASK, SA_RESTART,
 
38
                                   SA_NOCLDSTOP, sigfillset(), kill(),
 
39
                                   SIGTERM, sigdelset(), SIGKILL,
 
40
                                   NSIG, sigismember(), SA_ONSTACK,
 
41
                                   SIG_DFL, SIG_IGN, SIGINT, SIGQUIT,
 
42
                                   SIGHUP, SIGSTOP, SIG_UNBLOCK */
 
43
#include <stdlib.h>             /* EXIT_SUCCESS, EXIT_FAILURE,
 
44
                                   malloc(), free(), strtoumax(),
 
45
                                   realloc(), setenv(), calloc(),
 
46
                                   mkdtemp(), mkostemp() */
 
47
#include <iso646.h>             /* not, or, and, xor */
 
48
#include <error.h>              /* error() */
 
49
#include <sysexits.h>           /* EX_USAGE, EX_OSERR, EX_OSFILE */
 
50
#include <errno.h>              /* errno, error_t, EACCES,
 
51
                                   ENAMETOOLONG, ENOENT, ENOTDIR,
 
52
                                   EEXIST, ECHILD, EPERM, ENOMEM,
 
53
                                   EAGAIN, EINTR, ENOBUFS, EADDRINUSE,
 
54
                                   ECONNREFUSED, ECONNRESET,
 
55
                                   ETOOMANYREFS, EMSGSIZE, EBADF,
 
56
                                   EINVAL */
 
57
#include <string.h>             /* strdup(), memcpy(),
 
58
                                   explicit_bzero(), memset(),
 
59
                                   strcmp(), strlen(), strncpy(),
 
60
                                   memcmp(), basename() */
 
61
#include <argz.h>               /* argz_create(), argz_count(),
 
62
                                   argz_extract(), argz_next(),
 
63
                                   argz_add() */
 
64
#include <sys/epoll.h>          /* epoll_create1(), EPOLL_CLOEXEC,
 
65
                                   epoll_ctl(), EPOLL_CTL_ADD,
 
66
                                   struct epoll_event, EPOLLIN,
 
67
                                   EPOLLRDHUP, EPOLLOUT,
 
68
                                   epoll_pwait() */
 
69
#include <time.h>               /* struct timespec, clock_gettime(),
 
70
                                   CLOCK_MONOTONIC */
 
71
#include <argp.h>               /* struct argp_option, OPTION_HIDDEN,
 
72
                                   OPTION_ALIAS, struct argp_state,
 
73
                                   ARGP_ERR_UNKNOWN, ARGP_KEY_ARGS,
 
74
                                   struct argp, argp_parse(),
 
75
                                   ARGP_NO_EXIT */
 
76
#include <unistd.h>             /* uid_t, gid_t, close(), pipe2(),
 
77
                                   fork(), _exit(), dup2(),
 
78
                                   STDOUT_FILENO, setresgid(),
 
79
                                   setresuid(), execv(), ssize_t,
 
80
                                   read(), dup3(), getuid(), dup(),
 
81
                                   STDERR_FILENO, pause(), write(),
 
82
                                   rmdir(), unlink(), getpid() */
 
83
#include <sys/mman.h>           /* munlock(), mlock() */
 
84
#include <fcntl.h>              /* O_CLOEXEC, O_NONBLOCK, fcntl(),
 
85
                                   F_GETFD, F_GETFL, FD_CLOEXEC,
 
86
                                   open(), O_WRONLY, O_NOCTTY,
 
87
                                   O_RDONLY, O_NOFOLLOW */
 
88
#include <sys/wait.h>           /* waitpid(), WNOHANG, WIFEXITED(),
 
89
                                   WEXITSTATUS() */
 
90
#include <limits.h>             /* PIPE_BUF, NAME_MAX, INT_MAX */
 
91
#include <sys/inotify.h>        /* inotify_init1(), IN_NONBLOCK,
 
92
                                   IN_CLOEXEC, inotify_add_watch(),
 
93
                                   IN_CLOSE_WRITE, IN_MOVED_TO,
 
94
                                   IN_MOVED_FROM, IN_DELETE,
 
95
                                   IN_EXCL_UNLINK, IN_ONLYDIR,
 
96
                                   struct inotify_event */
 
97
#include <fnmatch.h>            /* fnmatch(), FNM_FILE_NAME */
 
98
#include <stdio.h>              /* asprintf(), FILE, fopen(),
 
99
                                   getline(), sscanf(), feof(),
 
100
                                   ferror(), fclose(), stderr,
 
101
                                   rename(), fdopen(), fprintf(),
 
102
                                   fscanf() */
 
103
#include <glib.h>    /* GKeyFile, g_key_file_free(), g_key_file_new(),
 
104
                        GError, g_key_file_load_from_file(),
 
105
                        G_KEY_FILE_NONE, TRUE, G_FILE_ERROR_NOENT,
 
106
                        g_key_file_get_string(), guint64,
 
107
                        g_key_file_get_uint64(),
 
108
                        G_KEY_FILE_ERROR_KEY_NOT_FOUND, gconstpointer,
 
109
                        g_assert_true(), g_assert_nonnull(),
 
110
                        g_assert_null(), g_assert_false(),
 
111
                        g_assert_cmpint(), g_assert_cmpuint(),
 
112
                        g_test_skip(), g_assert_cmpstr(),
 
113
                        g_test_init(), g_test_add(), g_test_run(),
 
114
                        GOptionContext, g_option_context_new(),
 
115
                        g_option_context_set_help_enabled(), FALSE,
 
116
                        g_option_context_set_ignore_unknown_options(),
 
117
                        gboolean, GOptionEntry, G_OPTION_ARG_NONE,
 
118
                        g_option_context_add_main_entries(),
 
119
                        g_option_context_parse(),
 
120
                        g_option_context_free(), g_error() */
 
121
#include <sys/un.h>             /* struct sockaddr_un, SUN_LEN */
 
122
#include <sys/socket.h>         /* AF_LOCAL, socket(), PF_LOCAL,
 
123
                                   SOCK_DGRAM, SOCK_NONBLOCK,
 
124
                                   SOCK_CLOEXEC, connect(),
 
125
                                   struct sockaddr, socklen_t,
 
126
                                   shutdown(), SHUT_RD, send(),
 
127
                                   MSG_NOSIGNAL, bind(), recv(),
 
128
                                   socketpair() */
 
129
#include <glob.h>               /* globfree(), glob_t, glob(),
 
130
                                   GLOB_ERR, GLOB_NOSORT, GLOB_MARK,
 
131
                                   GLOB_ABORTED, GLOB_NOMATCH,
 
132
                                   GLOB_NOSPACE */
 
133
 
 
134
/* End of includes */
 
135
 
 
136
/* Start of declarations of private types and functions */
 
137
 
 
138
/* microseconds of CLOCK_MONOTONIC absolute time; 0 means unset */
 
139
typedef uintmax_t mono_microsecs;
 
140
 
 
141
/* "task_queue" - A queue of tasks to be run */
 
142
typedef struct {
 
143
  struct task_struct *tasks;    /* Tasks in this queue */
 
144
  size_t length;                /* Number of tasks */
 
145
  /* Memory allocated for "tasks", in bytes */
 
146
  size_t allocated;             
 
147
  /* Time when this queue should be run, at the latest */
 
148
  mono_microsecs next_run;
 
149
} __attribute__((designated_init)) task_queue;
 
150
 
 
151
/* "task_func" - A function type for task functions
 
152
 
 
153
   I.e. functions for the code which runs when a task is run, all have
 
154
   this type */
 
155
typedef void (task_func) (const struct task_struct,
 
156
                          task_queue *const)
 
157
  __attribute__((nonnull));
 
158
 
 
159
/* "buffer" - A data buffer for a growing array of bytes
 
160
 
 
161
   Used for the "password" variable */
 
162
typedef struct {
 
163
  char *data;
 
164
  size_t length;
 
165
  size_t allocated;
 
166
} __attribute__((designated_init)) buffer;
 
167
 
 
168
/* "string_set" - A set type which can contain strings
 
169
 
 
170
   Used by the "cancelled_filenames" variable */
 
171
typedef struct {
 
172
  char *argz;                   /* Do not access these except in */
 
173
  size_t argz_len;              /* the string_set_* functions */
 
174
} __attribute__((designated_init)) string_set;
 
175
 
 
176
/* "task_context" - local variables for tasks
 
177
 
 
178
   This data structure distinguishes between different tasks which are
 
179
   using the same function.  This data structure is passed to every
 
180
   task function when each task is run.
 
181
 
 
182
   Note that not every task uses every struct member. */
 
183
typedef struct task_struct {
 
184
  task_func *const func;         /* The function run by this task */
 
185
  char *const question_filename; /* The question file */
 
186
  const pid_t pid;               /* Mandos client process ID */
 
187
  const int epoll_fd;            /* The epoll set file descriptor */
 
188
  bool *const quit_now;          /* Set to true on fatal errors */
 
189
  const int fd;                  /* General purpose file descriptor */
 
190
  bool *const mandos_client_exited; /* Set true when client exits */
 
191
  buffer *const password;           /* As read from client process */
 
192
  bool *const password_is_read;     /* "password" is done growing */
 
193
  char *filename;                   /* General purpose file name */
 
194
  /* A set of strings of all the file names of questions which have
 
195
     been cancelled for any reason; tasks pertaining to these question
 
196
     files should not be run */
 
197
  string_set *const cancelled_filenames;
 
198
  const mono_microsecs notafter; /* "NotAfter" from question file */
 
199
  /* Updated before each queue run; is compared with queue.next_run */
 
200
  const mono_microsecs *const current_time;
 
201
} __attribute__((designated_init)) task_context;
 
202
 
 
203
/* Declare all our functions here so we can define them in any order
 
204
   below.  Note: test functions are *not* declared here, they are
 
205
   declared in the test section. */
 
206
__attribute__((warn_unused_result))
 
207
static bool should_only_run_tests(int *, char **[]);
 
208
__attribute__((warn_unused_result, cold))
 
209
static bool run_tests(int, char *[]);
 
210
static void handle_sigchld(__attribute__((unused)) int sig){}
 
211
__attribute__((warn_unused_result, malloc))
 
212
task_queue *create_queue(void);
 
213
__attribute__((nonnull, warn_unused_result))
 
214
bool add_to_queue(task_queue *const, const task_context);
 
215
__attribute__((nonnull))
 
216
void cleanup_task(const task_context *const);
 
217
__attribute__((nonnull))
 
218
void cleanup_queue(task_queue *const *const);
 
219
__attribute__((pure, nonnull, warn_unused_result))
 
220
bool queue_has_question(const task_queue *const);
 
221
__attribute__((nonnull))
 
222
void cleanup_close(const int *const);
 
223
__attribute__((nonnull))
 
224
void cleanup_string(char *const *const);
 
225
__attribute__((nonnull))
 
226
void cleanup_buffer(buffer *const);
 
227
__attribute__((pure, nonnull, warn_unused_result))
 
228
bool string_set_contains(const string_set, const char *const);
 
229
__attribute__((nonnull, warn_unused_result))
 
230
bool string_set_add(string_set *const, const char *const);
 
231
__attribute__((nonnull))
 
232
void string_set_clear(string_set *);
 
233
void string_set_swap(string_set *const, string_set *const);
 
234
__attribute__((nonnull, warn_unused_result))
 
235
bool start_mandos_client(task_queue *const, const int, bool *const,
 
236
                         bool *const, buffer *const, bool *const,
 
237
                         const struct sigaction *const,
 
238
                         const sigset_t, const char *const,
 
239
                         const uid_t, const gid_t,
 
240
                         const char *const *const);
 
241
__attribute__((nonnull))
 
242
task_func wait_for_mandos_client_exit;
 
243
__attribute__((nonnull))
 
244
task_func read_mandos_client_output;
 
245
__attribute__((warn_unused_result))
 
246
bool add_inotify_dir_watch(task_queue *const, const int, bool *const,
 
247
                           buffer *const, const char *const,
 
248
                           string_set *, const mono_microsecs *const,
 
249
                           bool *const, bool *const);
 
250
__attribute__((nonnull))
 
251
task_func read_inotify_event;
 
252
__attribute__((nonnull))
 
253
task_func open_and_parse_question;
 
254
__attribute__((nonnull))
 
255
task_func cancel_old_question;
 
256
__attribute__((nonnull))
 
257
task_func connect_question_socket;
 
258
__attribute__((nonnull))
 
259
task_func send_password_to_socket;
 
260
__attribute__((warn_unused_result))
 
261
bool add_existing_questions(task_queue *const, const int,
 
262
                            buffer *const, string_set *,
 
263
                            const mono_microsecs *const,
 
264
                            bool *const, bool *const,
 
265
                            const char *const);
 
266
__attribute__((nonnull, warn_unused_result))
 
267
bool wait_for_event(const int, const mono_microsecs,
 
268
                    const mono_microsecs);
 
269
bool run_queue(task_queue **const, string_set *const, bool *const);
 
270
bool clear_all_fds_from_epoll_set(const int);
 
271
mono_microsecs get_current_time(void);
 
272
__attribute__((nonnull, warn_unused_result))
 
273
bool setup_signal_handler(struct sigaction *const);
 
274
__attribute__((nonnull))
 
275
bool restore_signal_handler(const struct sigaction *const);
 
276
__attribute__((nonnull, warn_unused_result))
 
277
bool block_sigchld(sigset_t *const);
 
278
__attribute__((nonnull))
 
279
bool restore_sigmask(const sigset_t *const);
 
280
__attribute__((nonnull))
 
281
bool parse_arguments(int, char *[], const bool, char **, char **,
 
282
                     uid_t *const , gid_t *const, char **, size_t *);
 
283
 
 
284
/* End of declarations of private types and functions */
 
285
 
 
286
/* Start of "main" section; this section LACKS TESTS!
 
287
 
 
288
   Code here should be as simple as possible. */
 
289
 
 
290
/* These are required to be global by Argp */
 
291
const char *argp_program_version = "password-agent " VERSION;
 
292
const char *argp_program_bug_address = "<mandos@recompile.se>";
 
293
 
 
294
int main(int argc, char *argv[]){
 
295
 
 
296
  /* If the --test option is passed, skip all normal operations and
 
297
     instead only run the run_tests() function, which also does all
 
298
     its own option parsing, so we don't have to do anything here. */
 
299
  if(should_only_run_tests(&argc, &argv)){
 
300
    if(run_tests(argc, argv)){
 
301
      return EXIT_SUCCESS;      /* All tests successful */
 
302
    }
 
303
    return EXIT_FAILURE;        /* Some test(s) failed */
 
304
  }
 
305
 
 
306
  __attribute__((cleanup(cleanup_string)))
 
307
    char *agent_directory = NULL;
 
308
 
 
309
  __attribute__((cleanup(cleanup_string)))
 
310
    char *helper_directory = NULL;
 
311
 
 
312
  uid_t user = 0;
 
313
  gid_t group = 0;
 
314
 
 
315
  __attribute__((cleanup(cleanup_string)))
 
316
    char *mandos_argz = NULL;
 
317
  size_t mandos_argz_length = 0;
 
318
 
 
319
  if(not parse_arguments(argc, argv, true, &agent_directory,
 
320
                         &helper_directory, &user, &group,
 
321
                         &mandos_argz, &mandos_argz_length)){
 
322
    /* This should never happen, since "true" is passed as the third
 
323
       argument to parse_arguments() above, which should make
 
324
       argp_parse() call exit() if any parsing error occurs. */
 
325
    error(EX_USAGE, errno, "Failed to parse arguments");
 
326
  }
 
327
 
 
328
  const char default_agent_directory[] = "/run/systemd/ask-password";
 
329
  const char default_helper_directory[]
 
330
    = "/lib/mandos/plugin-helpers";
 
331
  const char *const default_argv[]
 
332
    = {"/lib/mandos/plugins.d/mandos-client", NULL };
 
333
 
 
334
  /* Set variables to default values if unset */
 
335
  if(agent_directory == NULL){
 
336
    agent_directory = strdup(default_agent_directory);
 
337
    if(agent_directory == NULL){
 
338
      error(EX_OSERR, errno, "Failed strdup()");
 
339
    }
 
340
  }
 
341
  if(helper_directory == NULL){
 
342
    helper_directory = strdup(default_helper_directory);
 
343
    if(helper_directory == NULL){
 
344
      error(EX_OSERR, errno, "Failed strdup()");
 
345
    }
 
346
  }
 
347
  if(user == 0){
 
348
    user = 65534;               /* nobody */
 
349
  }
 
350
  if(group == 0){
 
351
    group = 65534;              /* nogroup */
 
352
  }
 
353
  /* If parse_opt did not create an argz vector, create one with
 
354
     default values */
 
355
  if(mandos_argz == NULL){
 
356
#ifdef __GNUC__
 
357
#pragma GCC diagnostic push
 
358
    /* argz_create() takes a non-const argv for some unknown reason -
 
359
       argz_create() isn't modifying the strings, just copying them.
 
360
       Therefore, this cast to non-const should be safe. */
 
361
#pragma GCC diagnostic ignored "-Wcast-qual"
 
362
#endif
 
363
    errno = argz_create((char *const *)default_argv, &mandos_argz,
 
364
                        &mandos_argz_length);
 
365
#ifdef __GNUC__
 
366
#pragma GCC diagnostic pop
 
367
#endif
 
368
    if(errno != 0){
 
369
      error(EX_OSERR, errno, "Failed argz_create()");
 
370
    }
 
371
  }
 
372
  /* Use argz vector to create a normal argv, usable by execv() */
 
373
 
 
374
  char **mandos_argv = malloc((argz_count(mandos_argz,
 
375
                                          mandos_argz_length)
 
376
                               + 1) * sizeof(char *));
 
377
  if(mandos_argv == NULL){
 
378
    error_t saved_errno = errno;
 
379
    free(mandos_argz);
 
380
    error(EX_OSERR, saved_errno, "Failed malloc()");
 
381
  }
 
382
  argz_extract(mandos_argz, mandos_argz_length, mandos_argv);
 
383
 
 
384
  sigset_t orig_sigmask;
 
385
  if(not block_sigchld(&orig_sigmask)){
 
386
    return EX_OSERR;
 
387
  }
 
388
 
 
389
  struct sigaction old_sigchld_action;
 
390
  if(not setup_signal_handler(&old_sigchld_action)){
 
391
    return EX_OSERR;
 
392
  }
 
393
 
 
394
  mono_microsecs current_time = 0;
 
395
 
 
396
  bool mandos_client_exited = false;
 
397
  bool quit_now = false;
 
398
  __attribute__((cleanup(cleanup_close)))
 
399
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
400
  if(epoll_fd < 0){
 
401
    error(EX_OSERR, errno, "Failed to create epoll set fd");
 
402
  }
 
403
  __attribute__((cleanup(cleanup_queue)))
 
404
    task_queue *queue = create_queue();
 
405
  if(queue == NULL){
 
406
    error(EX_OSERR, errno, "Failed to create task queue");
 
407
  }
 
408
 
 
409
  __attribute__((cleanup(cleanup_buffer)))
 
410
    buffer password = {};
 
411
  bool password_is_read = false;
 
412
 
 
413
  __attribute__((cleanup(string_set_clear)))
 
414
    string_set cancelled_filenames = {};
 
415
 
 
416
  /* Add tasks to queue */
 
417
  if(not start_mandos_client(queue, epoll_fd, &mandos_client_exited,
 
418
                             &quit_now, &password, &password_is_read,
 
419
                             &old_sigchld_action, orig_sigmask,
 
420
                             helper_directory, user, group,
 
421
                             (const char *const *)mandos_argv)){
 
422
    return EX_OSERR;            /* Error has already been printed */
 
423
  }
 
424
  /* These variables were only for start_mandos_client() and are not
 
425
     needed anymore */
 
426
  free(mandos_argv);
 
427
  free(mandos_argz);
 
428
  mandos_argz = NULL;
 
429
  if(not add_inotify_dir_watch(queue, epoll_fd, &quit_now, &password,
 
430
                               agent_directory, &cancelled_filenames,
 
431
                               &current_time, &mandos_client_exited,
 
432
                               &password_is_read)){
 
433
    switch(errno){              /* Error has already been printed */
 
434
    case EACCES:
 
435
    case ENAMETOOLONG:
 
436
    case ENOENT:
 
437
    case ENOTDIR:
 
438
      return EX_OSFILE;
 
439
    default:
 
440
      return EX_OSERR;
 
441
    }
 
442
  }
 
443
  if(not add_existing_questions(queue, epoll_fd, &password,
 
444
                                &cancelled_filenames, &current_time,
 
445
                                &mandos_client_exited,
 
446
                                &password_is_read, agent_directory)){
 
447
    return EXIT_FAILURE;        /* Error has already been printed */
 
448
  }
 
449
 
 
450
  /* Run queue */
 
451
  do {
 
452
    current_time = get_current_time();
 
453
    if(not wait_for_event(epoll_fd, queue->next_run, current_time)){
 
454
      const error_t saved_errno = errno;
 
455
      error(EXIT_FAILURE, saved_errno, "Failure while waiting for"
 
456
            " events");
 
457
    }
 
458
 
 
459
    current_time = get_current_time();
 
460
    if(not run_queue(&queue, &cancelled_filenames, &quit_now)){
 
461
      const error_t saved_errno = errno;
 
462
      error(EXIT_FAILURE, saved_errno, "Failure while running queue");
 
463
    }
 
464
 
 
465
    /*  When no tasks about questions are left in the queue, break out
 
466
        of the loop (and implicitly exit the program) */
 
467
  } while(queue_has_question(queue));
 
468
 
 
469
  restore_signal_handler(&old_sigchld_action);
 
470
  restore_sigmask(&orig_sigmask);
 
471
 
 
472
  return EXIT_SUCCESS;
 
473
}
 
474
 
 
475
__attribute__((warn_unused_result))
 
476
mono_microsecs get_current_time(void){
 
477
  struct timespec currtime;
 
478
  if(clock_gettime(CLOCK_MONOTONIC, &currtime) != 0){
 
479
    error(0, errno, "Failed to get current time");
 
480
    return 0;
 
481
  }
 
482
  return ((mono_microsecs)currtime.tv_sec * 1000000) /* seconds */
 
483
    + ((mono_microsecs)currtime.tv_nsec / 1000);     /* nanoseconds */
 
484
}
 
485
 
 
486
/* End of "main" section */
 
487
 
 
488
/* Start of regular code section; ALL this code has tests */
 
489
 
 
490
__attribute__((nonnull))
 
491
bool parse_arguments(int argc, char *argv[], const bool exit_failure,
 
492
                     char **agent_directory, char **helper_directory,
 
493
                     uid_t *const user, gid_t *const group,
 
494
                     char **mandos_argz, size_t *mandos_argz_length){
 
495
 
 
496
  const struct argp_option options[] = {
 
497
    { .name="agent-directory",.key='d', .arg="DIRECTORY",
 
498
      .doc="Systemd password agent directory" },
 
499
    { .name="helper-directory",.key=128, .arg="DIRECTORY",
 
500
      .doc="Mandos Client password helper directory" },
 
501
    { .name="plugin-helper-dir", .key=129, /* From plugin-runner */
 
502
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
503
    { .name="user", .key='u', .arg="USERID",
 
504
      .doc="User ID the Mandos Client will use as its unprivileged"
 
505
      " user" },
 
506
    { .name="userid", .key=130, /* From plugin--runner */
 
507
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
508
    { .name="group", .key='g', .arg="GROUPID",
 
509
      .doc="Group ID the Mandos Client will use as its unprivileged"
 
510
      " group" },
 
511
    { .name="groupid", .key=131, /* From plugin--runner */
 
512
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
513
    { .name="test", .key=255, /* See should_only_run_tests() */
 
514
      .doc="Skip normal operation, and only run self-tests.  See"
 
515
      " --test --help.", .group=10, },
 
516
    { NULL },
 
517
  };
 
518
 
 
519
  __attribute__((nonnull(3)))
 
520
    error_t parse_opt(int key, char *arg, struct argp_state *state){
 
521
    errno = 0;
 
522
    switch(key){
 
523
    case 'd':                   /* --agent-directory */
 
524
      *agent_directory = strdup(arg);
 
525
      break;
 
526
    case 128:                   /* --helper-directory */
 
527
    case 129:                   /* --plugin-helper-dir */
 
528
      *helper_directory = strdup(arg);
 
529
      break;
 
530
    case 'u':                   /* --user */
 
531
    case 130:                   /* --userid */
 
532
      {
 
533
        char *tmp;
 
534
        uintmax_t tmp_id = 0;
 
535
        errno = 0;
 
536
        tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
 
537
        if(errno != 0 or tmp == arg or *tmp != '\0'
 
538
           or tmp_id != (uid_t)tmp_id or (uid_t)tmp_id == 0){
 
539
          return ARGP_ERR_UNKNOWN;
 
540
        }
 
541
        *user = (uid_t)tmp_id;
 
542
        errno = 0;
 
543
        break;
 
544
      }
 
545
    case 'g':                   /* --group */
 
546
    case 131:                   /* --groupid */
 
547
      {
 
548
        char *tmp;
 
549
        uintmax_t tmp_id = 0;
 
550
        errno = 0;
 
551
        tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
 
552
        if(errno != 0 or tmp == arg or *tmp != '\0'
 
553
           or tmp_id != (gid_t)tmp_id or (gid_t)tmp_id == 0){
 
554
          return ARGP_ERR_UNKNOWN;
 
555
        }
 
556
        *group = (gid_t)tmp_id;
 
557
        errno = 0;
 
558
        break;
 
559
      }
 
560
    case ARGP_KEY_ARGS:
 
561
      /* Copy arguments into argz vector */
 
562
      return argz_create(state->argv + state->next, mandos_argz,
 
563
                         mandos_argz_length);
 
564
    default:
 
565
      return ARGP_ERR_UNKNOWN;
 
566
    }
 
567
    return errno;
 
568
  }
 
569
 
 
570
  const struct argp argp = {
 
571
    .options=options,
 
572
    .parser=parse_opt,
 
573
    .args_doc="[MANDOS_CLIENT [OPTION...]]\n--test",
 
574
    .doc = "Mandos password agent -- runs Mandos client as a"
 
575
    " systemd password agent",
 
576
  };
 
577
 
 
578
  errno = argp_parse(&argp, argc, argv,
 
579
                     exit_failure ? 0 : ARGP_NO_EXIT, NULL, NULL);
 
580
 
 
581
  return errno == 0;
 
582
}
 
583
 
 
584
__attribute__((nonnull, warn_unused_result))
 
585
bool block_sigchld(sigset_t *const orig_sigmask){
 
586
  sigset_t sigchld_sigmask;
 
587
  if(sigemptyset(&sigchld_sigmask) < 0){
 
588
    error(0, errno, "Failed to empty signal set");
 
589
    return false;
 
590
  }
 
591
  if(sigaddset(&sigchld_sigmask, SIGCHLD) < 0){
 
592
    error(0, errno, "Failed to add SIGCHLD to signal set");
 
593
    return false;
 
594
  }
 
595
  if(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask, orig_sigmask) != 0){
 
596
    error(0, errno, "Failed to block SIGCHLD signal");
 
597
    return false;
 
598
  }
 
599
  return true;
 
600
}
 
601
 
 
602
__attribute__((nonnull, warn_unused_result, const))
 
603
bool restore_sigmask(const sigset_t *const orig_sigmask){
 
604
  if(pthread_sigmask(SIG_SETMASK, orig_sigmask, NULL) != 0){
 
605
    error(0, errno, "Failed to restore blocked signals");
 
606
    return false;
 
607
  }
 
608
  return true;
 
609
}
 
610
 
 
611
__attribute__((nonnull, warn_unused_result))
 
612
bool setup_signal_handler(struct sigaction *const old_sigchld_action){
 
613
  struct sigaction sigchld_action = {
 
614
    .sa_handler=handle_sigchld,
 
615
    .sa_flags=SA_RESTART | SA_NOCLDSTOP,
 
616
  };
 
617
  /* Set all signals in "sa_mask" struct member; this makes all
 
618
     signals automatically blocked during signal handler */
 
619
  if(sigfillset(&sigchld_action.sa_mask) != 0){
 
620
    error(0, errno, "Failed to do sigfillset()");
 
621
    return false;
 
622
  }
 
623
  if(sigaction(SIGCHLD, &sigchld_action, old_sigchld_action) != 0){
 
624
    error(0, errno, "Failed to set SIGCHLD signal handler");
 
625
    return false;
 
626
  }
 
627
  return true;
 
628
}
 
629
 
 
630
__attribute__((nonnull, warn_unused_result))
 
631
bool restore_signal_handler(const struct sigaction *const
 
632
                            old_sigchld_action){
 
633
  if(sigaction(SIGCHLD, old_sigchld_action, NULL) != 0){
 
634
    error(0, errno, "Failed to restore signal handler");
 
635
    return false;
 
636
  }
 
637
  return true;
 
638
}
 
639
 
 
640
__attribute__((warn_unused_result, malloc))
 
641
task_queue *create_queue(void){
 
642
  task_queue *queue = malloc(sizeof(task_queue));
 
643
  if(queue){
 
644
    queue->tasks = NULL;
 
645
    queue->length = 0;
 
646
    queue->allocated = 0;
 
647
    queue->next_run = 0;
 
648
  }
 
649
  return queue;
 
650
}
 
651
 
 
652
__attribute__((nonnull, warn_unused_result))
 
653
bool add_to_queue(task_queue *const queue, const task_context task){
 
654
  const size_t needed_size = sizeof(task_context)*(queue->length + 1);
 
655
  if(needed_size > (queue->allocated)){
 
656
    task_context *const new_tasks = realloc(queue->tasks,
 
657
                                            needed_size);
 
658
    if(new_tasks == NULL){
 
659
      error(0, errno, "Failed to allocate %" PRIuMAX
 
660
            " bytes for queue->tasks", (uintmax_t)needed_size);
 
661
      return false;
 
662
    }
 
663
    queue->tasks = new_tasks;
 
664
    queue->allocated = needed_size;
 
665
  }
 
666
  /* Using memcpy here is necessary because doing */
 
667
  /* queue->tasks[queue->length++] = task; */
 
668
  /* would violate const-ness of task members */
 
669
  memcpy(&(queue->tasks[queue->length++]), &task,
 
670
         sizeof(task_context));
 
671
  return true;
 
672
}
 
673
 
 
674
__attribute__((nonnull))
 
675
void cleanup_task(const task_context *const task){
 
676
  const error_t saved_errno = errno;
 
677
  /* free and close all task data */
 
678
  free(task->question_filename);
 
679
  if(task->filename != task->question_filename){
 
680
    free(task->filename);
 
681
  }
 
682
  if(task->pid > 0){
 
683
    kill(task->pid, SIGTERM);
 
684
  }
 
685
  if(task->fd > 0){
 
686
    close(task->fd);
 
687
  }
 
688
  errno = saved_errno;
 
689
}
 
690
 
 
691
__attribute__((nonnull))
 
692
void free_queue(task_queue *const queue){
 
693
  free(queue->tasks);
 
694
  free(queue);
 
695
}
 
696
 
 
697
__attribute__((nonnull))
 
698
void cleanup_queue(task_queue *const *const queue){
 
699
  if(*queue == NULL){
 
700
    return;
 
701
  }
 
702
  for(size_t i = 0; i < (*queue)->length; i++){
 
703
    const task_context *const task = ((*queue)->tasks)+i;
 
704
    cleanup_task(task);
 
705
  }
 
706
  free_queue(*queue);
 
707
}
 
708
 
 
709
__attribute__((pure, nonnull, warn_unused_result))
 
710
bool queue_has_question(const task_queue *const queue){
 
711
  for(size_t i=0; i < queue->length; i++){
 
712
    if(queue->tasks[i].question_filename != NULL){
 
713
      return true;
 
714
    }
 
715
  }
 
716
  return false;
 
717
}
 
718
 
 
719
__attribute__((nonnull))
 
720
void cleanup_close(const int *const fd){
 
721
  const error_t saved_errno = errno;
 
722
  close(*fd);
 
723
  errno = saved_errno;
 
724
}
 
725
 
 
726
__attribute__((nonnull))
 
727
void cleanup_string(char *const *const ptr){
 
728
  free(*ptr);
 
729
}
 
730
 
 
731
__attribute__((nonnull))
 
732
void cleanup_buffer(buffer *buf){
 
733
  if(buf->allocated > 0){
 
734
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
735
    explicit_bzero(buf->data, buf->allocated);
 
736
#else
 
737
    memset(buf->data, '\0', buf->allocated);
 
738
#endif
 
739
  }
 
740
  if(buf->data != NULL){
 
741
    if(munlock(buf->data, buf->allocated) != 0){
 
742
      error(0, errno, "Failed to unlock memory of old buffer");
 
743
    }
 
744
    free(buf->data);
 
745
    buf->data = NULL;
 
746
  }
 
747
  buf->length = 0;
 
748
  buf->allocated = 0;
 
749
}
 
750
 
 
751
__attribute__((pure, nonnull, warn_unused_result))
 
752
bool string_set_contains(const string_set set, const char *const str){
 
753
  for(const char *s = set.argz; s != NULL and set.argz_len > 0;
 
754
      s = argz_next(set.argz, set.argz_len, s)){
 
755
    if(strcmp(s, str) == 0){
 
756
      return true;
 
757
    }
 
758
  }
 
759
  return false;
 
760
}
 
761
 
 
762
__attribute__((nonnull, warn_unused_result))
 
763
bool string_set_add(string_set *const set, const char *const str){
 
764
  if(string_set_contains(*set, str)){
 
765
    return true;
 
766
  }
 
767
  error_t error = argz_add(&set->argz, &set->argz_len, str);
 
768
  if(error == 0){
 
769
    return true;
 
770
  }
 
771
  errno = error;
 
772
  return false;
 
773
}
 
774
 
 
775
__attribute__((nonnull))
 
776
void string_set_clear(string_set *set){
 
777
  free(set->argz);
 
778
  set->argz = NULL;
 
779
  set->argz_len = 0;
 
780
}
 
781
 
 
782
__attribute__((nonnull))
 
783
void string_set_swap(string_set *const set1, string_set *const set2){
 
784
  /* Swap contents of two string sets */
 
785
  {
 
786
    char *const tmp_argz = set1->argz;
 
787
    set1->argz = set2->argz;
 
788
    set2->argz = tmp_argz;
 
789
  }
 
790
  {
 
791
    const size_t tmp_argz_len = set1->argz_len;
 
792
    set1->argz_len = set2->argz_len;
 
793
    set2->argz_len = tmp_argz_len;
 
794
  }
 
795
}
 
796
 
 
797
__attribute__((nonnull, warn_unused_result))
 
798
bool start_mandos_client(task_queue *const queue,
 
799
                         const int epoll_fd,
 
800
                         bool *const mandos_client_exited,
 
801
                         bool *const quit_now, buffer *const password,
 
802
                         bool *const password_is_read,
 
803
                         const struct sigaction *const
 
804
                         old_sigchld_action, const sigset_t sigmask,
 
805
                         const char *const helper_directory,
 
806
                         const uid_t user, const gid_t group,
 
807
                         const char *const *const argv){
 
808
  int pipefds[2];
 
809
  if(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK) != 0){
 
810
    error(0, errno, "Failed to pipe2(..., O_CLOEXEC | O_NONBLOCK)");
 
811
    return false;
 
812
  }
 
813
 
 
814
  const pid_t pid = fork();
 
815
  if(pid == 0){
 
816
    if(not restore_signal_handler(old_sigchld_action)){
 
817
      _exit(EXIT_FAILURE);
 
818
    }
 
819
    if(not restore_sigmask(&sigmask)){
 
820
      _exit(EXIT_FAILURE);
 
821
    }
 
822
    if(close(pipefds[0]) != 0){
 
823
      error(0, errno, "Failed to close() parent pipe fd");
 
824
      _exit(EXIT_FAILURE);
 
825
    }
 
826
    if(dup2(pipefds[1], STDOUT_FILENO) == -1){
 
827
      error(0, errno, "Failed to dup2() pipe fd to stdout");
 
828
      _exit(EXIT_FAILURE);
 
829
    }
 
830
    if(close(pipefds[1]) != 0){
 
831
      error(0, errno, "Failed to close() old child pipe fd");
 
832
      _exit(EXIT_FAILURE);
 
833
    }
 
834
    if(setenv("MANDOSPLUGINHELPERDIR", helper_directory, 1) != 0){
 
835
      error(0, errno, "Failed to setenv(\"MANDOSPLUGINHELPERDIR\","
 
836
            " \"%s\", 1)", helper_directory);
 
837
      _exit(EXIT_FAILURE);
 
838
    }
 
839
    if(group != 0 and setresgid(group, 0, 0) == -1){
 
840
      error(0, errno, "Failed to setresgid(-1, %" PRIuMAX ", %"
 
841
            PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
 
842
      _exit(EXIT_FAILURE);
 
843
    }
 
844
    if(user != 0 and setresuid(user, 0, 0) == -1){
 
845
      error(0, errno, "Failed to setresuid(-1, %" PRIuMAX ", %"
 
846
            PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
 
847
      _exit(EXIT_FAILURE);
 
848
    }
 
849
#ifdef __GNUC__
 
850
#pragma GCC diagnostic push
 
851
    /* For historical reasons, the "argv" argument to execv() is not
 
852
       const, but it is safe to override this. */
 
853
#pragma GCC diagnostic ignored "-Wcast-qual"
 
854
#endif
 
855
    execv(argv[0], (char **)argv);
 
856
#ifdef __GNUC__
 
857
#pragma GCC diagnostic pop
 
858
#endif
 
859
    error(0, errno, "execv(\"%s\", ...) failed", argv[0]);
 
860
    _exit(EXIT_FAILURE);
 
861
  }
 
862
  close(pipefds[1]);
 
863
 
 
864
  if(not add_to_queue(queue, (task_context){
 
865
        .func=wait_for_mandos_client_exit,
 
866
        .pid=pid,
 
867
        .mandos_client_exited=mandos_client_exited,
 
868
        .quit_now=quit_now,
 
869
      })){
 
870
    error(0, errno, "Failed to add wait_for_mandos_client to queue");
 
871
    close(pipefds[0]);
 
872
    return false;
 
873
  }
 
874
 
 
875
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, pipefds[0],
 
876
                            &(struct epoll_event)
 
877
                            { .events=EPOLLIN | EPOLLRDHUP });
 
878
  if(ret != 0 and errno != EEXIST){
 
879
    error(0, errno, "Failed to add file descriptor to epoll set");
 
880
    close(pipefds[0]);
 
881
    return false;
 
882
  }
 
883
 
 
884
  return add_to_queue(queue, (task_context){
 
885
      .func=read_mandos_client_output,
 
886
      .epoll_fd=epoll_fd,
 
887
      .fd=pipefds[0],
 
888
      .quit_now=quit_now,
 
889
      .password=password,
 
890
      .password_is_read=password_is_read,
 
891
    });
 
892
}
 
893
 
 
894
__attribute__((nonnull))
 
895
void wait_for_mandos_client_exit(const task_context task,
 
896
                                 task_queue *const queue){
 
897
  const pid_t pid = task.pid;
 
898
  bool *const mandos_client_exited = task.mandos_client_exited;
 
899
  bool *const quit_now = task.quit_now;
 
900
 
 
901
  int status;
 
902
  switch(waitpid(pid, &status, WNOHANG)){
 
903
  case 0:                       /* Not exited yet */
 
904
    if(not add_to_queue(queue, task)){
 
905
      error(0, errno, "Failed to add myself to queue");
 
906
      *quit_now = true;
 
907
    }
 
908
    break;
 
909
  case -1:                      /* Error */
 
910
    error(0, errno, "waitpid(%" PRIdMAX ") failed", (intmax_t)pid);
 
911
    if(errno != ECHILD){
 
912
      kill(pid, SIGTERM);
 
913
    }
 
914
    *quit_now = true;
 
915
    break;
 
916
  default:                      /* Has exited */
 
917
    *mandos_client_exited = true;
 
918
    if((not WIFEXITED(status))
 
919
       or (WEXITSTATUS(status) != EXIT_SUCCESS)){
 
920
      error(0, 0, "Mandos client failed or was killed");
 
921
      *quit_now = true;
 
922
    }
 
923
  }
 
924
}
 
925
 
 
926
__attribute__((nonnull))
 
927
void read_mandos_client_output(const task_context task,
 
928
                               task_queue *const queue){
 
929
  buffer *const password = task.password;
 
930
  bool *const quit_now = task.quit_now;
 
931
  bool *const password_is_read = task.password_is_read;
 
932
  const int fd = task.fd;
 
933
  const int epoll_fd = task.epoll_fd;
 
934
 
 
935
  const size_t new_potential_size = (password->length + PIPE_BUF);
 
936
  if(password->allocated < new_potential_size){
 
937
    char *const new_buffer = calloc(new_potential_size, 1);
 
938
    if(new_buffer == NULL){
 
939
      error(0, errno, "Failed to allocate %" PRIuMAX
 
940
            " bytes for password", (uintmax_t)new_potential_size);
 
941
      *quit_now = true;
 
942
      close(fd);
 
943
      return;
 
944
    }
 
945
    if(mlock(new_buffer, new_potential_size) != 0){
 
946
      /* Warn but do not treat as fatal error */
 
947
      if(errno != EPERM and errno != ENOMEM){
 
948
        error(0, errno, "Failed to lock memory for password");
 
949
      }
 
950
    }
 
951
    if(password->length > 0){
 
952
      memcpy(new_buffer, password->data, password->length);
 
953
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
954
      explicit_bzero(password->data, password->allocated);
 
955
#else
 
956
      memset(password->data, '\0', password->allocated);
 
957
#endif
 
958
    }
 
959
    if(password->data != NULL){
 
960
      if(munlock(password->data, password->allocated) != 0){
 
961
        error(0, errno, "Failed to unlock memory of old buffer");
 
962
      }
 
963
      free(password->data);
 
964
    }
 
965
    password->data = new_buffer;
 
966
    password->allocated = new_potential_size;
 
967
  }
 
968
 
 
969
  const ssize_t read_length = read(fd, password->data
 
970
                                   + password->length, PIPE_BUF);
 
971
 
 
972
  if(read_length == 0){ /* EOF */
 
973
    *password_is_read = true;
 
974
    close(fd);
 
975
    return;
 
976
  }
 
977
  if(read_length < 0 and errno != EAGAIN){ /* Actual error */
 
978
    error(0, errno, "Failed to read password from Mandos client");
 
979
    *quit_now = true;
 
980
    close(fd);
 
981
    return;
 
982
  }
 
983
  if(read_length > 0){          /* Data has been read */
 
984
    password->length += (size_t)read_length;
 
985
  }
 
986
 
 
987
  /* Either data was read, or EAGAIN was indicated, meaning no data
 
988
     available yet */
 
989
 
 
990
  /* Re-add the fd to the epoll set */
 
991
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
992
                            &(struct epoll_event)
 
993
                            { .events=EPOLLIN | EPOLLRDHUP });
 
994
  if(ret != 0 and errno != EEXIST){
 
995
    error(0, errno, "Failed to re-add file descriptor to epoll set");
 
996
    *quit_now = true;
 
997
    close(fd);
 
998
    return;
 
999
  }
 
1000
 
 
1001
  /* Re-add myself to the queue */
 
1002
  if(not add_to_queue(queue, task)){
 
1003
    error(0, errno, "Failed to add myself to queue");
 
1004
    *quit_now = true;
 
1005
    close(fd);
 
1006
  }
 
1007
}
 
1008
 
 
1009
__attribute__((nonnull, warn_unused_result))
 
1010
bool add_inotify_dir_watch(task_queue *const queue,
 
1011
                           const int epoll_fd, bool *const quit_now,
 
1012
                           buffer *const password,
 
1013
                           const char *const dir,
 
1014
                           string_set *cancelled_filenames,
 
1015
                           const mono_microsecs *const current_time,
 
1016
                           bool *const mandos_client_exited,
 
1017
                           bool *const password_is_read){
 
1018
  const int fd = inotify_init1(IN_NONBLOCK | IN_CLOEXEC);
 
1019
  if(fd == -1){
 
1020
    error(0, errno, "Failed to create inotify instance");
 
1021
    return false;
 
1022
  }
 
1023
 
 
1024
  if(inotify_add_watch(fd, dir, IN_CLOSE_WRITE | IN_MOVED_TO
 
1025
                       | IN_MOVED_FROM| IN_DELETE | IN_EXCL_UNLINK
 
1026
                       | IN_ONLYDIR)
 
1027
     == -1){
 
1028
    error(0, errno, "Failed to create inotify watch on %s", dir);
 
1029
    return false;
 
1030
  }
 
1031
 
 
1032
  /* Add the inotify fd to the epoll set */
 
1033
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1034
                            &(struct epoll_event)
 
1035
                            { .events=EPOLLIN | EPOLLRDHUP });
 
1036
  if(ret != 0 and errno != EEXIST){
 
1037
    error(0, errno, "Failed to add file descriptor to epoll set");
 
1038
    close(fd);
 
1039
    return false;
 
1040
  }
 
1041
 
 
1042
  const task_context read_inotify_event_task = {
 
1043
    .func=read_inotify_event,
 
1044
    .epoll_fd=epoll_fd,
 
1045
    .quit_now=quit_now,
 
1046
    .password=password,
 
1047
    .fd=fd,
 
1048
    .filename=strdup(dir),
 
1049
    .cancelled_filenames=cancelled_filenames,
 
1050
    .current_time=current_time,
 
1051
    .mandos_client_exited=mandos_client_exited,
 
1052
    .password_is_read=password_is_read,
 
1053
  };
 
1054
  if(read_inotify_event_task.filename == NULL){
 
1055
    error(0, errno, "Failed to strdup(\"%s\")", dir);
 
1056
    close(fd);
 
1057
    return false;
 
1058
  }
 
1059
 
 
1060
  return add_to_queue(queue, read_inotify_event_task);
 
1061
}
 
1062
 
 
1063
__attribute__((nonnull))
 
1064
void read_inotify_event(const task_context task,
 
1065
                        task_queue *const queue){
 
1066
  const int fd = task.fd;
 
1067
  const int epoll_fd = task.epoll_fd;
 
1068
  char *const filename = task.filename;
 
1069
  bool *quit_now = task.quit_now;
 
1070
  buffer *const password = task.password;
 
1071
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1072
  const mono_microsecs *const current_time = task.current_time;
 
1073
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1074
  bool *const password_is_read = task.password_is_read;
 
1075
 
 
1076
  /* "sufficient to read at least one event." - inotify(7) */
 
1077
  const size_t ievent_size = (sizeof(struct inotify_event)
 
1078
                              + NAME_MAX + 1);
 
1079
  struct {
 
1080
    struct inotify_event event;
 
1081
    char name_buffer[NAME_MAX + 1];
 
1082
  } ievent_buffer;
 
1083
  struct inotify_event *const ievent = &ievent_buffer.event;
 
1084
 
 
1085
  const ssize_t read_length = read(fd, ievent, ievent_size);
 
1086
  if(read_length == 0){ /* EOF */
 
1087
    error(0, 0, "Got EOF from inotify fd for directory %s", filename);
 
1088
    *quit_now = true;
 
1089
    cleanup_task(&task);
 
1090
    return;
 
1091
  }
 
1092
  if(read_length < 0 and errno != EAGAIN){ /* Actual error */
 
1093
    error(0, errno, "Failed to read from inotify fd for directory %s",
 
1094
          filename);
 
1095
    *quit_now = true;
 
1096
    cleanup_task(&task);
 
1097
    return;
 
1098
  }
 
1099
  if(read_length > 0            /* Data has been read */
 
1100
     and fnmatch("ask.*", ievent->name, FNM_FILE_NAME) == 0){
 
1101
    char *question_filename = NULL;
 
1102
    const ssize_t question_filename_length
 
1103
      = asprintf(&question_filename, "%s/%s", filename, ievent->name);
 
1104
    if(question_filename_length < 0){
 
1105
      error(0, errno, "Failed to create file name from directory name"
 
1106
            " %s and file name %s", filename, ievent->name);
 
1107
    } else {
 
1108
      if(ievent->mask & (IN_CLOSE_WRITE | IN_MOVED_TO)){
 
1109
        if(not add_to_queue(queue, (task_context){
 
1110
              .func=open_and_parse_question,
 
1111
              .epoll_fd=epoll_fd,
 
1112
              .question_filename=question_filename,
 
1113
              .filename=question_filename,
 
1114
              .password=password,
 
1115
              .cancelled_filenames=cancelled_filenames,
 
1116
              .current_time=current_time,
 
1117
              .mandos_client_exited=mandos_client_exited,
 
1118
              .password_is_read=password_is_read,
 
1119
            })){
 
1120
          error(0, errno, "Failed to add open_and_parse_question task"
 
1121
                " for file name %s to queue", filename);
 
1122
        } else {
 
1123
          /* Force the added task (open_and_parse_question) to run
 
1124
             immediately */
 
1125
          queue->next_run = 1;
 
1126
        }
 
1127
      } else if(ievent->mask & (IN_MOVED_FROM | IN_DELETE)){
 
1128
        if(not string_set_add(cancelled_filenames,
 
1129
                              question_filename)){
 
1130
          error(0, errno, "Could not add question %s to"
 
1131
                " cancelled_questions", question_filename);
 
1132
          *quit_now = true;
 
1133
          free(question_filename);
 
1134
          cleanup_task(&task);
 
1135
          return;
 
1136
        }
 
1137
        free(question_filename);
 
1138
      }
 
1139
    }
 
1140
  }
 
1141
 
 
1142
  /* Either data was read, or EAGAIN was indicated, meaning no data
 
1143
     available yet */
 
1144
 
 
1145
  /* Re-add myself to the queue */
 
1146
  if(not add_to_queue(queue, task)){
 
1147
    error(0, errno, "Failed to re-add read_inotify_event(%s) to"
 
1148
          " queue", filename);
 
1149
    *quit_now = true;
 
1150
    cleanup_task(&task);
 
1151
    return;
 
1152
  }
 
1153
 
 
1154
  /* Re-add the fd to the epoll set */
 
1155
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1156
                            &(struct epoll_event)
 
1157
                            { .events=EPOLLIN | EPOLLRDHUP });
 
1158
  if(ret != 0 and errno != EEXIST){
 
1159
    error(0, errno, "Failed to re-add inotify file descriptor %d for"
 
1160
          " directory %s to epoll set", fd, filename);
 
1161
    /* Force the added task (read_inotify_event) to run again, at most
 
1162
       one second from now */
 
1163
    if((queue->next_run == 0)
 
1164
       or (queue->next_run > (*current_time + 1000000))){
 
1165
      queue->next_run = *current_time + 1000000;
 
1166
    }
 
1167
  }
 
1168
}
 
1169
 
 
1170
__attribute__((nonnull))
 
1171
void open_and_parse_question(const task_context task,
 
1172
                             task_queue *const queue){
 
1173
  __attribute__((cleanup(cleanup_string)))
 
1174
    char *question_filename = task.question_filename;
 
1175
  const int epoll_fd = task.epoll_fd;
 
1176
  buffer *const password = task.password;
 
1177
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1178
  const mono_microsecs *const current_time = task.current_time;
 
1179
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1180
  bool *const password_is_read = task.password_is_read;
 
1181
 
 
1182
  /* We use the GLib "Key-value file parser" functions to parse the
 
1183
     question file.  See <https://www.freedesktop.org/wiki/Software
 
1184
     /systemd/PasswordAgents/> for specification of contents */
 
1185
  __attribute__((nonnull))
 
1186
    void cleanup_g_key_file(GKeyFile **key_file){
 
1187
    if(*key_file != NULL){
 
1188
      g_key_file_free(*key_file);
 
1189
    }
 
1190
  }
 
1191
 
 
1192
  __attribute__((cleanup(cleanup_g_key_file)))
 
1193
    GKeyFile *key_file = g_key_file_new();
 
1194
  if(key_file == NULL){
 
1195
    error(0, errno, "Failed g_key_file_new() for \"%s\"",
 
1196
          question_filename);
 
1197
    return;
 
1198
  }
 
1199
  GError *glib_error = NULL;
 
1200
  if(g_key_file_load_from_file(key_file, question_filename,
 
1201
                               G_KEY_FILE_NONE, &glib_error) != TRUE){
 
1202
    /* If a file was removed, we should ignore it, so */
 
1203
    /* only show error message if file actually existed */
 
1204
    if(glib_error->code != G_FILE_ERROR_NOENT){
 
1205
      error(0, 0, "Failed to load question data from file \"%s\": %s",
 
1206
            question_filename, glib_error->message);
 
1207
    }
 
1208
    return;
 
1209
  }
 
1210
 
 
1211
  __attribute__((cleanup(cleanup_string)))
 
1212
    char *socket_name = g_key_file_get_string(key_file, "Ask",
 
1213
                                              "Socket",
 
1214
                                              &glib_error);
 
1215
  if(socket_name == NULL){
 
1216
    error(0, 0, "Question file \"%s\" did not contain \"Socket\": %s",
 
1217
          question_filename, glib_error->message);
 
1218
    return;
 
1219
  }
 
1220
 
 
1221
  if(strlen(socket_name) == 0){
 
1222
    error(0, 0, "Question file \"%s\" had empty \"Socket\" value",
 
1223
          question_filename);
 
1224
    return;
 
1225
  }
 
1226
 
 
1227
  const guint64 pid = g_key_file_get_uint64(key_file, "Ask", "PID",
 
1228
                                            &glib_error);
 
1229
  if(glib_error != NULL){
 
1230
    error(0, 0, "Question file \"%s\" contained bad \"PID\": %s",
 
1231
          question_filename, glib_error->message);
 
1232
    return;
 
1233
  }
 
1234
 
 
1235
  if((pid != (guint64)((pid_t)pid))
 
1236
     or (kill((pid_t)pid, 0) != 0)){
 
1237
    error(0, 0, "PID %" PRIuMAX " in question file \"%s\" is bad or"
 
1238
          " does not exist", (uintmax_t)pid, question_filename);
 
1239
    return;
 
1240
  }
 
1241
 
 
1242
  guint64 notafter = g_key_file_get_uint64(key_file, "Ask",
 
1243
                                           "NotAfter", &glib_error);
 
1244
  if(glib_error != NULL){
 
1245
    if(glib_error->code != G_KEY_FILE_ERROR_KEY_NOT_FOUND){
 
1246
      error(0, 0, "Question file \"%s\" contained bad \"NotAfter\":"
 
1247
            " %s", question_filename, glib_error->message);
 
1248
    }
 
1249
    notafter = 0;
 
1250
  }
 
1251
  if(notafter != 0){
 
1252
    if(queue->next_run == 0 or (queue->next_run > notafter)){
 
1253
      queue->next_run = notafter;
 
1254
    }
 
1255
    if(*current_time >= notafter){
 
1256
      return;
 
1257
    }
 
1258
  }
 
1259
 
 
1260
  const task_context connect_question_socket_task = {
 
1261
    .func=connect_question_socket,
 
1262
    .question_filename=strdup(question_filename),
 
1263
    .epoll_fd=epoll_fd,
 
1264
    .password=password,
 
1265
    .filename=strdup(socket_name),
 
1266
    .cancelled_filenames=task.cancelled_filenames,
 
1267
    .mandos_client_exited=mandos_client_exited,
 
1268
    .password_is_read=password_is_read,
 
1269
    .current_time=current_time,
 
1270
  };
 
1271
  if(connect_question_socket_task.question_filename == NULL
 
1272
     or connect_question_socket_task.filename == NULL
 
1273
     or not add_to_queue(queue, connect_question_socket_task)){
 
1274
    error(0, errno, "Failed to add connect_question_socket for socket"
 
1275
          " %s (from \"%s\") to queue", socket_name,
 
1276
          question_filename);
 
1277
    cleanup_task(&connect_question_socket_task);
 
1278
    return;
 
1279
  }
 
1280
  /* Force the added task (connect_question_socket) to run
 
1281
     immediately */
 
1282
  queue->next_run = 1;
 
1283
 
 
1284
  if(notafter > 0){
 
1285
    char *const dup_filename = strdup(question_filename);
 
1286
    const task_context cancel_old_question_task = {
 
1287
      .func=cancel_old_question,
 
1288
      .question_filename=dup_filename,
 
1289
      .notafter=notafter,
 
1290
      .filename=dup_filename,
 
1291
      .cancelled_filenames=cancelled_filenames,
 
1292
      .current_time=current_time,
 
1293
    };
 
1294
    if(cancel_old_question_task.question_filename == NULL
 
1295
       or not add_to_queue(queue, cancel_old_question_task)){
 
1296
      error(0, errno, "Failed to add cancel_old_question for file "
 
1297
            "\"%s\" to queue", question_filename);
 
1298
      cleanup_task(&cancel_old_question_task);
 
1299
      return;
 
1300
    }
 
1301
  }
 
1302
}
 
1303
 
 
1304
__attribute__((nonnull))
 
1305
void cancel_old_question(const task_context task,
 
1306
                         task_queue *const queue){
 
1307
  char *const question_filename = task.question_filename;
 
1308
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1309
  const mono_microsecs notafter = task.notafter;
 
1310
  const mono_microsecs *const current_time = task.current_time;
 
1311
 
 
1312
  if(*current_time >= notafter){
 
1313
    if(not string_set_add(cancelled_filenames, question_filename)){
 
1314
      error(0, errno, "Failed to cancel question for file %s",
 
1315
            question_filename);
 
1316
    }
 
1317
    cleanup_task(&task);
 
1318
    return;
 
1319
  }
 
1320
 
 
1321
  if(not add_to_queue(queue, task)){
 
1322
    error(0, errno, "Failed to add cancel_old_question for file "
 
1323
          "%s to queue", question_filename);
 
1324
    cleanup_task(&task);
 
1325
    return;
 
1326
  }
 
1327
 
 
1328
  if((queue->next_run == 0) or (queue->next_run > notafter)){
 
1329
    queue->next_run = notafter;
 
1330
  }
 
1331
}
 
1332
 
 
1333
__attribute__((nonnull))
 
1334
void connect_question_socket(const task_context task,
 
1335
                             task_queue *const queue){
 
1336
  char *const question_filename = task.question_filename;
 
1337
  char *const filename = task.filename;
 
1338
  const int epoll_fd = task.epoll_fd;
 
1339
  buffer *const password = task.password;
 
1340
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1341
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1342
  bool *const password_is_read = task.password_is_read;
 
1343
  const mono_microsecs *const current_time = task.current_time;
 
1344
 
 
1345
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
1346
 
 
1347
  if(sizeof(sock_name.sun_path) <= strlen(filename)){
 
1348
    error(0, 0, "Socket filename is larger than"
 
1349
          " sizeof(sockaddr_un.sun_path); %" PRIuMAX ": \"%s\"",
 
1350
          (uintmax_t)sizeof(sock_name.sun_path), filename);
 
1351
    if(not string_set_add(cancelled_filenames, question_filename)){
 
1352
      error(0, errno, "Failed to cancel question for file %s",
 
1353
            question_filename);
 
1354
    }
 
1355
    cleanup_task(&task);
 
1356
    return;
 
1357
  }
 
1358
 
 
1359
  const int fd = socket(PF_LOCAL, SOCK_DGRAM
 
1360
                        | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
1361
  if(fd < 0){
 
1362
    error(0, errno,
 
1363
          "Failed to create socket(PF_LOCAL, SOCK_DGRAM, 0)");
 
1364
    if(not add_to_queue(queue, task)){
 
1365
      error(0, errno, "Failed to add connect_question_socket for file"
 
1366
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1367
            filename);
 
1368
      cleanup_task(&task);
 
1369
    } else {
 
1370
      /* Force the added task (connect_question_socket) to run
 
1371
         immediately */
 
1372
      queue->next_run = 1;
 
1373
    }
 
1374
    return;
 
1375
  }
 
1376
 
 
1377
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
1378
  if(connect(fd, (struct sockaddr *)&sock_name,
 
1379
             (socklen_t)SUN_LEN(&sock_name)) != 0){
 
1380
    error(0, errno, "Failed to connect socket to \"%s\"", filename);
 
1381
    if(not add_to_queue(queue, task)){
 
1382
      error(0, errno, "Failed to add connect_question_socket for file"
 
1383
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1384
            filename);
 
1385
      cleanup_task(&task);
 
1386
    } else {
 
1387
      /* Force the added task (connect_question_socket) to run again,
 
1388
         at most one second from now */
 
1389
      if((queue->next_run == 0)
 
1390
         or (queue->next_run > (*current_time + 1000000))){
 
1391
        queue->next_run = *current_time + 1000000;
 
1392
      }
 
1393
    }
 
1394
    return;
 
1395
  }
 
1396
 
 
1397
  /* Not necessary, but we can try, and merely warn on failure */
 
1398
  if(shutdown(fd, SHUT_RD) != 0){
 
1399
    error(0, errno, "Failed to shutdown reading from socket \"%s\"",
 
1400
          filename);
 
1401
  }
 
1402
 
 
1403
  /* Add the fd to the epoll set */
 
1404
  if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1405
               &(struct epoll_event){ .events=EPOLLOUT })
 
1406
     != 0){
 
1407
    error(0, errno, "Failed to add inotify file descriptor %d for"
 
1408
          " socket %s to epoll set", fd, filename);
 
1409
    if(not add_to_queue(queue, task)){
 
1410
      error(0, errno, "Failed to add connect_question_socket for file"
 
1411
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1412
            filename);
 
1413
      cleanup_task(&task);
 
1414
    } else {
 
1415
      /* Force the added task (connect_question_socket) to run again,
 
1416
         at most one second from now */
 
1417
      if((queue->next_run == 0)
 
1418
         or (queue->next_run > (*current_time + 1000000))){
 
1419
        queue->next_run = *current_time + 1000000;
 
1420
      }
 
1421
    }
 
1422
    return;
 
1423
  }
 
1424
 
 
1425
  /* add task send_password_to_socket to queue */
 
1426
  const task_context send_password_to_socket_task = {
 
1427
    .func=send_password_to_socket,
 
1428
    .question_filename=question_filename,
 
1429
    .filename=filename,
 
1430
    .epoll_fd=epoll_fd,
 
1431
    .fd=fd,
 
1432
    .password=password,
 
1433
    .cancelled_filenames=cancelled_filenames,
 
1434
    .mandos_client_exited=mandos_client_exited,
 
1435
    .password_is_read=password_is_read,
 
1436
    .current_time=current_time,
 
1437
  };
 
1438
 
 
1439
  if(not add_to_queue(queue, send_password_to_socket_task)){
 
1440
    error(0, errno, "Failed to add send_password_to_socket for"
 
1441
          " file \"%s\" and socket \"%s\" to queue",
 
1442
          question_filename, filename);
 
1443
    cleanup_task(&send_password_to_socket_task);
 
1444
  }
 
1445
}
 
1446
 
 
1447
__attribute__((nonnull))
 
1448
void send_password_to_socket(const task_context task,
 
1449
                             task_queue *const queue){
 
1450
  char *const question_filename=task.question_filename;
 
1451
  char *const filename=task.filename;
 
1452
  const int epoll_fd=task.epoll_fd;
 
1453
  const int fd=task.fd;
 
1454
  buffer *const password=task.password;
 
1455
  string_set *const cancelled_filenames=task.cancelled_filenames;
 
1456
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1457
  bool *const password_is_read = task.password_is_read;
 
1458
  const mono_microsecs *const current_time = task.current_time;
 
1459
 
 
1460
  if(*mandos_client_exited and *password_is_read){
 
1461
 
 
1462
    const size_t send_buffer_length = password->length + 2;
 
1463
    char *send_buffer = malloc(send_buffer_length);
 
1464
    if(send_buffer == NULL){
 
1465
      error(0, errno, "Failed to allocate send_buffer");
 
1466
    } else {
 
1467
      if(mlock(send_buffer, send_buffer_length) != 0){
 
1468
        /* Warn but do not treat as fatal error */
 
1469
        if(errno != EPERM and errno != ENOMEM){
 
1470
          error(0, errno, "Failed to lock memory for password"
 
1471
                " buffer");
 
1472
        }
 
1473
      }
 
1474
      /* “[…] send a single datagram to the socket consisting of the
 
1475
         password string either prefixed with "+" or with "-"
 
1476
         depending on whether the password entry was successful or
 
1477
         not. You may but don't have to include a final NUL byte in
 
1478
         your message.
 
1479
 
 
1480
         — <https://www.freedesktop.org/wiki/Software/systemd/
 
1481
         PasswordAgents/> (Wed 08 Oct 2014 02:14:28 AM UTC)
 
1482
      */
 
1483
      send_buffer[0] = '+';     /* Prefix with "+" */
 
1484
      /* Always add an extra NUL */
 
1485
      send_buffer[password->length + 1] = '\0';
 
1486
      if(password->length > 0){
 
1487
        memcpy(send_buffer + 1, password->data, password->length);
 
1488
      }
 
1489
      errno = 0;
 
1490
      ssize_t ssret = send(fd, send_buffer, send_buffer_length,
 
1491
                           MSG_NOSIGNAL);
 
1492
      const error_t saved_errno = errno;
 
1493
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
1494
      explicit_bzero(send_buffer, send_buffer_length);
 
1495
#else
 
1496
      memset(send_buffer, '\0', send_buffer_length);
 
1497
#endif
 
1498
      if(munlock(send_buffer, send_buffer_length) != 0){
 
1499
        error(0, errno, "Failed to unlock memory of send buffer");
 
1500
      }
 
1501
      free(send_buffer);
 
1502
      if(ssret < 0 or ssret < (ssize_t)send_buffer_length){
 
1503
        switch(saved_errno){
 
1504
        case EINTR:
 
1505
        case ENOBUFS:
 
1506
        case ENOMEM:
 
1507
        case EADDRINUSE:
 
1508
        case ECONNREFUSED:
 
1509
        case ECONNRESET:
 
1510
        case ENOENT:
 
1511
        case ETOOMANYREFS:
 
1512
        case EAGAIN:
 
1513
          /* Retry, below */
 
1514
          break;
 
1515
        case EMSGSIZE:
 
1516
          error(0, 0, "Password of size %" PRIuMAX " is too big",
 
1517
                (uintmax_t)password->length);
 
1518
#if __GNUC__ < 7
 
1519
          /* FALLTHROUGH */
 
1520
#else
 
1521
          __attribute__((fallthrough));
 
1522
#endif
 
1523
        case 0:
 
1524
          if(ssret >= 0 and ssret < (ssize_t)send_buffer_length){
 
1525
            error(0, 0, "Password only partially sent to socket");
 
1526
          }
 
1527
#if __GNUC__ < 7
 
1528
          /* FALLTHROUGH */
 
1529
#else
 
1530
          __attribute__((fallthrough));
 
1531
#endif
 
1532
        default:
 
1533
          error(0, saved_errno, "Failed to send() to socket %s",
 
1534
                filename);
 
1535
          if(not string_set_add(cancelled_filenames,
 
1536
                                question_filename)){
 
1537
            error(0, errno, "Failed to cancel question for file %s",
 
1538
                  question_filename);
 
1539
          }
 
1540
          cleanup_task(&task);
 
1541
          return;
 
1542
        }
 
1543
      } else {
 
1544
        /* Success */
 
1545
        cleanup_task(&task);
 
1546
        return;
 
1547
      }
 
1548
    }
 
1549
  }
 
1550
 
 
1551
  /* We failed or are not ready yet; retry later */
 
1552
 
 
1553
  if(not add_to_queue(queue, task)){
 
1554
    error(0, errno, "Failed to add send_password_to_socket for"
 
1555
          " file %s and socket %s to queue", question_filename,
 
1556
          filename);
 
1557
    cleanup_task(&task);
 
1558
  }
 
1559
 
 
1560
  /* Add the fd to the epoll set */
 
1561
  if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1562
               &(struct epoll_event){ .events=EPOLLOUT })
 
1563
     != 0){
 
1564
    error(0, errno, "Failed to add socket file descriptor %d for"
 
1565
          " socket %s to epoll set", fd, filename);
 
1566
    /* Force the added task (send_password_to_socket) to run again, at
 
1567
       most one second from now */
 
1568
    if((queue->next_run == 0)
 
1569
       or (queue->next_run > (*current_time + 1000000))){
 
1570
      queue->next_run = *current_time + 1000000;
 
1571
    }
 
1572
  }
 
1573
}
 
1574
 
 
1575
__attribute__((warn_unused_result))
 
1576
bool add_existing_questions(task_queue *const queue,
 
1577
                            const int epoll_fd,
 
1578
                            buffer *const password,
 
1579
                            string_set *cancelled_filenames,
 
1580
                            const mono_microsecs *const current_time,
 
1581
                            bool *const mandos_client_exited,
 
1582
                            bool *const password_is_read,
 
1583
                            const char *const dirname){
 
1584
  __attribute__((cleanup(cleanup_string)))
 
1585
    char *dir_pattern = NULL;
 
1586
  const int ret = asprintf(&dir_pattern, "%s/ask.*", dirname);
 
1587
  if(ret < 0 or dir_pattern == NULL){
 
1588
    error(0, errno, "Could not create glob pattern for directory %s",
 
1589
          dirname);
 
1590
    return false;
 
1591
  }
 
1592
  __attribute__((cleanup(globfree)))
 
1593
    glob_t question_filenames = {};
 
1594
  switch(glob(dir_pattern, GLOB_ERR | GLOB_NOSORT | GLOB_MARK,
 
1595
              NULL, &question_filenames)){
 
1596
  case GLOB_ABORTED:
 
1597
  default:
 
1598
    error(0, errno, "Failed to open directory %s", dirname);
 
1599
    return false;
 
1600
  case GLOB_NOMATCH:
 
1601
    error(0, errno, "There are no question files in %s", dirname);
 
1602
    return false;
 
1603
  case GLOB_NOSPACE:
 
1604
    error(0, errno, "Could not allocate memory for question file"
 
1605
          " names in %s", dirname);
 
1606
#if __GNUC__ < 7
 
1607
    /* FALLTHROUGH */
 
1608
#else
 
1609
    __attribute__((fallthrough));
 
1610
#endif
 
1611
  case 0:
 
1612
    for(size_t i = 0; i < question_filenames.gl_pathc; i++){
 
1613
      char *const question_filename = strdup(question_filenames
 
1614
                                             .gl_pathv[i]);
 
1615
      const task_context task = {
 
1616
        .func=open_and_parse_question,
 
1617
        .epoll_fd=epoll_fd,
 
1618
        .question_filename=question_filename,
 
1619
        .filename=question_filename,
 
1620
        .password=password,
 
1621
        .cancelled_filenames=cancelled_filenames,
 
1622
        .current_time=current_time,
 
1623
        .mandos_client_exited=mandos_client_exited,
 
1624
        .password_is_read=password_is_read,
 
1625
      };
 
1626
 
 
1627
      if(question_filename == NULL
 
1628
         or not add_to_queue(queue, task)){
 
1629
        error(0, errno, "Failed to add open_and_parse_question for"
 
1630
              " file %s to queue",
 
1631
              question_filenames.gl_pathv[i]);
 
1632
        free(question_filename);
 
1633
      } else {
 
1634
        queue->next_run = 1;
 
1635
      }
 
1636
    }
 
1637
    return true;
 
1638
  }
 
1639
}
 
1640
 
 
1641
__attribute__((nonnull, warn_unused_result))
 
1642
bool wait_for_event(const int epoll_fd,
 
1643
                    const mono_microsecs queue_next_run,
 
1644
                    const mono_microsecs current_time){
 
1645
  __attribute__((const))
 
1646
    int milliseconds_to_wait(const mono_microsecs currtime,
 
1647
                             const mono_microsecs nextrun){
 
1648
    if(currtime >= nextrun){
 
1649
      return 0;
 
1650
    }
 
1651
    const uintmax_t wait_time_ms = (nextrun - currtime) / 1000;
 
1652
    if(wait_time_ms > (uintmax_t)INT_MAX){
 
1653
      return INT_MAX;
 
1654
    }
 
1655
    return (int)wait_time_ms;
 
1656
  }
 
1657
 
 
1658
  const int wait_time_ms = milliseconds_to_wait(current_time,
 
1659
                                                queue_next_run);
 
1660
 
 
1661
  /* Prepare unblocking of SIGCHLD during epoll_pwait */
 
1662
  sigset_t temporary_unblocked_sigmask;
 
1663
  /* Get current signal mask */
 
1664
  if(pthread_sigmask(-1, NULL, &temporary_unblocked_sigmask) != 0){
 
1665
    return false;
 
1666
  }
 
1667
  /* Remove SIGCHLD from the signal mask */
 
1668
  if(sigdelset(&temporary_unblocked_sigmask, SIGCHLD) != 0){
 
1669
    return false;
 
1670
  }
 
1671
  struct epoll_event events[8]; /* Ignored */
 
1672
  int ret = epoll_pwait(epoll_fd, events,
 
1673
                        sizeof(events) / sizeof(struct epoll_event),
 
1674
                        queue_next_run == 0 ? -1 : (int)wait_time_ms,
 
1675
                        &temporary_unblocked_sigmask);
 
1676
  if(ret < 0 and errno != EINTR){
 
1677
    error(0, errno, "Failed epoll_pwait(epfd=%d, ..., timeout=%d,"
 
1678
          " ...", epoll_fd,
 
1679
          queue_next_run == 0 ? -1 : (int)wait_time_ms);
 
1680
    return false;
 
1681
  }
 
1682
  return clear_all_fds_from_epoll_set(epoll_fd);
 
1683
}
 
1684
 
 
1685
bool clear_all_fds_from_epoll_set(const int epoll_fd){
 
1686
  /* Create a new empty epoll set */
 
1687
  __attribute__((cleanup(cleanup_close)))
 
1688
    const int new_epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
1689
  if(new_epoll_fd < 0){
 
1690
    return false;
 
1691
  }
 
1692
  /* dup3() the new epoll set fd over the old one, replacing it */
 
1693
  if(dup3(new_epoll_fd, epoll_fd, O_CLOEXEC) < 0){
 
1694
    return false;
 
1695
  }
 
1696
  return true;
 
1697
}
 
1698
 
 
1699
__attribute__((nonnull, warn_unused_result))
 
1700
bool run_queue(task_queue **const queue,
 
1701
               string_set *const cancelled_filenames,
 
1702
               bool *const quit_now){
 
1703
 
 
1704
  task_queue *new_queue = create_queue();
 
1705
  if(new_queue == NULL){
 
1706
    return false;
 
1707
  }
 
1708
 
 
1709
  __attribute__((cleanup(string_set_clear)))
 
1710
    string_set old_cancelled_filenames = {};
 
1711
  string_set_swap(cancelled_filenames, &old_cancelled_filenames);
 
1712
 
 
1713
  /* Declare i outside the for loop, since we might need i after the
 
1714
     loop in case we aborted in the middle */
 
1715
  size_t i;
 
1716
  for(i=0; i < (*queue)->length and not *quit_now; i++){
 
1717
    task_context *const task = &((*queue)->tasks[i]);
 
1718
    const char *const question_filename = task->question_filename;
 
1719
    /* Skip any task referencing a cancelled question filename */
 
1720
    if(question_filename != NULL
 
1721
       and string_set_contains(old_cancelled_filenames,
 
1722
                               question_filename)){
 
1723
      cleanup_task(task);
 
1724
      continue;
 
1725
    }
 
1726
    task->func(*task, new_queue);
 
1727
  }
 
1728
 
 
1729
  if(*quit_now){
 
1730
    /* we might be in the middle of the queue, so clean up any
 
1731
       remaining tasks in the current queue */
 
1732
    for(; i < (*queue)->length; i++){
 
1733
      cleanup_task(&((*queue)->tasks[i]));
 
1734
    }
 
1735
    free_queue(*queue);
 
1736
    *queue = new_queue;
 
1737
    new_queue = NULL;
 
1738
    return false;
 
1739
  }
 
1740
  free_queue(*queue);
 
1741
  *queue = new_queue;
 
1742
  new_queue = NULL;
 
1743
 
 
1744
  return true;
 
1745
}
 
1746
 
 
1747
/* End of regular code section */
 
1748
 
 
1749
/* Start of tests section; here are the tests for the above code */
 
1750
 
 
1751
/* This "fixture" data structure is used by the test setup and
 
1752
   teardown functions */
 
1753
typedef struct {
 
1754
  struct sigaction orig_sigaction;
 
1755
  sigset_t orig_sigmask;
 
1756
} test_fixture;
 
1757
 
 
1758
static void test_setup(test_fixture *fixture,
 
1759
                       __attribute__((unused))
 
1760
                       gconstpointer user_data){
 
1761
  g_assert_true(setup_signal_handler(&fixture->orig_sigaction));
 
1762
  g_assert_true(block_sigchld(&fixture->orig_sigmask));
 
1763
}
 
1764
 
 
1765
static void test_teardown(test_fixture *fixture,
 
1766
                          __attribute__((unused))
 
1767
                          gconstpointer user_data){
 
1768
  g_assert_true(restore_signal_handler(&fixture->orig_sigaction));
 
1769
  g_assert_true(restore_sigmask(&fixture->orig_sigmask));
 
1770
}
 
1771
 
 
1772
/* Utility function used by tests to search queue for matching task */
 
1773
__attribute__((pure, nonnull, warn_unused_result))
 
1774
static task_context *find_matching_task(const task_queue *const queue,
 
1775
                                        const task_context task){
 
1776
  /* The argument "task" structure is a pattern to match; 0 in any
 
1777
     member means any value matches, otherwise the value must match.
 
1778
     The filename strings are compared by strcmp(), not by pointer. */
 
1779
  for(size_t i = 0; i < queue->length; i++){
 
1780
    task_context *const current_task = queue->tasks+i;
 
1781
    /* Check all members of task_context, if set to a non-zero value.
 
1782
       If a member does not match, continue to next task in queue */
 
1783
 
 
1784
    /* task_func *const func */
 
1785
    if(task.func != NULL and current_task->func != task.func){
 
1786
      continue;
 
1787
    }
 
1788
    /* char *const question_filename; */
 
1789
    if(task.question_filename != NULL
 
1790
       and (current_task->question_filename == NULL
 
1791
            or strcmp(current_task->question_filename,
 
1792
                      task.question_filename) != 0)){
 
1793
      continue;
 
1794
    }
 
1795
    /* const pid_t pid; */
 
1796
    if(task.pid != 0 and current_task->pid != task.pid){
 
1797
      continue;
 
1798
    }
 
1799
    /* const int epoll_fd; */
 
1800
    if(task.epoll_fd != 0
 
1801
       and current_task->epoll_fd != task.epoll_fd){
 
1802
      continue;
 
1803
    }
 
1804
    /* bool *const quit_now; */
 
1805
    if(task.quit_now != NULL
 
1806
       and current_task->quit_now != task.quit_now){
 
1807
      continue;
 
1808
    }
 
1809
    /* const int fd; */
 
1810
    if(task.fd != 0 and current_task->fd != task.fd){
 
1811
      continue;
 
1812
    }
 
1813
    /* bool *const mandos_client_exited; */
 
1814
    if(task.mandos_client_exited != NULL
 
1815
       and current_task->mandos_client_exited
 
1816
       != task.mandos_client_exited){
 
1817
      continue;
 
1818
    }
 
1819
    /* buffer *const password; */
 
1820
    if(task.password != NULL
 
1821
       and current_task->password != task.password){
 
1822
      continue;
 
1823
    }
 
1824
    /* bool *const password_is_read; */
 
1825
    if(task.password_is_read != NULL
 
1826
       and current_task->password_is_read != task.password_is_read){
 
1827
      continue;
 
1828
    }
 
1829
    /* char *filename; */
 
1830
    if(task.filename != NULL
 
1831
       and (current_task->filename == NULL
 
1832
            or strcmp(current_task->filename, task.filename) != 0)){
 
1833
      continue;
 
1834
    }
 
1835
    /* string_set *const cancelled_filenames; */
 
1836
    if(task.cancelled_filenames != NULL
 
1837
       and current_task->cancelled_filenames
 
1838
       != task.cancelled_filenames){
 
1839
      continue;
 
1840
    }
 
1841
    /* const mono_microsecs notafter; */
 
1842
    if(task.notafter != 0
 
1843
       and current_task->notafter != task.notafter){
 
1844
      continue;
 
1845
    }
 
1846
    /* const mono_microsecs *const current_time; */
 
1847
    if(task.current_time != NULL
 
1848
       and current_task->current_time != task.current_time){
 
1849
      continue;
 
1850
    }
 
1851
    /* Current task matches all members; return it */
 
1852
    return current_task;
 
1853
  }
 
1854
  /* No task in queue matches passed pattern task */
 
1855
  return NULL;
 
1856
}
 
1857
 
 
1858
static void test_create_queue(__attribute__((unused))
 
1859
                              test_fixture *fixture,
 
1860
                              __attribute__((unused))
 
1861
                              gconstpointer user_data){
 
1862
  __attribute__((cleanup(cleanup_queue)))
 
1863
    task_queue *const queue = create_queue();
 
1864
  g_assert_nonnull(queue);
 
1865
  g_assert_null(queue->tasks);
 
1866
  g_assert_true(queue->length == 0);
 
1867
  g_assert_true(queue->next_run == 0);
 
1868
}
 
1869
 
 
1870
static task_func dummy_func;
 
1871
 
 
1872
static void test_add_to_queue(__attribute__((unused))
 
1873
                              test_fixture *fixture,
 
1874
                              __attribute__((unused))
 
1875
                              gconstpointer user_data){
 
1876
  __attribute__((cleanup(cleanup_queue)))
 
1877
    task_queue *queue = create_queue();
 
1878
  g_assert_nonnull(queue);
 
1879
 
 
1880
  g_assert_true(add_to_queue(queue,
 
1881
                             (task_context){ .func=dummy_func }));
 
1882
  g_assert_true(queue->length == 1);
 
1883
  g_assert_nonnull(queue->tasks);
 
1884
  g_assert_true(queue->tasks[0].func == dummy_func);
 
1885
}
 
1886
 
 
1887
static void dummy_func(__attribute__((unused))
 
1888
                       const task_context task,
 
1889
                       __attribute__((unused))
 
1890
                       task_queue *const queue){
 
1891
}
 
1892
 
 
1893
static void test_queue_has_question_empty(__attribute__((unused))
 
1894
                                          test_fixture *fixture,
 
1895
                                          __attribute__((unused))
 
1896
                                          gconstpointer user_data){
 
1897
  __attribute__((cleanup(cleanup_queue)))
 
1898
    task_queue *queue = create_queue();
 
1899
  g_assert_nonnull(queue);
 
1900
  g_assert_false(queue_has_question(queue));
 
1901
}
 
1902
 
 
1903
static void test_queue_has_question_false(__attribute__((unused))
 
1904
                                          test_fixture *fixture,
 
1905
                                          __attribute__((unused))
 
1906
                                          gconstpointer user_data){
 
1907
  __attribute__((cleanup(cleanup_queue)))
 
1908
    task_queue *queue = create_queue();
 
1909
  g_assert_nonnull(queue);
 
1910
  g_assert_true(add_to_queue(queue,
 
1911
                             (task_context){ .func=dummy_func }));
 
1912
  g_assert_false(queue_has_question(queue));
 
1913
}
 
1914
 
 
1915
static void test_queue_has_question_true(__attribute__((unused))
 
1916
                                         test_fixture *fixture,
 
1917
                                         __attribute__((unused))
 
1918
                                         gconstpointer user_data){
 
1919
  __attribute__((cleanup(cleanup_queue)))
 
1920
    task_queue *queue = create_queue();
 
1921
  g_assert_nonnull(queue);
 
1922
  char *const question_filename
 
1923
    = strdup("/nonexistent/question_filename");
 
1924
  g_assert_nonnull(question_filename);
 
1925
  task_context task = {
 
1926
    .func=dummy_func,
 
1927
    .question_filename=question_filename,
 
1928
  };
 
1929
  g_assert_true(add_to_queue(queue, task));
 
1930
  g_assert_true(queue_has_question(queue));
 
1931
}
 
1932
 
 
1933
static void test_queue_has_question_false2(__attribute__((unused))
 
1934
                                           test_fixture *fixture,
 
1935
                                           __attribute__((unused))
 
1936
                                           gconstpointer user_data){
 
1937
  __attribute__((cleanup(cleanup_queue)))
 
1938
    task_queue *queue = create_queue();
 
1939
  g_assert_nonnull(queue);
 
1940
  task_context task = { .func=dummy_func };
 
1941
  g_assert_true(add_to_queue(queue, task));
 
1942
  g_assert_true(add_to_queue(queue, task));
 
1943
  g_assert_cmpint((int)queue->length, ==, 2);
 
1944
  g_assert_false(queue_has_question(queue));
 
1945
}
 
1946
 
 
1947
static void test_queue_has_question_true2(__attribute__((unused))
 
1948
                                          test_fixture *fixture,
 
1949
                                          __attribute__((unused))
 
1950
                                          gconstpointer user_data){
 
1951
  __attribute__((cleanup(cleanup_queue)))
 
1952
    task_queue *queue = create_queue();
 
1953
  g_assert_nonnull(queue);
 
1954
  task_context task1 = { .func=dummy_func };
 
1955
  g_assert_true(add_to_queue(queue, task1));
 
1956
  char *const question_filename
 
1957
    = strdup("/nonexistent/question_filename");
 
1958
  g_assert_nonnull(question_filename);
 
1959
  task_context task2 = {
 
1960
    .func=dummy_func,
 
1961
    .question_filename=question_filename,
 
1962
  };
 
1963
  g_assert_true(add_to_queue(queue, task2));
 
1964
  g_assert_cmpint((int)queue->length, ==, 2);
 
1965
  g_assert_true(queue_has_question(queue));
 
1966
}
 
1967
 
 
1968
static void test_cleanup_buffer(__attribute__((unused))
 
1969
                                test_fixture *fixture,
 
1970
                                __attribute__((unused))
 
1971
                                gconstpointer user_data){
 
1972
  buffer buf = {};
 
1973
 
 
1974
  const size_t buffersize = 10;
 
1975
 
 
1976
  buf.data = malloc(buffersize);
 
1977
  g_assert_nonnull(buf.data);
 
1978
  if(mlock(buf.data, buffersize) != 0){
 
1979
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
1980
  }
 
1981
 
 
1982
  cleanup_buffer(&buf);
 
1983
  g_assert_null(buf.data);
 
1984
}
 
1985
 
 
1986
static
 
1987
void test_string_set_new_set_contains_nothing(__attribute__((unused))
 
1988
                                              test_fixture *fixture,
 
1989
                                              __attribute__((unused))
 
1990
                                              gconstpointer
 
1991
                                              user_data){
 
1992
  __attribute__((cleanup(string_set_clear)))
 
1993
    string_set set = {};
 
1994
  g_assert_false(string_set_contains(set, "")); /* Empty string */
 
1995
  g_assert_false(string_set_contains(set, "test_string"));
 
1996
}
 
1997
 
 
1998
static void
 
1999
test_string_set_with_added_string_contains_it(__attribute__((unused))
 
2000
                                              test_fixture *fixture,
 
2001
                                              __attribute__((unused))
 
2002
                                              gconstpointer
 
2003
                                              user_data){
 
2004
  __attribute__((cleanup(string_set_clear)))
 
2005
    string_set set = {};
 
2006
  g_assert_true(string_set_add(&set, "test_string"));
 
2007
  g_assert_true(string_set_contains(set, "test_string"));
 
2008
}
 
2009
 
 
2010
static void
 
2011
test_string_set_cleared_does_not_contain_str(__attribute__((unused))
 
2012
                                             test_fixture *fixture,
 
2013
                                             __attribute__((unused))
 
2014
                                             gconstpointer user_data){
 
2015
  __attribute__((cleanup(string_set_clear)))
 
2016
    string_set set = {};
 
2017
  g_assert_true(string_set_add(&set, "test_string"));
 
2018
  string_set_clear(&set);
 
2019
  g_assert_false(string_set_contains(set, "test_string"));
 
2020
}
 
2021
 
 
2022
static
 
2023
void test_string_set_swap_one_with_empty(__attribute__((unused))
 
2024
                                         test_fixture *fixture,
 
2025
                                         __attribute__((unused))
 
2026
                                         gconstpointer user_data){
 
2027
  __attribute__((cleanup(string_set_clear)))
 
2028
    string_set set1 = {};
 
2029
  __attribute__((cleanup(string_set_clear)))
 
2030
    string_set set2 = {};
 
2031
  g_assert_true(string_set_add(&set1, "test_string1"));
 
2032
  string_set_swap(&set1, &set2);
 
2033
  g_assert_false(string_set_contains(set1, "test_string1"));
 
2034
  g_assert_true(string_set_contains(set2, "test_string1"));
 
2035
}
 
2036
 
 
2037
static
 
2038
void test_string_set_swap_empty_with_one(__attribute__((unused))
 
2039
                                         test_fixture *fixture,
 
2040
                                         __attribute__((unused))
 
2041
                                         gconstpointer user_data){
 
2042
  __attribute__((cleanup(string_set_clear)))
 
2043
    string_set set1 = {};
 
2044
  __attribute__((cleanup(string_set_clear)))
 
2045
    string_set set2 = {};
 
2046
  g_assert_true(string_set_add(&set2, "test_string2"));
 
2047
  string_set_swap(&set1, &set2);
 
2048
  g_assert_true(string_set_contains(set1, "test_string2"));
 
2049
  g_assert_false(string_set_contains(set2, "test_string2"));
 
2050
}
 
2051
 
 
2052
static void test_string_set_swap_one_with_one(__attribute__((unused))
 
2053
                                              test_fixture *fixture,
 
2054
                                              __attribute__((unused))
 
2055
                                              gconstpointer
 
2056
                                              user_data){
 
2057
  __attribute__((cleanup(string_set_clear)))
 
2058
    string_set set1 = {};
 
2059
  __attribute__((cleanup(string_set_clear)))
 
2060
    string_set set2 = {};
 
2061
  g_assert_true(string_set_add(&set1, "test_string1"));
 
2062
  g_assert_true(string_set_add(&set2, "test_string2"));
 
2063
  string_set_swap(&set1, &set2);
 
2064
  g_assert_false(string_set_contains(set1, "test_string1"));
 
2065
  g_assert_true(string_set_contains(set1, "test_string2"));
 
2066
  g_assert_false(string_set_contains(set2, "test_string2"));
 
2067
  g_assert_true(string_set_contains(set2, "test_string1"));
 
2068
}
 
2069
 
 
2070
static bool fd_has_cloexec_and_nonblock(const int);
 
2071
 
 
2072
static bool epoll_set_contains(int, int, uint32_t);
 
2073
 
 
2074
static void test_start_mandos_client(test_fixture *fixture,
 
2075
                                     __attribute__((unused))
 
2076
                                     gconstpointer user_data){
 
2077
 
 
2078
  bool mandos_client_exited = false;
 
2079
  bool quit_now = false;
 
2080
  __attribute__((cleanup(cleanup_close)))
 
2081
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2082
  g_assert_cmpint(epoll_fd, >=, 0);
 
2083
  __attribute__((cleanup(cleanup_queue)))
 
2084
    task_queue *queue = create_queue();
 
2085
  g_assert_nonnull(queue);
 
2086
  buffer password = {};
 
2087
  bool password_is_read = false;
 
2088
  const char helper_directory[] = "/nonexistent";
 
2089
  const char *const argv[] = { "/bin/true", NULL };
 
2090
 
 
2091
  g_assert_true(start_mandos_client(queue, epoll_fd,
 
2092
                                    &mandos_client_exited, &quit_now,
 
2093
                                    &password, &password_is_read,
 
2094
                                    &fixture->orig_sigaction,
 
2095
                                    fixture->orig_sigmask,
 
2096
                                    helper_directory, 0, 0, argv));
 
2097
 
 
2098
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
2099
 
 
2100
  const task_context *const added_wait_task
 
2101
    = find_matching_task(queue, (task_context){
 
2102
        .func=wait_for_mandos_client_exit,
 
2103
        .mandos_client_exited=&mandos_client_exited,
 
2104
        .quit_now=&quit_now,
 
2105
      });
 
2106
  g_assert_nonnull(added_wait_task);
 
2107
  g_assert_cmpint(added_wait_task->pid, >, 0);
 
2108
  g_assert_cmpint(kill(added_wait_task->pid, SIGKILL), ==, 0);
 
2109
  waitpid(added_wait_task->pid, NULL, 0);
 
2110
 
 
2111
  const task_context *const added_read_task
 
2112
    = find_matching_task(queue, (task_context){
 
2113
        .func=read_mandos_client_output,
 
2114
        .epoll_fd=epoll_fd,
 
2115
        .password=&password,
 
2116
        .password_is_read=&password_is_read,
 
2117
        .quit_now=&quit_now,
 
2118
      });
 
2119
  g_assert_nonnull(added_read_task);
 
2120
  g_assert_cmpint(added_read_task->fd, >, 2);
 
2121
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
2122
  g_assert_true(epoll_set_contains(epoll_fd, added_read_task->fd,
 
2123
                                   EPOLLIN | EPOLLRDHUP));
 
2124
}
 
2125
 
 
2126
static bool fd_has_cloexec_and_nonblock(const int fd){
 
2127
  const int socket_fd_flags = fcntl(fd, F_GETFD, 0);
 
2128
  const int socket_file_flags = fcntl(fd, F_GETFL, 0);
 
2129
  return ((socket_fd_flags >= 0)
 
2130
          and (socket_fd_flags & FD_CLOEXEC)
 
2131
          and (socket_file_flags >= 0)
 
2132
          and (socket_file_flags & O_NONBLOCK));
 
2133
}
 
2134
 
 
2135
__attribute__((const))
 
2136
bool is_privileged(void){
 
2137
  uid_t user = getuid() + 1;
 
2138
  if(user == 0){                /* Overflow check */
 
2139
    user++;
 
2140
  }
 
2141
  gid_t group = getuid() + 1;
 
2142
  if(group == 0){               /* Overflow check */
 
2143
    group++;
 
2144
  }
 
2145
  const pid_t pid = fork();
 
2146
  if(pid == 0){                 /* Child */
 
2147
    if(setresgid((uid_t)-1, group, group) == -1){
 
2148
      if(errno != EPERM){
 
2149
        error(EXIT_FAILURE, errno, "Failed to setresgid(-1, %" PRIuMAX
 
2150
              ", %" PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
 
2151
      }
 
2152
      exit(EXIT_FAILURE);
 
2153
    }
 
2154
    if(setresuid((uid_t)-1, user, user) == -1){
 
2155
      if(errno != EPERM){
 
2156
        error(EXIT_FAILURE, errno, "Failed to setresuid(-1, %" PRIuMAX
 
2157
              ", %" PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
 
2158
      }
 
2159
      exit(EXIT_FAILURE);
 
2160
    }
 
2161
    exit(EXIT_SUCCESS);
 
2162
  }
 
2163
  int status;
 
2164
  waitpid(pid, &status, 0);
 
2165
  if(WIFEXITED(status) and (WEXITSTATUS(status) == EXIT_SUCCESS)){
 
2166
    return true;
 
2167
  }
 
2168
  return false;
 
2169
}
 
2170
 
 
2171
static bool epoll_set_contains(int epoll_fd, int fd, uint32_t events){
 
2172
  /* Only scan for events in this eventmask */
 
2173
  const uint32_t eventmask = EPOLLIN | EPOLLOUT | EPOLLRDHUP;
 
2174
  __attribute__((cleanup(cleanup_string)))
 
2175
    char *fdinfo_name = NULL;
 
2176
  int ret = asprintf(&fdinfo_name, "/proc/self/fdinfo/%d", epoll_fd);
 
2177
  g_assert_cmpint(ret, >, 0);
 
2178
  g_assert_nonnull(fdinfo_name);
 
2179
 
 
2180
  FILE *fdinfo = fopen(fdinfo_name, "r");
 
2181
  g_assert_nonnull(fdinfo);
 
2182
  uint32_t reported_events;
 
2183
  buffer line = {};
 
2184
  int found_fd = -1;
 
2185
 
 
2186
  do {
 
2187
    if(getline(&line.data, &line.allocated, fdinfo) < 0){
 
2188
      break;
 
2189
    }
 
2190
    /* See proc(5) for format of /proc/PID/fdinfo/FD for epoll fd's */
 
2191
    if(sscanf(line.data, "tfd: %d events: %" SCNx32 " ",
 
2192
              &found_fd, &reported_events) == 2){
 
2193
      if(found_fd == fd){
 
2194
        break;
 
2195
      }
 
2196
    }
 
2197
  } while(not feof(fdinfo) and not ferror(fdinfo));
 
2198
  g_assert_cmpint(fclose(fdinfo), ==, 0);
 
2199
  free(line.data);
 
2200
  if(found_fd != fd){
 
2201
    return false;
 
2202
  }
 
2203
 
 
2204
  if(events == 0){
 
2205
    /* Don't check events if none are given */
 
2206
    return true;
 
2207
  }
 
2208
  return (reported_events & eventmask) == (events & eventmask);
 
2209
}
 
2210
 
 
2211
static void test_start_mandos_client_execv(test_fixture *fixture,
 
2212
                                           __attribute__((unused))
 
2213
                                           gconstpointer user_data){
 
2214
  bool mandos_client_exited = false;
 
2215
  bool quit_now = false;
 
2216
  __attribute__((cleanup(cleanup_close)))
 
2217
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2218
  g_assert_cmpint(epoll_fd, >=, 0);
 
2219
  __attribute__((cleanup(cleanup_queue)))
 
2220
    task_queue *queue = create_queue();
 
2221
  g_assert_nonnull(queue);
 
2222
  __attribute__((cleanup(cleanup_buffer)))
 
2223
    buffer password = {};
 
2224
  const char helper_directory[] = "/nonexistent";
 
2225
  /* Can't execv("/", ...), so this should fail */
 
2226
  const char *const argv[] = { "/", NULL };
 
2227
 
 
2228
  {
 
2229
    __attribute__((cleanup(cleanup_close)))
 
2230
      const int devnull_fd = open("/dev/null",
 
2231
                                  O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2232
    g_assert_cmpint(devnull_fd, >=, 0);
 
2233
    __attribute__((cleanup(cleanup_close)))
 
2234
      const int real_stderr_fd = dup(STDERR_FILENO);
 
2235
    g_assert_cmpint(real_stderr_fd, >=, 0);
 
2236
    dup2(devnull_fd, STDERR_FILENO);
 
2237
 
 
2238
    const bool success = start_mandos_client(queue, epoll_fd,
 
2239
                                             &mandos_client_exited,
 
2240
                                             &quit_now,
 
2241
                                             &password,
 
2242
                                             (bool[]){false},
 
2243
                                             &fixture->orig_sigaction,
 
2244
                                             fixture->orig_sigmask,
 
2245
                                             helper_directory, 0, 0,
 
2246
                                             argv);
 
2247
    dup2(real_stderr_fd, STDERR_FILENO);
 
2248
    g_assert_true(success);
 
2249
  }
 
2250
  g_assert_cmpuint((unsigned int)queue->length, ==, 2);
 
2251
 
 
2252
  struct timespec starttime, currtime;
 
2253
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2254
  do {
 
2255
    queue->next_run = 0;
 
2256
    string_set cancelled_filenames = {};
 
2257
 
 
2258
    {
 
2259
      __attribute__((cleanup(cleanup_close)))
 
2260
        const int devnull_fd = open("/dev/null",
 
2261
                                    O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2262
      g_assert_cmpint(devnull_fd, >=, 0);
 
2263
      __attribute__((cleanup(cleanup_close)))
 
2264
        const int real_stderr_fd = dup(STDERR_FILENO);
 
2265
      g_assert_cmpint(real_stderr_fd, >=, 0);
 
2266
      g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2267
      dup2(devnull_fd, STDERR_FILENO);
 
2268
      const bool success = run_queue(&queue, &cancelled_filenames,
 
2269
                                     &quit_now);
 
2270
      dup2(real_stderr_fd, STDERR_FILENO);
 
2271
      if(not success){
 
2272
        break;
 
2273
      }
 
2274
    }
 
2275
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2276
  } while(((queue->length) > 0)
 
2277
          and (not quit_now)
 
2278
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2279
 
 
2280
  g_assert_true(quit_now);
 
2281
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2282
  g_assert_true(mandos_client_exited);
 
2283
}
 
2284
 
 
2285
static void test_start_mandos_client_suid_euid(test_fixture *fixture,
 
2286
                                               __attribute__((unused))
 
2287
                                               gconstpointer
 
2288
                                               user_data){
 
2289
  if(not is_privileged()){
 
2290
    g_test_skip("Not privileged");
 
2291
    return;
 
2292
  }
 
2293
 
 
2294
  bool mandos_client_exited = false;
 
2295
  bool quit_now = false;
 
2296
  __attribute__((cleanup(cleanup_close)))
 
2297
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2298
  g_assert_cmpint(epoll_fd, >=, 0);
 
2299
  __attribute__((cleanup(cleanup_queue)))
 
2300
    task_queue *queue = create_queue();
 
2301
  g_assert_nonnull(queue);
 
2302
  __attribute__((cleanup(cleanup_buffer)))
 
2303
    buffer password = {};
 
2304
  bool password_is_read = false;
 
2305
  const char helper_directory[] = "/nonexistent";
 
2306
  const char *const argv[] = { "/usr/bin/id", "--user", NULL };
 
2307
  uid_t user = 1000;
 
2308
  gid_t group = 1001;
 
2309
 
 
2310
  const bool success = start_mandos_client(queue, epoll_fd,
 
2311
                                           &mandos_client_exited,
 
2312
                                           &quit_now, &password,
 
2313
                                           &password_is_read,
 
2314
                                           &fixture->orig_sigaction,
 
2315
                                           fixture->orig_sigmask,
 
2316
                                           helper_directory, user,
 
2317
                                           group, argv);
 
2318
  g_assert_true(success);
 
2319
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2320
 
 
2321
  struct timespec starttime, currtime;
 
2322
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2323
  do {
 
2324
    queue->next_run = 0;
 
2325
    string_set cancelled_filenames = {};
 
2326
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2327
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2328
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2329
  } while(((queue->length) > 0)
 
2330
          and (not quit_now)
 
2331
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2332
 
 
2333
  g_assert_false(quit_now);
 
2334
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2335
  g_assert_true(mandos_client_exited);
 
2336
 
 
2337
  g_assert_true(password_is_read);
 
2338
  g_assert_nonnull(password.data);
 
2339
 
 
2340
  uintmax_t id;
 
2341
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2342
                  ==, 1);
 
2343
  g_assert_true((uid_t)id == id);
 
2344
 
 
2345
  g_assert_cmpuint((unsigned int)id, ==, 0);
 
2346
}
 
2347
 
 
2348
static void test_start_mandos_client_suid_egid(test_fixture *fixture,
 
2349
                                               __attribute__((unused))
 
2350
                                               gconstpointer
 
2351
                                               user_data){
 
2352
  if(not is_privileged()){
 
2353
    g_test_skip("Not privileged");
 
2354
    return;
 
2355
  }
 
2356
 
 
2357
  bool mandos_client_exited = false;
 
2358
  bool quit_now = false;
 
2359
  __attribute__((cleanup(cleanup_close)))
 
2360
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2361
  g_assert_cmpint(epoll_fd, >=, 0);
 
2362
  __attribute__((cleanup(cleanup_queue)))
 
2363
    task_queue *queue = create_queue();
 
2364
  g_assert_nonnull(queue);
 
2365
  __attribute__((cleanup(cleanup_buffer)))
 
2366
    buffer password = {};
 
2367
  bool password_is_read = false;
 
2368
  const char helper_directory[] = "/nonexistent";
 
2369
  const char *const argv[] = { "/usr/bin/id", "--group", NULL };
 
2370
  uid_t user = 1000;
 
2371
  gid_t group = 1001;
 
2372
 
 
2373
  const bool success = start_mandos_client(queue, epoll_fd,
 
2374
                                           &mandos_client_exited,
 
2375
                                           &quit_now, &password,
 
2376
                                           &password_is_read,
 
2377
                                           &fixture->orig_sigaction,
 
2378
                                           fixture->orig_sigmask,
 
2379
                                           helper_directory, user,
 
2380
                                           group, argv);
 
2381
  g_assert_true(success);
 
2382
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2383
 
 
2384
  struct timespec starttime, currtime;
 
2385
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2386
  do {
 
2387
    queue->next_run = 0;
 
2388
    string_set cancelled_filenames = {};
 
2389
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2390
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2391
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2392
  } while(((queue->length) > 0)
 
2393
          and (not quit_now)
 
2394
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2395
 
 
2396
  g_assert_false(quit_now);
 
2397
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2398
  g_assert_true(mandos_client_exited);
 
2399
 
 
2400
  g_assert_true(password_is_read);
 
2401
  g_assert_nonnull(password.data);
 
2402
 
 
2403
  uintmax_t id;
 
2404
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2405
                  ==, 1);
 
2406
  g_assert_true((gid_t)id == id);
 
2407
 
 
2408
  g_assert_cmpuint((unsigned int)id, ==, 0);
 
2409
}
 
2410
 
 
2411
static void test_start_mandos_client_suid_ruid(test_fixture *fixture,
 
2412
                                               __attribute__((unused))
 
2413
                                               gconstpointer
 
2414
                                               user_data){
 
2415
  if(not is_privileged()){
 
2416
    g_test_skip("Not privileged");
 
2417
    return;
 
2418
  }
 
2419
 
 
2420
  bool mandos_client_exited = false;
 
2421
  bool quit_now = false;
 
2422
  __attribute__((cleanup(cleanup_close)))
 
2423
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2424
  g_assert_cmpint(epoll_fd, >=, 0);
 
2425
  __attribute__((cleanup(cleanup_queue)))
 
2426
    task_queue *queue = create_queue();
 
2427
  g_assert_nonnull(queue);
 
2428
  __attribute__((cleanup(cleanup_buffer)))
 
2429
    buffer password = {};
 
2430
  bool password_is_read = false;
 
2431
  const char helper_directory[] = "/nonexistent";
 
2432
  const char *const argv[] = { "/usr/bin/id", "--user", "--real",
 
2433
    NULL };
 
2434
  uid_t user = 1000;
 
2435
  gid_t group = 1001;
 
2436
 
 
2437
  const bool success = start_mandos_client(queue, epoll_fd,
 
2438
                                           &mandos_client_exited,
 
2439
                                           &quit_now, &password,
 
2440
                                           &password_is_read,
 
2441
                                           &fixture->orig_sigaction,
 
2442
                                           fixture->orig_sigmask,
 
2443
                                           helper_directory, user,
 
2444
                                           group, argv);
 
2445
  g_assert_true(success);
 
2446
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2447
 
 
2448
  struct timespec starttime, currtime;
 
2449
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2450
  do {
 
2451
    queue->next_run = 0;
 
2452
    string_set cancelled_filenames = {};
 
2453
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2454
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2455
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2456
  } while(((queue->length) > 0)
 
2457
          and (not quit_now)
 
2458
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2459
 
 
2460
  g_assert_false(quit_now);
 
2461
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2462
  g_assert_true(mandos_client_exited);
 
2463
 
 
2464
  g_assert_true(password_is_read);
 
2465
  g_assert_nonnull(password.data);
 
2466
 
 
2467
  uintmax_t id;
 
2468
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2469
                  ==, 1);
 
2470
  g_assert_true((uid_t)id == id);
 
2471
 
 
2472
  g_assert_cmpuint((unsigned int)id, ==, user);
 
2473
}
 
2474
 
 
2475
static void test_start_mandos_client_suid_rgid(test_fixture *fixture,
 
2476
                                               __attribute__((unused))
 
2477
                                               gconstpointer
 
2478
                                               user_data){
 
2479
  if(not is_privileged()){
 
2480
    g_test_skip("Not privileged");
 
2481
    return;
 
2482
  }
 
2483
 
 
2484
  bool mandos_client_exited = false;
 
2485
  bool quit_now = false;
 
2486
  __attribute__((cleanup(cleanup_close)))
 
2487
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2488
  g_assert_cmpint(epoll_fd, >=, 0);
 
2489
  __attribute__((cleanup(cleanup_queue)))
 
2490
    task_queue *queue = create_queue();
 
2491
  g_assert_nonnull(queue);
 
2492
  __attribute__((cleanup(cleanup_buffer)))
 
2493
    buffer password = {};
 
2494
  bool password_is_read = false;
 
2495
  const char helper_directory[] = "/nonexistent";
 
2496
  const char *const argv[] = { "/usr/bin/id", "--group", "--real",
 
2497
    NULL };
 
2498
  uid_t user = 1000;
 
2499
  gid_t group = 1001;
 
2500
 
 
2501
  const bool success = start_mandos_client(queue, epoll_fd,
 
2502
                                           &mandos_client_exited,
 
2503
                                           &quit_now, &password,
 
2504
                                           &password_is_read,
 
2505
                                           &fixture->orig_sigaction,
 
2506
                                           fixture->orig_sigmask,
 
2507
                                           helper_directory, user,
 
2508
                                           group, argv);
 
2509
  g_assert_true(success);
 
2510
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2511
 
 
2512
  struct timespec starttime, currtime;
 
2513
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2514
  do {
 
2515
    queue->next_run = 0;
 
2516
    string_set cancelled_filenames = {};
 
2517
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2518
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2519
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2520
  } while(((queue->length) > 0)
 
2521
          and (not quit_now)
 
2522
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2523
 
 
2524
  g_assert_false(quit_now);
 
2525
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2526
  g_assert_true(mandos_client_exited);
 
2527
 
 
2528
  g_assert_true(password_is_read);
 
2529
  g_assert_nonnull(password.data);
 
2530
 
 
2531
  uintmax_t id;
 
2532
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2533
                  ==, 1);
 
2534
  g_assert_true((gid_t)id == id);
 
2535
 
 
2536
  g_assert_cmpuint((unsigned int)id, ==, group);
 
2537
}
 
2538
 
 
2539
static void test_start_mandos_client_read(test_fixture *fixture,
 
2540
                                          __attribute__((unused))
 
2541
                                          gconstpointer user_data){
 
2542
  bool mandos_client_exited = false;
 
2543
  bool quit_now = false;
 
2544
  __attribute__((cleanup(cleanup_close)))
 
2545
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2546
  g_assert_cmpint(epoll_fd, >=, 0);
 
2547
  __attribute__((cleanup(cleanup_queue)))
 
2548
    task_queue *queue = create_queue();
 
2549
  g_assert_nonnull(queue);
 
2550
  __attribute__((cleanup(cleanup_buffer)))
 
2551
    buffer password = {};
 
2552
  bool password_is_read = false;
 
2553
  const char dummy_test_password[] = "dummy test password";
 
2554
  const char helper_directory[] = "/nonexistent";
 
2555
  const char *const argv[] = { "/bin/echo", "-n", dummy_test_password,
 
2556
    NULL };
 
2557
 
 
2558
  const bool success = start_mandos_client(queue, epoll_fd,
 
2559
                                           &mandos_client_exited,
 
2560
                                           &quit_now, &password,
 
2561
                                           &password_is_read,
 
2562
                                           &fixture->orig_sigaction,
 
2563
                                           fixture->orig_sigmask,
 
2564
                                           helper_directory, 0, 0,
 
2565
                                           argv);
 
2566
  g_assert_true(success);
 
2567
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2568
 
 
2569
  struct timespec starttime, currtime;
 
2570
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2571
  do {
 
2572
    queue->next_run = 0;
 
2573
    string_set cancelled_filenames = {};
 
2574
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2575
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2576
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2577
  } while(((queue->length) > 0)
 
2578
          and (not quit_now)
 
2579
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2580
 
 
2581
  g_assert_false(quit_now);
 
2582
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2583
  g_assert_true(mandos_client_exited);
 
2584
 
 
2585
  g_assert_true(password_is_read);
 
2586
  g_assert_cmpint((int)password.length, ==,
 
2587
                  sizeof(dummy_test_password)-1);
 
2588
  g_assert_nonnull(password.data);
 
2589
  g_assert_cmpint(memcmp(dummy_test_password, password.data,
 
2590
                         sizeof(dummy_test_password)-1), ==, 0);
 
2591
}
 
2592
 
 
2593
static
 
2594
void test_start_mandos_client_helper_directory(test_fixture *fixture,
 
2595
                                               __attribute__((unused))
 
2596
                                               gconstpointer
 
2597
                                               user_data){
 
2598
  bool mandos_client_exited = false;
 
2599
  bool quit_now = false;
 
2600
  __attribute__((cleanup(cleanup_close)))
 
2601
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2602
  g_assert_cmpint(epoll_fd, >=, 0);
 
2603
  __attribute__((cleanup(cleanup_queue)))
 
2604
    task_queue *queue = create_queue();
 
2605
  g_assert_nonnull(queue);
 
2606
  __attribute__((cleanup(cleanup_buffer)))
 
2607
    buffer password = {};
 
2608
  bool password_is_read = false;
 
2609
  const char helper_directory[] = "/nonexistent";
 
2610
  const char *const argv[] = { "/bin/sh", "-c",
 
2611
    "echo -n ${MANDOSPLUGINHELPERDIR}", NULL };
 
2612
 
 
2613
  const bool success = start_mandos_client(queue, epoll_fd,
 
2614
                                           &mandos_client_exited,
 
2615
                                           &quit_now, &password,
 
2616
                                           &password_is_read,
 
2617
                                           &fixture->orig_sigaction,
 
2618
                                           fixture->orig_sigmask,
 
2619
                                           helper_directory, 0, 0,
 
2620
                                           argv);
 
2621
  g_assert_true(success);
 
2622
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2623
 
 
2624
  struct timespec starttime, currtime;
 
2625
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2626
  do {
 
2627
    queue->next_run = 0;
 
2628
    string_set cancelled_filenames = {};
 
2629
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2630
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2631
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2632
  } while(((queue->length) > 0)
 
2633
          and (not quit_now)
 
2634
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2635
 
 
2636
  g_assert_false(quit_now);
 
2637
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2638
  g_assert_true(mandos_client_exited);
 
2639
 
 
2640
  g_assert_true(password_is_read);
 
2641
  g_assert_cmpint((int)password.length, ==,
 
2642
                  sizeof(helper_directory)-1);
 
2643
  g_assert_nonnull(password.data);
 
2644
  g_assert_cmpint(memcmp(helper_directory, password.data,
 
2645
                         sizeof(helper_directory)-1), ==, 0);
 
2646
}
 
2647
 
 
2648
__attribute__((nonnull, warn_unused_result))
 
2649
static bool proc_status_sigblk_to_sigset(const char *const,
 
2650
                                         sigset_t *const);
 
2651
 
 
2652
static void test_start_mandos_client_sigmask(test_fixture *fixture,
 
2653
                                             __attribute__((unused))
 
2654
                                             gconstpointer user_data){
 
2655
  bool mandos_client_exited = false;
 
2656
  bool quit_now = false;
 
2657
  __attribute__((cleanup(cleanup_close)))
 
2658
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2659
  g_assert_cmpint(epoll_fd, >=, 0);
 
2660
  __attribute__((cleanup(cleanup_queue)))
 
2661
    task_queue *queue = create_queue();
 
2662
  g_assert_nonnull(queue);
 
2663
  __attribute__((cleanup(cleanup_buffer)))
 
2664
    buffer password = {};
 
2665
  bool password_is_read = false;
 
2666
  const char helper_directory[] = "/nonexistent";
 
2667
  /* see proc(5) for format of /proc/self/status */
 
2668
  const char *const argv[] = { "/usr/bin/awk",
 
2669
    "$1==\"SigBlk:\"{ print $2 }", "/proc/self/status", NULL };
 
2670
 
 
2671
  g_assert_true(start_mandos_client(queue, epoll_fd,
 
2672
                                    &mandos_client_exited, &quit_now,
 
2673
                                    &password, &password_is_read,
 
2674
                                    &fixture->orig_sigaction,
 
2675
                                    fixture->orig_sigmask,
 
2676
                                    helper_directory, 0, 0, argv));
 
2677
 
 
2678
  struct timespec starttime, currtime;
 
2679
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2680
  do {
 
2681
    queue->next_run = 0;
 
2682
    string_set cancelled_filenames = {};
 
2683
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2684
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2685
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2686
  } while((not (mandos_client_exited and password_is_read))
 
2687
          and (not quit_now)
 
2688
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2689
  g_assert_true(mandos_client_exited);
 
2690
  g_assert_true(password_is_read);
 
2691
 
 
2692
  sigset_t parsed_sigmask;
 
2693
  g_assert_true(proc_status_sigblk_to_sigset(password.data,
 
2694
                                             &parsed_sigmask));
 
2695
 
 
2696
  for(int signum = 1; signum < NSIG; signum++){
 
2697
    const bool has_signal = sigismember(&parsed_sigmask, signum);
 
2698
    if(sigismember(&fixture->orig_sigmask, signum)){
 
2699
      g_assert_true(has_signal);
 
2700
    } else {
 
2701
      g_assert_false(has_signal);
 
2702
    }
 
2703
  }
 
2704
}
 
2705
 
 
2706
__attribute__((nonnull, warn_unused_result))
 
2707
static bool proc_status_sigblk_to_sigset(const char *const sigblk,
 
2708
                                         sigset_t *const sigmask){
 
2709
  /* parse /proc/PID/status SigBlk value and convert to a sigset_t */
 
2710
  uintmax_t scanned_sigmask;
 
2711
  if(sscanf(sigblk, "%" SCNxMAX " ", &scanned_sigmask) != 1){
 
2712
    return false;
 
2713
  }
 
2714
  if(sigemptyset(sigmask) != 0){
 
2715
    return false;
 
2716
  }
 
2717
  for(int signum = 1; signum < NSIG; signum++){
 
2718
    if(scanned_sigmask & ((uintmax_t)1 << (signum-1))){
 
2719
      if(sigaddset(sigmask, signum) != 0){
 
2720
        return false;
 
2721
      }
 
2722
    }
 
2723
  }
 
2724
  return true;
 
2725
}
 
2726
 
 
2727
static void run_task_with_stderr_to_dev_null(const task_context task,
 
2728
                                             task_queue *const queue);
 
2729
 
 
2730
static
 
2731
void test_wait_for_mandos_client_exit_badpid(__attribute__((unused))
 
2732
                                             test_fixture *fixture,
 
2733
                                             __attribute__((unused))
 
2734
                                             gconstpointer user_data){
 
2735
 
 
2736
  bool mandos_client_exited = false;
 
2737
  bool quit_now = false;
 
2738
 
 
2739
  __attribute__((cleanup(cleanup_queue)))
 
2740
    task_queue *queue = create_queue();
 
2741
  g_assert_nonnull(queue);
 
2742
  const task_context task = {
 
2743
    .func=wait_for_mandos_client_exit,
 
2744
    .pid=1,
 
2745
    .mandos_client_exited=&mandos_client_exited,
 
2746
    .quit_now=&quit_now,
 
2747
  };
 
2748
  run_task_with_stderr_to_dev_null(task, queue);
 
2749
 
 
2750
  g_assert_false(mandos_client_exited);
 
2751
  g_assert_true(quit_now);
 
2752
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2753
}
 
2754
 
 
2755
static void run_task_with_stderr_to_dev_null(const task_context task,
 
2756
                                             task_queue *const queue){
 
2757
  FILE *real_stderr = stderr;
 
2758
  FILE *devnull = fopen("/dev/null", "we");
 
2759
  g_assert_nonnull(devnull);
 
2760
 
 
2761
  stderr = devnull;
 
2762
  task.func(task, queue);
 
2763
  stderr = real_stderr;
 
2764
 
 
2765
  g_assert_cmpint(fclose(devnull), ==, 0);
 
2766
}
 
2767
 
 
2768
static
 
2769
void test_wait_for_mandos_client_exit_noexit(test_fixture *fixture,
 
2770
                                             __attribute__((unused))
 
2771
                                             gconstpointer user_data){
 
2772
  bool mandos_client_exited = false;
 
2773
  bool quit_now = false;
 
2774
 
 
2775
  pid_t create_eternal_process(void){
 
2776
    const pid_t pid = fork();
 
2777
    if(pid == 0){               /* Child */
 
2778
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2779
        _exit(EXIT_FAILURE);
 
2780
      }
 
2781
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2782
        _exit(EXIT_FAILURE);
 
2783
      }
 
2784
      while(true){
 
2785
        pause();
 
2786
      }
 
2787
    }
 
2788
    return pid;
 
2789
  }
 
2790
  pid_t pid = create_eternal_process();
 
2791
  g_assert_true(pid != -1);
 
2792
 
 
2793
  __attribute__((cleanup(cleanup_queue)))
 
2794
    task_queue *queue = create_queue();
 
2795
  g_assert_nonnull(queue);
 
2796
  const task_context task = {
 
2797
    .func=wait_for_mandos_client_exit,
 
2798
    .pid=pid,
 
2799
    .mandos_client_exited=&mandos_client_exited,
 
2800
    .quit_now=&quit_now,
 
2801
  };
 
2802
  task.func(task, queue);
 
2803
 
 
2804
  g_assert_false(mandos_client_exited);
 
2805
  g_assert_false(quit_now);
 
2806
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
2807
 
 
2808
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
2809
        .func=wait_for_mandos_client_exit,
 
2810
        .pid=task.pid,
 
2811
        .mandos_client_exited=&mandos_client_exited,
 
2812
        .quit_now=&quit_now,
 
2813
      }));
 
2814
}
 
2815
 
 
2816
static
 
2817
void test_wait_for_mandos_client_exit_success(test_fixture *fixture,
 
2818
                                              __attribute__((unused))
 
2819
                                              gconstpointer
 
2820
                                              user_data){
 
2821
  bool mandos_client_exited = false;
 
2822
  bool quit_now = false;
 
2823
 
 
2824
  pid_t create_successful_process(void){
 
2825
    const pid_t pid = fork();
 
2826
    if(pid == 0){               /* Child */
 
2827
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2828
        _exit(EXIT_FAILURE);
 
2829
      }
 
2830
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2831
        _exit(EXIT_FAILURE);
 
2832
      }
 
2833
      exit(EXIT_SUCCESS);
 
2834
    }
 
2835
    return pid;
 
2836
  }
 
2837
  const pid_t pid = create_successful_process();
 
2838
  g_assert_true(pid != -1);
 
2839
 
 
2840
  __attribute__((cleanup(cleanup_queue)))
 
2841
    task_queue *queue = create_queue();
 
2842
  g_assert_nonnull(queue);
 
2843
  const task_context initial_task = {
 
2844
    .func=wait_for_mandos_client_exit,
 
2845
    .pid=pid,
 
2846
    .mandos_client_exited=&mandos_client_exited,
 
2847
    .quit_now=&quit_now,
 
2848
  };
 
2849
  g_assert_true(add_to_queue(queue, initial_task));
 
2850
 
 
2851
  struct timespec starttime, currtime;
 
2852
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2853
  __attribute__((cleanup(cleanup_close)))
 
2854
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2855
  do {
 
2856
    queue->next_run = 0;
 
2857
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2858
    g_assert_true(run_queue(&queue, (string_set[]){{}}, &quit_now));
 
2859
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2860
  } while((not mandos_client_exited)
 
2861
          and (not quit_now)
 
2862
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2863
 
 
2864
  g_assert_true(mandos_client_exited);
 
2865
  g_assert_false(quit_now);
 
2866
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2867
}
 
2868
 
 
2869
static
 
2870
void test_wait_for_mandos_client_exit_failure(test_fixture *fixture,
 
2871
                                              __attribute__((unused))
 
2872
                                              gconstpointer
 
2873
                                              user_data){
 
2874
  bool mandos_client_exited = false;
 
2875
  bool quit_now = false;
 
2876
 
 
2877
  pid_t create_failing_process(void){
 
2878
    const pid_t pid = fork();
 
2879
    if(pid == 0){               /* Child */
 
2880
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2881
        _exit(EXIT_FAILURE);
 
2882
      }
 
2883
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2884
        _exit(EXIT_FAILURE);
 
2885
      }
 
2886
      exit(EXIT_FAILURE);
 
2887
    }
 
2888
    return pid;
 
2889
  }
 
2890
  const pid_t pid = create_failing_process();
 
2891
  g_assert_true(pid != -1);
 
2892
 
 
2893
  __attribute__((cleanup(string_set_clear)))
 
2894
    string_set cancelled_filenames = {};
 
2895
  __attribute__((cleanup(cleanup_close)))
 
2896
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2897
  g_assert_cmpint(epoll_fd, >=, 0);
 
2898
  __attribute__((cleanup(cleanup_queue)))
 
2899
    task_queue *queue = create_queue();
 
2900
  g_assert_nonnull(queue);
 
2901
  g_assert_true(add_to_queue(queue, (task_context){
 
2902
        .func=wait_for_mandos_client_exit,
 
2903
        .pid=pid,
 
2904
        .mandos_client_exited=&mandos_client_exited,
 
2905
        .quit_now=&quit_now,
 
2906
      }));
 
2907
 
 
2908
  g_assert_true(sigismember(&fixture->orig_sigmask, SIGCHLD) == 0);
 
2909
 
 
2910
  __attribute__((cleanup(cleanup_close)))
 
2911
    const int devnull_fd = open("/dev/null",
 
2912
                                O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2913
  g_assert_cmpint(devnull_fd, >=, 0);
 
2914
  __attribute__((cleanup(cleanup_close)))
 
2915
    const int real_stderr_fd = dup(STDERR_FILENO);
 
2916
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
2917
 
 
2918
  struct timespec starttime, currtime;
 
2919
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2920
  do {
 
2921
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2922
    dup2(devnull_fd, STDERR_FILENO);
 
2923
    const bool success = run_queue(&queue, &cancelled_filenames,
 
2924
                                   &quit_now);
 
2925
    dup2(real_stderr_fd, STDERR_FILENO);
 
2926
    if(not success){
 
2927
      break;
 
2928
    }
 
2929
 
 
2930
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2931
  } while((not mandos_client_exited)
 
2932
          and (not quit_now)
 
2933
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2934
 
 
2935
  g_assert_true(quit_now);
 
2936
  g_assert_true(mandos_client_exited);
 
2937
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2938
}
 
2939
 
 
2940
static
 
2941
void test_wait_for_mandos_client_exit_killed(test_fixture *fixture,
 
2942
                                             __attribute__((unused))
 
2943
                                             gconstpointer user_data){
 
2944
  bool mandos_client_exited = false;
 
2945
  bool quit_now = false;
 
2946
 
 
2947
  pid_t create_killed_process(void){
 
2948
    const pid_t pid = fork();
 
2949
    if(pid == 0){               /* Child */
 
2950
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2951
        _exit(EXIT_FAILURE);
 
2952
      }
 
2953
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2954
        _exit(EXIT_FAILURE);
 
2955
      }
 
2956
      while(true){
 
2957
        pause();
 
2958
      }
 
2959
    }
 
2960
    kill(pid, SIGKILL);
 
2961
    return pid;
 
2962
  }
 
2963
  const pid_t pid = create_killed_process();
 
2964
  g_assert_true(pid != -1);
 
2965
 
 
2966
  __attribute__((cleanup(string_set_clear)))
 
2967
    string_set cancelled_filenames = {};
 
2968
  __attribute__((cleanup(cleanup_close)))
 
2969
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2970
  g_assert_cmpint(epoll_fd, >=, 0);
 
2971
  __attribute__((cleanup(cleanup_queue)))
 
2972
    task_queue *queue = create_queue();
 
2973
  g_assert_nonnull(queue);
 
2974
  g_assert_true(add_to_queue(queue, (task_context){
 
2975
        .func=wait_for_mandos_client_exit,
 
2976
        .pid=pid,
 
2977
        .mandos_client_exited=&mandos_client_exited,
 
2978
        .quit_now=&quit_now,
 
2979
      }));
 
2980
 
 
2981
  __attribute__((cleanup(cleanup_close)))
 
2982
    const int devnull_fd = open("/dev/null",
 
2983
                                O_WRONLY | O_CLOEXEC, O_NOCTTY);
 
2984
  g_assert_cmpint(devnull_fd, >=, 0);
 
2985
  __attribute__((cleanup(cleanup_close)))
 
2986
    const int real_stderr_fd = dup(STDERR_FILENO);
 
2987
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
2988
 
 
2989
  struct timespec starttime, currtime;
 
2990
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2991
  do {
 
2992
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2993
    dup2(devnull_fd, STDERR_FILENO);
 
2994
    const bool success = run_queue(&queue, &cancelled_filenames,
 
2995
                                   &quit_now);
 
2996
    dup2(real_stderr_fd, STDERR_FILENO);
 
2997
    if(not success){
 
2998
      break;
 
2999
    }
 
3000
 
 
3001
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
3002
  } while((not mandos_client_exited)
 
3003
          and (not quit_now)
 
3004
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
3005
 
 
3006
  g_assert_true(mandos_client_exited);
 
3007
  g_assert_true(quit_now);
 
3008
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3009
}
 
3010
 
 
3011
static bool epoll_set_does_not_contain(int, int);
 
3012
 
 
3013
static
 
3014
void test_read_mandos_client_output_readerror(__attribute__((unused))
 
3015
                                              test_fixture *fixture,
 
3016
                                              __attribute__((unused))
 
3017
                                              gconstpointer
 
3018
                                              user_data){
 
3019
  __attribute__((cleanup(cleanup_close)))
 
3020
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3021
  g_assert_cmpint(epoll_fd, >=, 0);
 
3022
 
 
3023
  __attribute__((cleanup(cleanup_buffer)))
 
3024
    buffer password = {};
 
3025
 
 
3026
  /* Reading /proc/self/mem from offset 0 will always give EIO */
 
3027
  const int fd = open("/proc/self/mem",
 
3028
                      O_RDONLY | O_CLOEXEC | O_NOCTTY);
 
3029
 
 
3030
  bool password_is_read = false;
 
3031
  bool quit_now = false;
 
3032
  __attribute__((cleanup(cleanup_queue)))
 
3033
    task_queue *queue = create_queue();
 
3034
  g_assert_nonnull(queue);
 
3035
 
 
3036
  task_context task = {
 
3037
    .func=read_mandos_client_output,
 
3038
    .epoll_fd=epoll_fd,
 
3039
    .fd=fd,
 
3040
    .password=&password,
 
3041
    .password_is_read=&password_is_read,
 
3042
    .quit_now=&quit_now,
 
3043
  };
 
3044
  run_task_with_stderr_to_dev_null(task, queue);
 
3045
  g_assert_false(password_is_read);
 
3046
  g_assert_cmpint((int)password.length, ==, 0);
 
3047
  g_assert_true(quit_now);
 
3048
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3049
 
 
3050
  g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
 
3051
 
 
3052
  g_assert_cmpint(close(fd), ==, -1);
 
3053
}
 
3054
 
 
3055
static bool epoll_set_does_not_contain(int epoll_fd, int fd){
 
3056
  return not epoll_set_contains(epoll_fd, fd, 0);
 
3057
}
 
3058
 
 
3059
static
 
3060
void test_read_mandos_client_output_nodata(__attribute__((unused))
 
3061
                                           test_fixture *fixture,
 
3062
                                           __attribute__((unused))
 
3063
                                           gconstpointer user_data){
 
3064
  __attribute__((cleanup(cleanup_close)))
 
3065
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3066
  g_assert_cmpint(epoll_fd, >=, 0);
 
3067
 
 
3068
  int pipefds[2];
 
3069
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3070
 
 
3071
  __attribute__((cleanup(cleanup_buffer)))
 
3072
    buffer password = {};
 
3073
 
 
3074
  bool password_is_read = false;
 
3075
  bool quit_now = false;
 
3076
  __attribute__((cleanup(cleanup_queue)))
 
3077
    task_queue *queue = create_queue();
 
3078
  g_assert_nonnull(queue);
 
3079
 
 
3080
  task_context task = {
 
3081
    .func=read_mandos_client_output,
 
3082
    .epoll_fd=epoll_fd,
 
3083
    .fd=pipefds[0],
 
3084
    .password=&password,
 
3085
    .password_is_read=&password_is_read,
 
3086
    .quit_now=&quit_now,
 
3087
  };
 
3088
  task.func(task, queue);
 
3089
  g_assert_false(password_is_read);
 
3090
  g_assert_cmpint((int)password.length, ==, 0);
 
3091
  g_assert_false(quit_now);
 
3092
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3093
 
 
3094
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3095
        .func=read_mandos_client_output,
 
3096
        .epoll_fd=epoll_fd,
 
3097
        .fd=pipefds[0],
 
3098
        .password=&password,
 
3099
        .password_is_read=&password_is_read,
 
3100
        .quit_now=&quit_now,
 
3101
      }));
 
3102
 
 
3103
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3104
                                   EPOLLIN | EPOLLRDHUP));
 
3105
 
 
3106
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3107
}
 
3108
 
 
3109
static void test_read_mandos_client_output_eof(__attribute__((unused))
 
3110
                                               test_fixture *fixture,
 
3111
                                               __attribute__((unused))
 
3112
                                               gconstpointer
 
3113
                                               user_data){
 
3114
  __attribute__((cleanup(cleanup_close)))
 
3115
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3116
  g_assert_cmpint(epoll_fd, >=, 0);
 
3117
 
 
3118
  int pipefds[2];
 
3119
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3120
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3121
 
 
3122
  __attribute__((cleanup(cleanup_buffer)))
 
3123
    buffer password = {};
 
3124
 
 
3125
  bool password_is_read = false;
 
3126
  bool quit_now = false;
 
3127
  __attribute__((cleanup(cleanup_queue)))
 
3128
    task_queue *queue = create_queue();
 
3129
  g_assert_nonnull(queue);
 
3130
 
 
3131
  task_context task = {
 
3132
    .func=read_mandos_client_output,
 
3133
    .epoll_fd=epoll_fd,
 
3134
    .fd=pipefds[0],
 
3135
    .password=&password,
 
3136
    .password_is_read=&password_is_read,
 
3137
    .quit_now=&quit_now,
 
3138
  };
 
3139
  task.func(task, queue);
 
3140
  g_assert_true(password_is_read);
 
3141
  g_assert_cmpint((int)password.length, ==, 0);
 
3142
  g_assert_false(quit_now);
 
3143
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3144
 
 
3145
  g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
 
3146
 
 
3147
  g_assert_cmpint(close(pipefds[0]), ==, -1);
 
3148
}
 
3149
 
 
3150
static
 
3151
void test_read_mandos_client_output_once(__attribute__((unused))
 
3152
                                         test_fixture *fixture,
 
3153
                                         __attribute__((unused))
 
3154
                                         gconstpointer user_data){
 
3155
  __attribute__((cleanup(cleanup_close)))
 
3156
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3157
  g_assert_cmpint(epoll_fd, >=, 0);
 
3158
 
 
3159
  int pipefds[2];
 
3160
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3161
 
 
3162
  const char dummy_test_password[] = "dummy test password";
 
3163
  /* Start with a pre-allocated buffer */
 
3164
  __attribute__((cleanup(cleanup_buffer)))
 
3165
    buffer password = {
 
3166
    .data=malloc(sizeof(dummy_test_password)),
 
3167
    .length=0,
 
3168
    .allocated=sizeof(dummy_test_password),
 
3169
  };
 
3170
  g_assert_nonnull(password.data);
 
3171
  if(mlock(password.data, password.allocated) != 0){
 
3172
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
3173
  }
 
3174
 
 
3175
  bool password_is_read = false;
 
3176
  bool quit_now = false;
 
3177
  __attribute__((cleanup(cleanup_queue)))
 
3178
    task_queue *queue = create_queue();
 
3179
  g_assert_nonnull(queue);
 
3180
 
 
3181
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3182
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3183
                             sizeof(dummy_test_password)),
 
3184
                  ==, (int)sizeof(dummy_test_password));
 
3185
 
 
3186
  task_context task = {
 
3187
    .func=read_mandos_client_output,
 
3188
    .epoll_fd=epoll_fd,
 
3189
    .fd=pipefds[0],
 
3190
    .password=&password,
 
3191
    .password_is_read=&password_is_read,
 
3192
    .quit_now=&quit_now,
 
3193
  };
 
3194
  task.func(task, queue);
 
3195
 
 
3196
  g_assert_false(password_is_read);
 
3197
  g_assert_cmpint((int)password.length, ==,
 
3198
                  (int)sizeof(dummy_test_password));
 
3199
  g_assert_nonnull(password.data);
 
3200
  g_assert_cmpint(memcmp(password.data, dummy_test_password,
 
3201
                         sizeof(dummy_test_password)), ==, 0);
 
3202
 
 
3203
  g_assert_false(quit_now);
 
3204
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3205
 
 
3206
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3207
        .func=read_mandos_client_output,
 
3208
        .epoll_fd=epoll_fd,
 
3209
        .fd=pipefds[0],
 
3210
        .password=&password,
 
3211
        .password_is_read=&password_is_read,
 
3212
        .quit_now=&quit_now,
 
3213
      }));
 
3214
 
 
3215
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3216
                                   EPOLLIN | EPOLLRDHUP));
 
3217
 
 
3218
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3219
}
 
3220
 
 
3221
static
 
3222
void test_read_mandos_client_output_malloc(__attribute__((unused))
 
3223
                                           test_fixture *fixture,
 
3224
                                           __attribute__((unused))
 
3225
                                           gconstpointer user_data){
 
3226
  __attribute__((cleanup(cleanup_close)))
 
3227
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3228
  g_assert_cmpint(epoll_fd, >=, 0);
 
3229
 
 
3230
  int pipefds[2];
 
3231
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3232
 
 
3233
  const char dummy_test_password[] = "dummy test password";
 
3234
  /* Start with an empty buffer */
 
3235
  __attribute__((cleanup(cleanup_buffer)))
 
3236
    buffer password = {};
 
3237
 
 
3238
  bool password_is_read = false;
 
3239
  bool quit_now = false;
 
3240
  __attribute__((cleanup(cleanup_queue)))
 
3241
    task_queue *queue = create_queue();
 
3242
  g_assert_nonnull(queue);
 
3243
 
 
3244
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3245
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3246
                             sizeof(dummy_test_password)),
 
3247
                  ==, (int)sizeof(dummy_test_password));
 
3248
 
 
3249
  task_context task = {
 
3250
    .func=read_mandos_client_output,
 
3251
    .epoll_fd=epoll_fd,
 
3252
    .fd=pipefds[0],
 
3253
    .password=&password,
 
3254
    .password_is_read=&password_is_read,
 
3255
    .quit_now=&quit_now,
 
3256
  };
 
3257
  task.func(task, queue);
 
3258
 
 
3259
  g_assert_false(password_is_read);
 
3260
  g_assert_cmpint((int)password.length, ==,
 
3261
                  (int)sizeof(dummy_test_password));
 
3262
  g_assert_nonnull(password.data);
 
3263
  g_assert_cmpint(memcmp(password.data, dummy_test_password,
 
3264
                         sizeof(dummy_test_password)), ==, 0);
 
3265
 
 
3266
  g_assert_false(quit_now);
 
3267
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3268
 
 
3269
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3270
        .func=read_mandos_client_output,
 
3271
        .epoll_fd=epoll_fd,
 
3272
        .fd=pipefds[0],
 
3273
        .password=&password,
 
3274
        .password_is_read=&password_is_read,
 
3275
        .quit_now=&quit_now,
 
3276
      }));
 
3277
 
 
3278
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3279
                                   EPOLLIN | EPOLLRDHUP));
 
3280
 
 
3281
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3282
}
 
3283
 
 
3284
static
 
3285
void test_read_mandos_client_output_append(__attribute__((unused))
 
3286
                                           test_fixture *fixture,
 
3287
                                           __attribute__((unused))
 
3288
                                           gconstpointer user_data){
 
3289
  __attribute__((cleanup(cleanup_close)))
 
3290
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3291
  g_assert_cmpint(epoll_fd, >=, 0);
 
3292
 
 
3293
  int pipefds[2];
 
3294
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3295
 
 
3296
  const char dummy_test_password[] = "dummy test password";
 
3297
  __attribute__((cleanup(cleanup_buffer)))
 
3298
    buffer password = {
 
3299
    .data=malloc(PIPE_BUF),
 
3300
    .length=PIPE_BUF,
 
3301
    .allocated=PIPE_BUF,
 
3302
  };
 
3303
  g_assert_nonnull(password.data);
 
3304
  if(mlock(password.data, password.allocated) != 0){
 
3305
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
3306
  }
 
3307
 
 
3308
  memset(password.data, 'x', PIPE_BUF);
 
3309
  char password_expected[PIPE_BUF];
 
3310
  memcpy(password_expected, password.data, PIPE_BUF);
 
3311
 
 
3312
  bool password_is_read = false;
 
3313
  bool quit_now = false;
 
3314
  __attribute__((cleanup(cleanup_queue)))
 
3315
    task_queue *queue = create_queue();
 
3316
  g_assert_nonnull(queue);
 
3317
 
 
3318
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3319
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3320
                             sizeof(dummy_test_password)),
 
3321
                  ==, (int)sizeof(dummy_test_password));
 
3322
 
 
3323
  task_context task = {
 
3324
    .func=read_mandos_client_output,
 
3325
    .epoll_fd=epoll_fd,
 
3326
    .fd=pipefds[0],
 
3327
    .password=&password,
 
3328
    .password_is_read=&password_is_read,
 
3329
    .quit_now=&quit_now,
 
3330
  };
 
3331
  task.func(task, queue);
 
3332
 
 
3333
  g_assert_false(password_is_read);
 
3334
  g_assert_cmpint((int)password.length, ==,
 
3335
                  PIPE_BUF + sizeof(dummy_test_password));
 
3336
  g_assert_nonnull(password.data);
 
3337
  g_assert_cmpint(memcmp(password_expected, password.data, PIPE_BUF),
 
3338
                  ==, 0);
 
3339
  g_assert_cmpint(memcmp(password.data + PIPE_BUF,
 
3340
                         dummy_test_password,
 
3341
                         sizeof(dummy_test_password)), ==, 0);
 
3342
  g_assert_false(quit_now);
 
3343
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3344
 
 
3345
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3346
        .func=read_mandos_client_output,
 
3347
        .epoll_fd=epoll_fd,
 
3348
        .fd=pipefds[0],
 
3349
        .password=&password,
 
3350
        .password_is_read=&password_is_read,
 
3351
        .quit_now=&quit_now,
 
3352
      }));
 
3353
 
 
3354
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3355
                                   EPOLLIN | EPOLLRDHUP));
 
3356
}
 
3357
 
 
3358
static char *make_temporary_directory(void);
 
3359
 
 
3360
static void test_add_inotify_dir_watch(__attribute__((unused))
 
3361
                                       test_fixture *fixture,
 
3362
                                       __attribute__((unused))
 
3363
                                       gconstpointer user_data){
 
3364
  __attribute__((cleanup(cleanup_close)))
 
3365
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3366
  g_assert_cmpint(epoll_fd, >=, 0);
 
3367
  __attribute__((cleanup(cleanup_queue)))
 
3368
    task_queue *queue = create_queue();
 
3369
  g_assert_nonnull(queue);
 
3370
  __attribute__((cleanup(string_set_clear)))
 
3371
    string_set cancelled_filenames = {};
 
3372
  const mono_microsecs current_time = 0;
 
3373
 
 
3374
  bool quit_now = false;
 
3375
  buffer password = {};
 
3376
  bool mandos_client_exited = false;
 
3377
  bool password_is_read = false;
 
3378
 
 
3379
  __attribute__((cleanup(cleanup_string)))
 
3380
    char *tempdir = make_temporary_directory();
 
3381
  g_assert_nonnull(tempdir);
 
3382
 
 
3383
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3384
                                      &password, tempdir,
 
3385
                                      &cancelled_filenames,
 
3386
                                      &current_time,
 
3387
                                      &mandos_client_exited,
 
3388
                                      &password_is_read));
 
3389
 
 
3390
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3391
 
 
3392
  const task_context *const added_read_task
 
3393
    = find_matching_task(queue, (task_context){
 
3394
        .func=read_inotify_event,
 
3395
        .epoll_fd=epoll_fd,
 
3396
        .quit_now=&quit_now,
 
3397
        .password=&password,
 
3398
        .filename=tempdir,
 
3399
        .cancelled_filenames=&cancelled_filenames,
 
3400
        .current_time=&current_time,
 
3401
        .mandos_client_exited=&mandos_client_exited,
 
3402
        .password_is_read=&password_is_read,
 
3403
      });
 
3404
  g_assert_nonnull(added_read_task);
 
3405
 
 
3406
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3407
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3408
  g_assert_true(epoll_set_contains(added_read_task->epoll_fd,
 
3409
                                   added_read_task->fd,
 
3410
                                   EPOLLIN | EPOLLRDHUP));
 
3411
 
 
3412
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3413
}
 
3414
 
 
3415
static char *make_temporary_directory(void){
 
3416
  char *name = strdup("/tmp/mandosXXXXXX");
 
3417
  g_assert_nonnull(name);
 
3418
  char *result = mkdtemp(name);
 
3419
  if(result == NULL){
 
3420
    free(name);
 
3421
  }
 
3422
  return result;
 
3423
}
 
3424
 
 
3425
static void test_add_inotify_dir_watch_fail(__attribute__((unused))
 
3426
                                            test_fixture *fixture,
 
3427
                                            __attribute__((unused))
 
3428
                                            gconstpointer user_data){
 
3429
  __attribute__((cleanup(cleanup_close)))
 
3430
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3431
  g_assert_cmpint(epoll_fd, >=, 0);
 
3432
  __attribute__((cleanup(cleanup_queue)))
 
3433
    task_queue *queue = create_queue();
 
3434
  g_assert_nonnull(queue);
 
3435
  __attribute__((cleanup(string_set_clear)))
 
3436
    string_set cancelled_filenames = {};
 
3437
  const mono_microsecs current_time = 0;
 
3438
 
 
3439
  bool quit_now = false;
 
3440
  buffer password = {};
 
3441
  bool mandos_client_exited = false;
 
3442
  bool password_is_read = false;
 
3443
 
 
3444
  const char nonexistent_dir[] = "/nonexistent";
 
3445
 
 
3446
  FILE *real_stderr = stderr;
 
3447
  FILE *devnull = fopen("/dev/null", "we");
 
3448
  g_assert_nonnull(devnull);
 
3449
  stderr = devnull;
 
3450
  g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3451
                                       &password, nonexistent_dir,
 
3452
                                       &cancelled_filenames,
 
3453
                                       &current_time,
 
3454
                                       &mandos_client_exited,
 
3455
                                       &password_is_read));
 
3456
  stderr = real_stderr;
 
3457
  g_assert_cmpint(fclose(devnull), ==, 0);
 
3458
 
 
3459
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3460
}
 
3461
 
 
3462
static void test_add_inotify_dir_watch_nondir(__attribute__((unused))
 
3463
                                              test_fixture *fixture,
 
3464
                                            __attribute__((unused))
 
3465
                                              gconstpointer
 
3466
                                              user_data){
 
3467
  __attribute__((cleanup(cleanup_close)))
 
3468
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3469
  g_assert_cmpint(epoll_fd, >=, 0);
 
3470
  __attribute__((cleanup(cleanup_queue)))
 
3471
    task_queue *queue = create_queue();
 
3472
  g_assert_nonnull(queue);
 
3473
  __attribute__((cleanup(string_set_clear)))
 
3474
    string_set cancelled_filenames = {};
 
3475
  const mono_microsecs current_time = 0;
 
3476
 
 
3477
  bool quit_now = false;
 
3478
  buffer password = {};
 
3479
  bool mandos_client_exited = false;
 
3480
  bool password_is_read = false;
 
3481
 
 
3482
  const char not_a_directory[] = "/dev/tty";
 
3483
 
 
3484
  FILE *real_stderr = stderr;
 
3485
  FILE *devnull = fopen("/dev/null", "we");
 
3486
  g_assert_nonnull(devnull);
 
3487
  stderr = devnull;
 
3488
  g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3489
                                       &password, not_a_directory,
 
3490
                                       &cancelled_filenames,
 
3491
                                       &current_time,
 
3492
                                       &mandos_client_exited,
 
3493
                                       &password_is_read));
 
3494
  stderr = real_stderr;
 
3495
  g_assert_cmpint(fclose(devnull), ==, 0);
 
3496
 
 
3497
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3498
}
 
3499
 
 
3500
static void test_add_inotify_dir_watch_EAGAIN(__attribute__((unused))
 
3501
                                              test_fixture *fixture,
 
3502
                                              __attribute__((unused))
 
3503
                                              gconstpointer
 
3504
                                              user_data){
 
3505
  __attribute__((cleanup(cleanup_close)))
 
3506
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3507
  g_assert_cmpint(epoll_fd, >=, 0);
 
3508
  __attribute__((cleanup(cleanup_queue)))
 
3509
    task_queue *queue = create_queue();
 
3510
  g_assert_nonnull(queue);
 
3511
  __attribute__((cleanup(string_set_clear)))
 
3512
    string_set cancelled_filenames = {};
 
3513
  const mono_microsecs current_time = 0;
 
3514
 
 
3515
  bool quit_now = false;
 
3516
  buffer password = {};
 
3517
  bool mandos_client_exited = false;
 
3518
  bool password_is_read = false;
 
3519
 
 
3520
  __attribute__((cleanup(cleanup_string)))
 
3521
    char *tempdir = make_temporary_directory();
 
3522
  g_assert_nonnull(tempdir);
 
3523
 
 
3524
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3525
                                      &password, tempdir,
 
3526
                                      &cancelled_filenames,
 
3527
                                      &current_time,
 
3528
                                      &mandos_client_exited,
 
3529
                                      &password_is_read));
 
3530
 
 
3531
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3532
 
 
3533
  const task_context *const added_read_task
 
3534
    = find_matching_task(queue,
 
3535
                         (task_context){ .func=read_inotify_event });
 
3536
  g_assert_nonnull(added_read_task);
 
3537
 
 
3538
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3539
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3540
 
 
3541
  /* "sufficient to read at least one event." - inotify(7) */
 
3542
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3543
                              + NAME_MAX + 1);
 
3544
  struct inotify_event *ievent = malloc(ievent_size);
 
3545
  g_assert_nonnull(ievent);
 
3546
 
 
3547
  g_assert_cmpint(read(added_read_task->fd, ievent, ievent_size), ==,
 
3548
                  -1);
 
3549
  g_assert_cmpint(errno, ==, EAGAIN);
 
3550
 
 
3551
  free(ievent);
 
3552
 
 
3553
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3554
}
 
3555
 
 
3556
static char *make_temporary_file_in_directory(const char
 
3557
                                              *const dir);
 
3558
 
 
3559
static
 
3560
void test_add_inotify_dir_watch_IN_CLOSE_WRITE(__attribute__((unused))
 
3561
                                               test_fixture *fixture,
 
3562
                                               __attribute__((unused))
 
3563
                                               gconstpointer
 
3564
                                               user_data){
 
3565
  __attribute__((cleanup(cleanup_close)))
 
3566
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3567
  g_assert_cmpint(epoll_fd, >=, 0);
 
3568
  __attribute__((cleanup(cleanup_queue)))
 
3569
    task_queue *queue = create_queue();
 
3570
  g_assert_nonnull(queue);
 
3571
  __attribute__((cleanup(string_set_clear)))
 
3572
    string_set cancelled_filenames = {};
 
3573
  const mono_microsecs current_time = 0;
 
3574
 
 
3575
  bool quit_now = false;
 
3576
  buffer password = {};
 
3577
  bool mandos_client_exited = false;
 
3578
  bool password_is_read = false;
 
3579
 
 
3580
  __attribute__((cleanup(cleanup_string)))
 
3581
    char *tempdir = make_temporary_directory();
 
3582
  g_assert_nonnull(tempdir);
 
3583
 
 
3584
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3585
                                      &password, tempdir,
 
3586
                                      &cancelled_filenames,
 
3587
                                      &current_time,
 
3588
                                      &mandos_client_exited,
 
3589
                                      &password_is_read));
 
3590
 
 
3591
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3592
 
 
3593
  const task_context *const added_read_task
 
3594
    = find_matching_task(queue,
 
3595
                         (task_context){ .func=read_inotify_event });
 
3596
  g_assert_nonnull(added_read_task);
 
3597
 
 
3598
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3599
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3600
 
 
3601
  __attribute__((cleanup(cleanup_string)))
 
3602
    char *filename = make_temporary_file_in_directory(tempdir);
 
3603
  g_assert_nonnull(filename);
 
3604
 
 
3605
  /* "sufficient to read at least one event." - inotify(7) */
 
3606
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3607
                              + NAME_MAX + 1);
 
3608
  struct inotify_event *ievent = malloc(ievent_size);
 
3609
  g_assert_nonnull(ievent);
 
3610
 
 
3611
  ssize_t read_size = 0;
 
3612
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3613
 
 
3614
  g_assert_cmpint((int)read_size, >, 0);
 
3615
  g_assert_true(ievent->mask & IN_CLOSE_WRITE);
 
3616
  g_assert_cmpstr(ievent->name, ==, basename(filename));
 
3617
 
 
3618
  free(ievent);
 
3619
 
 
3620
  g_assert_cmpint(unlink(filename), ==, 0);
 
3621
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3622
}
 
3623
 
 
3624
static char *make_temporary_prefixed_file_in_directory(const char
 
3625
                                                       *const prefix,
 
3626
                                                       const char
 
3627
                                                       *const dir){
 
3628
  char *filename = NULL;
 
3629
  g_assert_cmpint(asprintf(&filename, "%s/%sXXXXXX", dir, prefix),
 
3630
                  >, 0);
 
3631
  g_assert_nonnull(filename);
 
3632
  const int fd = mkostemp(filename, O_CLOEXEC);
 
3633
  g_assert_cmpint(fd, >=, 0);
 
3634
  g_assert_cmpint(close(fd), ==, 0);
 
3635
  return filename;
 
3636
}
 
3637
 
 
3638
static char *make_temporary_file_in_directory(const char
 
3639
                                              *const dir){
 
3640
  return make_temporary_prefixed_file_in_directory("temp", dir);
 
3641
}
 
3642
 
 
3643
static
 
3644
void test_add_inotify_dir_watch_IN_MOVED_TO(__attribute__((unused))
 
3645
                                            test_fixture *fixture,
 
3646
                                            __attribute__((unused))
 
3647
                                            gconstpointer user_data){
 
3648
  __attribute__((cleanup(cleanup_close)))
 
3649
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3650
  g_assert_cmpint(epoll_fd, >=, 0);
 
3651
  __attribute__((cleanup(cleanup_queue)))
 
3652
    task_queue *queue = create_queue();
 
3653
  g_assert_nonnull(queue);
 
3654
  __attribute__((cleanup(string_set_clear)))
 
3655
    string_set cancelled_filenames = {};
 
3656
  const mono_microsecs current_time = 0;
 
3657
 
 
3658
  bool quit_now = false;
 
3659
  buffer password = {};
 
3660
  bool mandos_client_exited = false;
 
3661
  bool password_is_read = false;
 
3662
 
 
3663
  __attribute__((cleanup(cleanup_string)))
 
3664
    char *watchdir = make_temporary_directory();
 
3665
  g_assert_nonnull(watchdir);
 
3666
 
 
3667
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3668
                                      &password, watchdir,
 
3669
                                      &cancelled_filenames,
 
3670
                                      &current_time,
 
3671
                                      &mandos_client_exited,
 
3672
                                      &password_is_read));
 
3673
 
 
3674
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3675
 
 
3676
  const task_context *const added_read_task
 
3677
    = find_matching_task(queue,
 
3678
                         (task_context){ .func=read_inotify_event });
 
3679
  g_assert_nonnull(added_read_task);
 
3680
 
 
3681
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3682
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3683
 
 
3684
  char *sourcedir = make_temporary_directory();
 
3685
  g_assert_nonnull(sourcedir);
 
3686
 
 
3687
  __attribute__((cleanup(cleanup_string)))
 
3688
    char *filename = make_temporary_file_in_directory(sourcedir);
 
3689
  g_assert_nonnull(filename);
 
3690
 
 
3691
  __attribute__((cleanup(cleanup_string)))
 
3692
    char *targetfilename = NULL;
 
3693
  g_assert_cmpint(asprintf(&targetfilename, "%s/%s", watchdir,
 
3694
                           basename(filename)), >, 0);
 
3695
  g_assert_nonnull(targetfilename);
 
3696
 
 
3697
  g_assert_cmpint(rename(filename, targetfilename), ==, 0);
 
3698
  g_assert_cmpint(rmdir(sourcedir), ==, 0);
 
3699
  free(sourcedir);
 
3700
 
 
3701
  /* "sufficient to read at least one event." - inotify(7) */
 
3702
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3703
                              + NAME_MAX + 1);
 
3704
  struct inotify_event *ievent = malloc(ievent_size);
 
3705
  g_assert_nonnull(ievent);
 
3706
 
 
3707
  ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
 
3708
 
 
3709
  g_assert_cmpint((int)read_size, >, 0);
 
3710
  g_assert_true(ievent->mask & IN_MOVED_TO);
 
3711
  g_assert_cmpstr(ievent->name, ==, basename(targetfilename));
 
3712
 
 
3713
  free(ievent);
 
3714
 
 
3715
  g_assert_cmpint(unlink(targetfilename), ==, 0);
 
3716
  g_assert_cmpint(rmdir(watchdir), ==, 0);
 
3717
}
 
3718
 
 
3719
static
 
3720
void test_add_inotify_dir_watch_IN_MOVED_FROM(__attribute__((unused))
 
3721
                                              test_fixture *fixture,
 
3722
                                              __attribute__((unused))
 
3723
                                              gconstpointer
 
3724
                                              user_data){
 
3725
  __attribute__((cleanup(cleanup_close)))
 
3726
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3727
  g_assert_cmpint(epoll_fd, >=, 0);
 
3728
  __attribute__((cleanup(cleanup_queue)))
 
3729
    task_queue *queue = create_queue();
 
3730
  g_assert_nonnull(queue);
 
3731
  __attribute__((cleanup(string_set_clear)))
 
3732
    string_set cancelled_filenames = {};
 
3733
  const mono_microsecs current_time = 0;
 
3734
 
 
3735
  bool quit_now = false;
 
3736
  buffer password = {};
 
3737
  bool mandos_client_exited = false;
 
3738
  bool password_is_read = false;
 
3739
 
 
3740
  __attribute__((cleanup(cleanup_string)))
 
3741
    char *tempdir = make_temporary_directory();
 
3742
  g_assert_nonnull(tempdir);
 
3743
 
 
3744
  __attribute__((cleanup(cleanup_string)))
 
3745
    char *tempfilename = make_temporary_file_in_directory(tempdir);
 
3746
  g_assert_nonnull(tempfilename);
 
3747
 
 
3748
  __attribute__((cleanup(cleanup_string)))
 
3749
    char *targetdir = make_temporary_directory();
 
3750
  g_assert_nonnull(targetdir);
 
3751
 
 
3752
  __attribute__((cleanup(cleanup_string)))
 
3753
    char *targetfilename = NULL;
 
3754
  g_assert_cmpint(asprintf(&targetfilename, "%s/%s", targetdir,
 
3755
                           basename(tempfilename)), >, 0);
 
3756
  g_assert_nonnull(targetfilename);
 
3757
 
 
3758
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3759
                                      &password, tempdir,
 
3760
                                      &cancelled_filenames,
 
3761
                                      &current_time,
 
3762
                                      &mandos_client_exited,
 
3763
                                      &password_is_read));
 
3764
 
 
3765
  g_assert_cmpint(rename(tempfilename, targetfilename), ==, 0);
 
3766
 
 
3767
  const task_context *const added_read_task
 
3768
    = find_matching_task(queue,
 
3769
                         (task_context){ .func=read_inotify_event });
 
3770
  g_assert_nonnull(added_read_task);
 
3771
 
 
3772
  /* "sufficient to read at least one event." - inotify(7) */
 
3773
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3774
                              + NAME_MAX + 1);
 
3775
  struct inotify_event *ievent = malloc(ievent_size);
 
3776
  g_assert_nonnull(ievent);
 
3777
 
 
3778
  ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
 
3779
 
 
3780
  g_assert_cmpint((int)read_size, >, 0);
 
3781
  g_assert_true(ievent->mask & IN_MOVED_FROM);
 
3782
  g_assert_cmpstr(ievent->name, ==, basename(tempfilename));
 
3783
 
 
3784
  free(ievent);
 
3785
 
 
3786
  g_assert_cmpint(unlink(targetfilename), ==, 0);
 
3787
  g_assert_cmpint(rmdir(targetdir), ==, 0);
 
3788
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3789
}
 
3790
 
 
3791
static
 
3792
void test_add_inotify_dir_watch_IN_DELETE(__attribute__((unused))
 
3793
                                          test_fixture *fixture,
 
3794
                                          __attribute__((unused))
 
3795
                                          gconstpointer user_data){
 
3796
  __attribute__((cleanup(cleanup_close)))
 
3797
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3798
  g_assert_cmpint(epoll_fd, >=, 0);
 
3799
  __attribute__((cleanup(cleanup_queue)))
 
3800
    task_queue *queue = create_queue();
 
3801
  g_assert_nonnull(queue);
 
3802
  __attribute__((cleanup(string_set_clear)))
 
3803
    string_set cancelled_filenames = {};
 
3804
  const mono_microsecs current_time = 0;
 
3805
 
 
3806
  bool quit_now = false;
 
3807
  buffer password = {};
 
3808
  bool mandos_client_exited = false;
 
3809
  bool password_is_read = false;
 
3810
 
 
3811
  __attribute__((cleanup(cleanup_string)))
 
3812
    char *tempdir = make_temporary_directory();
 
3813
  g_assert_nonnull(tempdir);
 
3814
 
 
3815
  __attribute__((cleanup(cleanup_string)))
 
3816
    char *tempfile = make_temporary_file_in_directory(tempdir);
 
3817
  g_assert_nonnull(tempfile);
 
3818
 
 
3819
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3820
                                      &password, tempdir,
 
3821
                                      &cancelled_filenames,
 
3822
                                      &current_time,
 
3823
                                      &mandos_client_exited,
 
3824
                                      &password_is_read));
 
3825
  g_assert_cmpint(unlink(tempfile), ==, 0);
 
3826
 
 
3827
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3828
 
 
3829
  const task_context *const added_read_task
 
3830
    = find_matching_task(queue,
 
3831
                         (task_context){ .func=read_inotify_event });
 
3832
  g_assert_nonnull(added_read_task);
 
3833
 
 
3834
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3835
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3836
 
 
3837
  /* "sufficient to read at least one event." - inotify(7) */
 
3838
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3839
                              + NAME_MAX + 1);
 
3840
  struct inotify_event *ievent = malloc(ievent_size);
 
3841
  g_assert_nonnull(ievent);
 
3842
 
 
3843
  ssize_t read_size = 0;
 
3844
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3845
 
 
3846
  g_assert_cmpint((int)read_size, >, 0);
 
3847
  g_assert_true(ievent->mask & IN_DELETE);
 
3848
  g_assert_cmpstr(ievent->name, ==, basename(tempfile));
 
3849
 
 
3850
  free(ievent);
 
3851
 
 
3852
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3853
}
 
3854
 
 
3855
static
 
3856
void test_add_inotify_dir_watch_IN_EXCL_UNLINK(__attribute__((unused))
 
3857
                                               test_fixture *fixture,
 
3858
                                               __attribute__((unused))
 
3859
                                               gconstpointer
 
3860
                                               user_data){
 
3861
  __attribute__((cleanup(cleanup_close)))
 
3862
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3863
  g_assert_cmpint(epoll_fd, >=, 0);
 
3864
  __attribute__((cleanup(cleanup_queue)))
 
3865
    task_queue *queue = create_queue();
 
3866
  g_assert_nonnull(queue);
 
3867
  __attribute__((cleanup(string_set_clear)))
 
3868
    string_set cancelled_filenames = {};
 
3869
  const mono_microsecs current_time = 0;
 
3870
 
 
3871
  bool quit_now = false;
 
3872
  buffer password = {};
 
3873
  bool mandos_client_exited = false;
 
3874
  bool password_is_read = false;
 
3875
 
 
3876
  __attribute__((cleanup(cleanup_string)))
 
3877
    char *tempdir = make_temporary_directory();
 
3878
  g_assert_nonnull(tempdir);
 
3879
 
 
3880
  __attribute__((cleanup(cleanup_string)))
 
3881
    char *tempfile = make_temporary_file_in_directory(tempdir);
 
3882
  g_assert_nonnull(tempfile);
 
3883
  int tempfile_fd = open(tempfile, O_WRONLY | O_CLOEXEC | O_NOCTTY
 
3884
                         | O_NOFOLLOW);
 
3885
  g_assert_cmpint(tempfile_fd, >, 2);
 
3886
 
 
3887
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3888
                                      &password, tempdir,
 
3889
                                      &cancelled_filenames,
 
3890
                                      &current_time,
 
3891
                                      &mandos_client_exited,
 
3892
                                      &password_is_read));
 
3893
  g_assert_cmpint(unlink(tempfile), ==, 0);
 
3894
 
 
3895
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3896
 
 
3897
  const task_context *const added_read_task
 
3898
    = find_matching_task(queue,
 
3899
                         (task_context){ .func=read_inotify_event });
 
3900
  g_assert_nonnull(added_read_task);
 
3901
 
 
3902
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3903
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3904
 
 
3905
  /* "sufficient to read at least one event." - inotify(7) */
 
3906
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3907
                              + NAME_MAX + 1);
 
3908
  struct inotify_event *ievent = malloc(ievent_size);
 
3909
  g_assert_nonnull(ievent);
 
3910
 
 
3911
  ssize_t read_size = 0;
 
3912
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3913
 
 
3914
  g_assert_cmpint((int)read_size, >, 0);
 
3915
  g_assert_true(ievent->mask & IN_DELETE);
 
3916
  g_assert_cmpstr(ievent->name, ==, basename(tempfile));
 
3917
 
 
3918
  g_assert_cmpint(close(tempfile_fd), ==, 0);
 
3919
 
 
3920
  /* IN_EXCL_UNLINK should make the closing of the previously unlinked
 
3921
     file not appear as an ievent, so we should not see it now. */
 
3922
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3923
  g_assert_cmpint((int)read_size, ==, -1);
 
3924
  g_assert_true(errno == EAGAIN);
 
3925
 
 
3926
  free(ievent);
 
3927
 
 
3928
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3929
}
 
3930
 
 
3931
static void test_read_inotify_event_readerror(__attribute__((unused))
 
3932
                                              test_fixture *fixture,
 
3933
                                              __attribute__((unused))
 
3934
                                              gconstpointer
 
3935
                                              user_data){
 
3936
  __attribute__((cleanup(cleanup_close)))
 
3937
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3938
  g_assert_cmpint(epoll_fd, >=, 0);
 
3939
  const mono_microsecs current_time = 0;
 
3940
 
 
3941
  /* Reading /proc/self/mem from offset 0 will always result in EIO */
 
3942
  const int fd = open("/proc/self/mem",
 
3943
                      O_RDONLY | O_CLOEXEC | O_NOCTTY);
 
3944
 
 
3945
  bool quit_now = false;
 
3946
  __attribute__((cleanup(cleanup_queue)))
 
3947
    task_queue *queue = create_queue();
 
3948
  g_assert_nonnull(queue);
 
3949
 
 
3950
  task_context task = {
 
3951
    .func=read_inotify_event,
 
3952
    .epoll_fd=epoll_fd,
 
3953
    .fd=fd,
 
3954
    .quit_now=&quit_now,
 
3955
    .filename=strdup("/nonexistent"),
 
3956
    .cancelled_filenames = &(string_set){},
 
3957
    .notafter=0,
 
3958
    .current_time=&current_time,
 
3959
  };
 
3960
  g_assert_nonnull(task.filename);
 
3961
  run_task_with_stderr_to_dev_null(task, queue);
 
3962
  g_assert_true(quit_now);
 
3963
  g_assert_true(queue->next_run == 0);
 
3964
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3965
 
 
3966
  g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
 
3967
 
 
3968
  g_assert_cmpint(close(fd), ==, -1);
 
3969
}
 
3970
 
 
3971
static void test_read_inotify_event_bad_epoll(__attribute__((unused))
 
3972
                                              test_fixture *fixture,
 
3973
                                              __attribute__((unused))
 
3974
                                              gconstpointer
 
3975
                                              user_data){
 
3976
  const mono_microsecs current_time = 17;
 
3977
 
 
3978
  int pipefds[2];
 
3979
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3980
  const int epoll_fd = pipefds[0]; /* This will obviously fail */
 
3981
 
 
3982
  bool quit_now = false;
 
3983
  buffer password = {};
 
3984
  bool mandos_client_exited = false;
 
3985
  bool password_is_read = false;
 
3986
  __attribute__((cleanup(cleanup_queue)))
 
3987
    task_queue *queue = create_queue();
 
3988
  g_assert_nonnull(queue);
 
3989
 
 
3990
  task_context task = {
 
3991
    .func=read_inotify_event,
 
3992
    .epoll_fd=epoll_fd,
 
3993
    .fd=pipefds[0],
 
3994
    .quit_now=&quit_now,
 
3995
    .password=&password,
 
3996
    .filename=strdup("/nonexistent"),
 
3997
    .cancelled_filenames = &(string_set){},
 
3998
    .notafter=0,
 
3999
    .current_time=&current_time,
 
4000
    .mandos_client_exited=&mandos_client_exited,
 
4001
    .password_is_read=&password_is_read,
 
4002
  };
 
4003
  g_assert_nonnull(task.filename);
 
4004
  run_task_with_stderr_to_dev_null(task, queue);
 
4005
 
 
4006
  g_assert_nonnull(find_matching_task(queue, task));
 
4007
  g_assert_true(queue->next_run == 1000000 + current_time);
 
4008
 
 
4009
  g_assert_cmpint(close(pipefds[0]), ==, 0);
 
4010
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4011
}
 
4012
 
 
4013
static void test_read_inotify_event_nodata(__attribute__((unused))
 
4014
                                           test_fixture *fixture,
 
4015
                                           __attribute__((unused))
 
4016
                                           gconstpointer user_data){
 
4017
  __attribute__((cleanup(cleanup_close)))
 
4018
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4019
  g_assert_cmpint(epoll_fd, >=, 0);
 
4020
  const mono_microsecs current_time = 0;
 
4021
 
 
4022
  int pipefds[2];
 
4023
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4024
 
 
4025
  bool quit_now = false;
 
4026
  buffer password = {};
 
4027
  bool mandos_client_exited = false;
 
4028
  bool password_is_read = false;
 
4029
  __attribute__((cleanup(cleanup_queue)))
 
4030
    task_queue *queue = create_queue();
 
4031
  g_assert_nonnull(queue);
 
4032
 
 
4033
  task_context task = {
 
4034
    .func=read_inotify_event,
 
4035
    .epoll_fd=epoll_fd,
 
4036
    .fd=pipefds[0],
 
4037
    .quit_now=&quit_now,
 
4038
    .password=&password,
 
4039
    .filename=strdup("/nonexistent"),
 
4040
    .cancelled_filenames = &(string_set){},
 
4041
    .notafter=0,
 
4042
    .current_time=&current_time,
 
4043
    .mandos_client_exited=&mandos_client_exited,
 
4044
    .password_is_read=&password_is_read,
 
4045
  };
 
4046
  g_assert_nonnull(task.filename);
 
4047
  task.func(task, queue);
 
4048
  g_assert_false(quit_now);
 
4049
  g_assert_true(queue->next_run == 0);
 
4050
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4051
 
 
4052
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4053
        .func=read_inotify_event,
 
4054
        .epoll_fd=epoll_fd,
 
4055
        .fd=pipefds[0],
 
4056
        .quit_now=&quit_now,
 
4057
        .password=&password,
 
4058
        .filename=task.filename,
 
4059
        .cancelled_filenames=task.cancelled_filenames,
 
4060
        .current_time=&current_time,
 
4061
        .mandos_client_exited=&mandos_client_exited,
 
4062
        .password_is_read=&password_is_read,
 
4063
      }));
 
4064
 
 
4065
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4066
                                   EPOLLIN | EPOLLRDHUP));
 
4067
 
 
4068
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4069
}
 
4070
 
 
4071
static void test_read_inotify_event_eof(__attribute__((unused))
 
4072
                                        test_fixture *fixture,
 
4073
                                        __attribute__((unused))
 
4074
                                        gconstpointer user_data){
 
4075
  __attribute__((cleanup(cleanup_close)))
 
4076
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4077
  g_assert_cmpint(epoll_fd, >=, 0);
 
4078
  const mono_microsecs current_time = 0;
 
4079
 
 
4080
  int pipefds[2];
 
4081
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4082
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4083
 
 
4084
  bool quit_now = false;
 
4085
  buffer password = {};
 
4086
  __attribute__((cleanup(cleanup_queue)))
 
4087
    task_queue *queue = create_queue();
 
4088
  g_assert_nonnull(queue);
 
4089
 
 
4090
  task_context task = {
 
4091
    .func=read_inotify_event,
 
4092
    .epoll_fd=epoll_fd,
 
4093
    .fd=pipefds[0],
 
4094
    .quit_now=&quit_now,
 
4095
    .password=&password,
 
4096
    .filename=strdup("/nonexistent"),
 
4097
    .cancelled_filenames = &(string_set){},
 
4098
    .notafter=0,
 
4099
    .current_time=&current_time,
 
4100
  };
 
4101
  run_task_with_stderr_to_dev_null(task, queue);
 
4102
  g_assert_true(quit_now);
 
4103
  g_assert_true(queue->next_run == 0);
 
4104
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4105
 
 
4106
  g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
 
4107
 
 
4108
  g_assert_cmpint(close(pipefds[0]), ==, -1);
 
4109
}
 
4110
 
 
4111
static
 
4112
void test_read_inotify_event_IN_CLOSE_WRITE(__attribute__((unused))
 
4113
                                            test_fixture *fixture,
 
4114
                                            __attribute__((unused))
 
4115
                                            gconstpointer user_data){
 
4116
  __attribute__((cleanup(cleanup_close)))
 
4117
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4118
  g_assert_cmpint(epoll_fd, >=, 0);
 
4119
  const mono_microsecs current_time = 0;
 
4120
 
 
4121
  int pipefds[2];
 
4122
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4123
 
 
4124
  /* "sufficient to read at least one event." - inotify(7) */
 
4125
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4126
                                  + NAME_MAX + 1);
 
4127
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4128
  struct {
 
4129
    struct inotify_event event;
 
4130
    char name_buffer[NAME_MAX + 1];
 
4131
  } ievent_buffer;
 
4132
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4133
 
 
4134
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4135
  ievent->mask = IN_CLOSE_WRITE;
 
4136
  ievent->len = sizeof(dummy_file_name);
 
4137
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4138
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4139
                              + sizeof(dummy_file_name));
 
4140
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4141
                  ==, ievent_size);
 
4142
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4143
 
 
4144
  bool quit_now = false;
 
4145
  buffer password = {};
 
4146
  bool mandos_client_exited = false;
 
4147
  bool password_is_read = false;
 
4148
  __attribute__((cleanup(cleanup_queue)))
 
4149
    task_queue *queue = create_queue();
 
4150
  g_assert_nonnull(queue);
 
4151
 
 
4152
  task_context task = {
 
4153
    .func=read_inotify_event,
 
4154
    .epoll_fd=epoll_fd,
 
4155
    .fd=pipefds[0],
 
4156
    .quit_now=&quit_now,
 
4157
    .password=&password,
 
4158
    .filename=strdup("/nonexistent"),
 
4159
    .cancelled_filenames = &(string_set){},
 
4160
    .notafter=0,
 
4161
    .current_time=&current_time,
 
4162
    .mandos_client_exited=&mandos_client_exited,
 
4163
    .password_is_read=&password_is_read,
 
4164
  };
 
4165
  task.func(task, queue);
 
4166
  g_assert_false(quit_now);
 
4167
  g_assert_true(queue->next_run != 0);
 
4168
  g_assert_cmpuint((unsigned int)queue->length, >=, 1);
 
4169
 
 
4170
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4171
        .func=read_inotify_event,
 
4172
        .epoll_fd=epoll_fd,
 
4173
        .fd=pipefds[0],
 
4174
        .quit_now=&quit_now,
 
4175
        .password=&password,
 
4176
        .filename=task.filename,
 
4177
        .cancelled_filenames=task.cancelled_filenames,
 
4178
        .current_time=&current_time,
 
4179
        .mandos_client_exited=&mandos_client_exited,
 
4180
        .password_is_read=&password_is_read,
 
4181
      }));
 
4182
 
 
4183
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4184
                                   EPOLLIN | EPOLLRDHUP));
 
4185
 
 
4186
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
4187
 
 
4188
  __attribute__((cleanup(cleanup_string)))
 
4189
    char *filename = NULL;
 
4190
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4191
                           dummy_file_name), >, 0);
 
4192
  g_assert_nonnull(filename);
 
4193
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4194
        .func=open_and_parse_question,
 
4195
        .epoll_fd=epoll_fd,
 
4196
        .filename=filename,
 
4197
        .question_filename=filename,
 
4198
        .password=&password,
 
4199
        .cancelled_filenames=task.cancelled_filenames,
 
4200
        .current_time=&current_time,
 
4201
        .mandos_client_exited=&mandos_client_exited,
 
4202
        .password_is_read=&password_is_read,
 
4203
      }));
 
4204
}
 
4205
 
 
4206
static
 
4207
void test_read_inotify_event_IN_MOVED_TO(__attribute__((unused))
 
4208
                                         test_fixture *fixture,
 
4209
                                         __attribute__((unused))
 
4210
                                         gconstpointer user_data){
 
4211
  __attribute__((cleanup(cleanup_close)))
 
4212
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4213
  g_assert_cmpint(epoll_fd, >=, 0);
 
4214
  const mono_microsecs current_time = 0;
 
4215
 
 
4216
  int pipefds[2];
 
4217
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4218
 
 
4219
  /* "sufficient to read at least one event." - inotify(7) */
 
4220
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4221
                                  + NAME_MAX + 1);
 
4222
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4223
  struct {
 
4224
    struct inotify_event event;
 
4225
    char name_buffer[NAME_MAX + 1];
 
4226
  } ievent_buffer;
 
4227
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4228
 
 
4229
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4230
  ievent->mask = IN_MOVED_TO;
 
4231
  ievent->len = sizeof(dummy_file_name);
 
4232
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4233
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4234
                              + sizeof(dummy_file_name));
 
4235
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4236
                  ==, ievent_size);
 
4237
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4238
 
 
4239
  bool quit_now = false;
 
4240
  buffer password = {};
 
4241
  bool mandos_client_exited = false;
 
4242
  bool password_is_read = false;
 
4243
  __attribute__((cleanup(cleanup_queue)))
 
4244
    task_queue *queue = create_queue();
 
4245
  g_assert_nonnull(queue);
 
4246
 
 
4247
  task_context task = {
 
4248
    .func=read_inotify_event,
 
4249
    .epoll_fd=epoll_fd,
 
4250
    .fd=pipefds[0],
 
4251
    .quit_now=&quit_now,
 
4252
    .password=&password,
 
4253
    .filename=strdup("/nonexistent"),
 
4254
    .cancelled_filenames = &(string_set){},
 
4255
    .notafter=0,
 
4256
    .current_time=&current_time,
 
4257
    .mandos_client_exited=&mandos_client_exited,
 
4258
    .password_is_read=&password_is_read,
 
4259
  };
 
4260
  task.func(task, queue);
 
4261
  g_assert_false(quit_now);
 
4262
  g_assert_true(queue->next_run != 0);
 
4263
  g_assert_cmpuint((unsigned int)queue->length, >=, 1);
 
4264
 
 
4265
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4266
        .func=read_inotify_event,
 
4267
        .epoll_fd=epoll_fd,
 
4268
        .fd=pipefds[0],
 
4269
        .quit_now=&quit_now,
 
4270
        .password=&password,
 
4271
        .filename=task.filename,
 
4272
        .cancelled_filenames=task.cancelled_filenames,
 
4273
        .current_time=&current_time,
 
4274
        .mandos_client_exited=&mandos_client_exited,
 
4275
        .password_is_read=&password_is_read,
 
4276
      }));
 
4277
 
 
4278
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4279
                                   EPOLLIN | EPOLLRDHUP));
 
4280
 
 
4281
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
4282
 
 
4283
  __attribute__((cleanup(cleanup_string)))
 
4284
    char *filename = NULL;
 
4285
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4286
                           dummy_file_name), >, 0);
 
4287
  g_assert_nonnull(filename);
 
4288
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4289
        .func=open_and_parse_question,
 
4290
        .epoll_fd=epoll_fd,
 
4291
        .filename=filename,
 
4292
        .question_filename=filename,
 
4293
        .password=&password,
 
4294
        .cancelled_filenames=task.cancelled_filenames,
 
4295
        .current_time=&current_time,
 
4296
        .mandos_client_exited=&mandos_client_exited,
 
4297
        .password_is_read=&password_is_read,
 
4298
      }));
 
4299
}
 
4300
 
 
4301
static
 
4302
void test_read_inotify_event_IN_MOVED_FROM(__attribute__((unused))
 
4303
                                           test_fixture *fixture,
 
4304
                                           __attribute__((unused))
 
4305
                                           gconstpointer user_data){
 
4306
  __attribute__((cleanup(cleanup_close)))
 
4307
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4308
  g_assert_cmpint(epoll_fd, >=, 0);
 
4309
  __attribute__((cleanup(string_set_clear)))
 
4310
    string_set cancelled_filenames = {};
 
4311
  const mono_microsecs current_time = 0;
 
4312
 
 
4313
  int pipefds[2];
 
4314
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4315
 
 
4316
  /* "sufficient to read at least one event." - inotify(7) */
 
4317
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4318
                                  + NAME_MAX + 1);
 
4319
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4320
  struct {
 
4321
    struct inotify_event event;
 
4322
    char name_buffer[NAME_MAX + 1];
 
4323
  } ievent_buffer;
 
4324
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4325
 
 
4326
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4327
  ievent->mask = IN_MOVED_FROM;
 
4328
  ievent->len = sizeof(dummy_file_name);
 
4329
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4330
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4331
                              + sizeof(dummy_file_name));
 
4332
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4333
                  ==, ievent_size);
 
4334
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4335
 
 
4336
  bool quit_now = false;
 
4337
  buffer password = {};
 
4338
  bool mandos_client_exited = false;
 
4339
  bool password_is_read = false;
 
4340
  __attribute__((cleanup(cleanup_queue)))
 
4341
    task_queue *queue = create_queue();
 
4342
  g_assert_nonnull(queue);
 
4343
 
 
4344
  task_context task = {
 
4345
    .func=read_inotify_event,
 
4346
    .epoll_fd=epoll_fd,
 
4347
    .fd=pipefds[0],
 
4348
    .quit_now=&quit_now,
 
4349
    .password=&password,
 
4350
    .filename=strdup("/nonexistent"),
 
4351
    .cancelled_filenames=&cancelled_filenames,
 
4352
    .current_time=&current_time,
 
4353
    .mandos_client_exited=&mandos_client_exited,
 
4354
    .password_is_read=&password_is_read,
 
4355
  };
 
4356
  task.func(task, queue);
 
4357
  g_assert_false(quit_now);
 
4358
  g_assert_true(queue->next_run == 0);
 
4359
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4360
 
 
4361
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4362
        .func=read_inotify_event,
 
4363
        .epoll_fd=epoll_fd,
 
4364
        .fd=pipefds[0],
 
4365
        .quit_now=&quit_now,
 
4366
        .password=&password,
 
4367
        .filename=task.filename,
 
4368
        .cancelled_filenames=&cancelled_filenames,
 
4369
        .current_time=&current_time,
 
4370
        .mandos_client_exited=&mandos_client_exited,
 
4371
        .password_is_read=&password_is_read,
 
4372
      }));
 
4373
 
 
4374
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4375
                                   EPOLLIN | EPOLLRDHUP));
 
4376
 
 
4377
  __attribute__((cleanup(cleanup_string)))
 
4378
    char *filename = NULL;
 
4379
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4380
                           dummy_file_name), >, 0);
 
4381
  g_assert_nonnull(filename);
 
4382
  g_assert_true(string_set_contains(*task.cancelled_filenames,
 
4383
                                    filename));
 
4384
}
 
4385
 
 
4386
static void test_read_inotify_event_IN_DELETE(__attribute__((unused))
 
4387
                                              test_fixture *fixture,
 
4388
                                              __attribute__((unused))
 
4389
                                              gconstpointer
 
4390
                                              user_data){
 
4391
  __attribute__((cleanup(cleanup_close)))
 
4392
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4393
  g_assert_cmpint(epoll_fd, >=, 0);
 
4394
  __attribute__((cleanup(string_set_clear)))
 
4395
    string_set cancelled_filenames = {};
 
4396
  const mono_microsecs current_time = 0;
 
4397
 
 
4398
  int pipefds[2];
 
4399
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4400
 
 
4401
  /* "sufficient to read at least one event." - inotify(7) */
 
4402
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4403
                                  + NAME_MAX + 1);
 
4404
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4405
  struct {
 
4406
    struct inotify_event event;
 
4407
    char name_buffer[NAME_MAX + 1];
 
4408
  } ievent_buffer;
 
4409
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4410
 
 
4411
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4412
  ievent->mask = IN_DELETE;
 
4413
  ievent->len = sizeof(dummy_file_name);
 
4414
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4415
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4416
                              + sizeof(dummy_file_name));
 
4417
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4418
                  ==, ievent_size);
 
4419
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4420
 
 
4421
  bool quit_now = false;
 
4422
  buffer password = {};
 
4423
  bool mandos_client_exited = false;
 
4424
  bool password_is_read = false;
 
4425
  __attribute__((cleanup(cleanup_queue)))
 
4426
    task_queue *queue = create_queue();
 
4427
  g_assert_nonnull(queue);
 
4428
 
 
4429
  task_context task = {
 
4430
    .func=read_inotify_event,
 
4431
    .epoll_fd=epoll_fd,
 
4432
    .fd=pipefds[0],
 
4433
    .quit_now=&quit_now,
 
4434
    .password=&password,
 
4435
    .filename=strdup("/nonexistent"),
 
4436
    .cancelled_filenames=&cancelled_filenames,
 
4437
    .current_time=&current_time,
 
4438
    .mandos_client_exited=&mandos_client_exited,
 
4439
    .password_is_read=&password_is_read,
 
4440
  };
 
4441
  task.func(task, queue);
 
4442
  g_assert_false(quit_now);
 
4443
  g_assert_true(queue->next_run == 0);
 
4444
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4445
 
 
4446
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4447
        .func=read_inotify_event,
 
4448
        .epoll_fd=epoll_fd,
 
4449
        .fd=pipefds[0],
 
4450
        .quit_now=&quit_now,
 
4451
        .password=&password,
 
4452
        .filename=task.filename,
 
4453
        .cancelled_filenames=&cancelled_filenames,
 
4454
        .current_time=&current_time,
 
4455
        .mandos_client_exited=&mandos_client_exited,
 
4456
        .password_is_read=&password_is_read,
 
4457
      }));
 
4458
 
 
4459
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4460
                                   EPOLLIN | EPOLLRDHUP));
 
4461
 
 
4462
  __attribute__((cleanup(cleanup_string)))
 
4463
    char *filename = NULL;
 
4464
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4465
                           dummy_file_name), >, 0);
 
4466
  g_assert_nonnull(filename);
 
4467
  g_assert_true(string_set_contains(*task.cancelled_filenames,
 
4468
                                    filename));
 
4469
}
 
4470
 
 
4471
static void
 
4472
test_read_inotify_event_IN_CLOSE_WRITE_badname(__attribute__((unused))
 
4473
                                               test_fixture *fixture,
 
4474
                                               __attribute__((unused))
 
4475
                                               gconstpointer
 
4476
                                               user_data){
 
4477
  __attribute__((cleanup(cleanup_close)))
 
4478
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4479
  g_assert_cmpint(epoll_fd, >=, 0);
 
4480
  const mono_microsecs current_time = 0;
 
4481
 
 
4482
  int pipefds[2];
 
4483
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4484
 
 
4485
  /* "sufficient to read at least one event." - inotify(7) */
 
4486
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4487
                                  + NAME_MAX + 1);
 
4488
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4489
  struct {
 
4490
    struct inotify_event event;
 
4491
    char name_buffer[NAME_MAX + 1];
 
4492
  } ievent_buffer;
 
4493
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4494
 
 
4495
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4496
  ievent->mask = IN_CLOSE_WRITE;
 
4497
  ievent->len = sizeof(dummy_file_name);
 
4498
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4499
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4500
                              + sizeof(dummy_file_name));
 
4501
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4502
                  ==, ievent_size);
 
4503
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4504
 
 
4505
  bool quit_now = false;
 
4506
  buffer password = {};
 
4507
  bool mandos_client_exited = false;
 
4508
  bool password_is_read = false;
 
4509
  __attribute__((cleanup(cleanup_queue)))
 
4510
    task_queue *queue = create_queue();
 
4511
  g_assert_nonnull(queue);
 
4512
 
 
4513
  task_context task = {
 
4514
    .func=read_inotify_event,
 
4515
    .epoll_fd=epoll_fd,
 
4516
    .fd=pipefds[0],
 
4517
    .quit_now=&quit_now,
 
4518
    .password=&password,
 
4519
    .filename=strdup("/nonexistent"),
 
4520
    .cancelled_filenames = &(string_set){},
 
4521
    .notafter=0,
 
4522
    .current_time=&current_time,
 
4523
    .mandos_client_exited=&mandos_client_exited,
 
4524
    .password_is_read=&password_is_read,
 
4525
  };
 
4526
  task.func(task, queue);
 
4527
  g_assert_false(quit_now);
 
4528
  g_assert_true(queue->next_run == 0);
 
4529
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4530
 
 
4531
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4532
        .func=read_inotify_event,
 
4533
        .epoll_fd=epoll_fd,
 
4534
        .fd=pipefds[0],
 
4535
        .quit_now=&quit_now,
 
4536
        .password=&password,
 
4537
        .filename=task.filename,
 
4538
        .cancelled_filenames=task.cancelled_filenames,
 
4539
        .current_time=&current_time,
 
4540
        .mandos_client_exited=&mandos_client_exited,
 
4541
        .password_is_read=&password_is_read,
 
4542
      }));
 
4543
 
 
4544
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4545
                                   EPOLLIN | EPOLLRDHUP));
 
4546
}
 
4547
 
 
4548
static void
 
4549
test_read_inotify_event_IN_MOVED_TO_badname(__attribute__((unused))
 
4550
                                            test_fixture *fixture,
 
4551
                                            __attribute__((unused))
 
4552
                                            gconstpointer user_data){
 
4553
  __attribute__((cleanup(cleanup_close)))
 
4554
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4555
  g_assert_cmpint(epoll_fd, >=, 0);
 
4556
  const mono_microsecs current_time = 0;
 
4557
 
 
4558
  int pipefds[2];
 
4559
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4560
 
 
4561
  /* "sufficient to read at least one event." - inotify(7) */
 
4562
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4563
                                  + NAME_MAX + 1);
 
4564
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4565
  struct {
 
4566
    struct inotify_event event;
 
4567
    char name_buffer[NAME_MAX + 1];
 
4568
  } ievent_buffer;
 
4569
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4570
 
 
4571
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4572
  ievent->mask = IN_MOVED_TO;
 
4573
  ievent->len = sizeof(dummy_file_name);
 
4574
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4575
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4576
                              + sizeof(dummy_file_name));
 
4577
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4578
                  ==, ievent_size);
 
4579
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4580
 
 
4581
  bool quit_now = false;
 
4582
  buffer password = {};
 
4583
  bool mandos_client_exited = false;
 
4584
  bool password_is_read = false;
 
4585
  __attribute__((cleanup(cleanup_queue)))
 
4586
    task_queue *queue = create_queue();
 
4587
  g_assert_nonnull(queue);
 
4588
 
 
4589
  task_context task = {
 
4590
    .func=read_inotify_event,
 
4591
    .epoll_fd=epoll_fd,
 
4592
    .fd=pipefds[0],
 
4593
    .quit_now=&quit_now,
 
4594
    .password=&password,
 
4595
    .filename=strdup("/nonexistent"),
 
4596
    .cancelled_filenames = &(string_set){},
 
4597
    .notafter=0,
 
4598
    .current_time=&current_time,
 
4599
    .mandos_client_exited=&mandos_client_exited,
 
4600
    .password_is_read=&password_is_read,
 
4601
  };
 
4602
  task.func(task, queue);
 
4603
  g_assert_false(quit_now);
 
4604
  g_assert_true(queue->next_run == 0);
 
4605
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4606
 
 
4607
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4608
        .func=read_inotify_event,
 
4609
        .epoll_fd=epoll_fd,
 
4610
        .fd=pipefds[0],
 
4611
        .quit_now=&quit_now,
 
4612
        .password=&password,
 
4613
        .filename=task.filename,
 
4614
        .cancelled_filenames=task.cancelled_filenames,
 
4615
        .current_time=&current_time,
 
4616
        .mandos_client_exited=&mandos_client_exited,
 
4617
        .password_is_read=&password_is_read,
 
4618
      }));
 
4619
 
 
4620
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4621
                                   EPOLLIN | EPOLLRDHUP));
 
4622
}
 
4623
 
 
4624
static void
 
4625
test_read_inotify_event_IN_MOVED_FROM_badname(__attribute__((unused))
 
4626
                                              test_fixture *fixture,
 
4627
                                              __attribute__((unused))
 
4628
                                              gconstpointer
 
4629
                                              user_data){
 
4630
  __attribute__((cleanup(cleanup_close)))
 
4631
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4632
  g_assert_cmpint(epoll_fd, >=, 0);
 
4633
  __attribute__((cleanup(string_set_clear)))
 
4634
    string_set cancelled_filenames = {};
 
4635
  const mono_microsecs current_time = 0;
 
4636
 
 
4637
  int pipefds[2];
 
4638
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4639
 
 
4640
  /* "sufficient to read at least one event." - inotify(7) */
 
4641
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4642
                                  + NAME_MAX + 1);
 
4643
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4644
  struct {
 
4645
    struct inotify_event event;
 
4646
    char name_buffer[NAME_MAX + 1];
 
4647
  } ievent_buffer;
 
4648
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4649
 
 
4650
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4651
  ievent->mask = IN_MOVED_FROM;
 
4652
  ievent->len = sizeof(dummy_file_name);
 
4653
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4654
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4655
                              + sizeof(dummy_file_name));
 
4656
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4657
                  ==, ievent_size);
 
4658
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4659
 
 
4660
  bool quit_now = false;
 
4661
  buffer password = {};
 
4662
  bool mandos_client_exited = false;
 
4663
  bool password_is_read = false;
 
4664
  __attribute__((cleanup(cleanup_queue)))
 
4665
    task_queue *queue = create_queue();
 
4666
  g_assert_nonnull(queue);
 
4667
 
 
4668
  task_context task = {
 
4669
    .func=read_inotify_event,
 
4670
    .epoll_fd=epoll_fd,
 
4671
    .fd=pipefds[0],
 
4672
    .quit_now=&quit_now,
 
4673
    .password=&password,
 
4674
    .filename=strdup("/nonexistent"),
 
4675
    .cancelled_filenames=&cancelled_filenames,
 
4676
    .current_time=&current_time,
 
4677
    .mandos_client_exited=&mandos_client_exited,
 
4678
    .password_is_read=&password_is_read,
 
4679
  };
 
4680
  task.func(task, queue);
 
4681
  g_assert_false(quit_now);
 
4682
  g_assert_true(queue->next_run == 0);
 
4683
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4684
 
 
4685
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4686
        .func=read_inotify_event,
 
4687
        .epoll_fd=epoll_fd,
 
4688
        .fd=pipefds[0],
 
4689
        .quit_now=&quit_now,
 
4690
        .password=&password,
 
4691
        .filename=task.filename,
 
4692
        .cancelled_filenames=&cancelled_filenames,
 
4693
        .current_time=&current_time,
 
4694
        .mandos_client_exited=&mandos_client_exited,
 
4695
        .password_is_read=&password_is_read,
 
4696
      }));
 
4697
 
 
4698
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4699
                                   EPOLLIN | EPOLLRDHUP));
 
4700
 
 
4701
  __attribute__((cleanup(cleanup_string)))
 
4702
    char *filename = NULL;
 
4703
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4704
                           dummy_file_name), >, 0);
 
4705
  g_assert_nonnull(filename);
 
4706
  g_assert_false(string_set_contains(cancelled_filenames, filename));
 
4707
}
 
4708
 
 
4709
static
 
4710
void test_read_inotify_event_IN_DELETE_badname(__attribute__((unused))
 
4711
                                               test_fixture *fixture,
 
4712
                                               __attribute__((unused))
 
4713
                                               gconstpointer
 
4714
                                               user_data){
 
4715
  __attribute__((cleanup(cleanup_close)))
 
4716
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4717
  g_assert_cmpint(epoll_fd, >=, 0);
 
4718
  __attribute__((cleanup(string_set_clear)))
 
4719
    string_set cancelled_filenames = {};
 
4720
  const mono_microsecs current_time = 0;
 
4721
 
 
4722
  int pipefds[2];
 
4723
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4724
 
 
4725
  /* "sufficient to read at least one event." - inotify(7) */
 
4726
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4727
                                  + NAME_MAX + 1);
 
4728
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4729
  struct {
 
4730
    struct inotify_event event;
 
4731
    char name_buffer[NAME_MAX + 1];
 
4732
  } ievent_buffer;
 
4733
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4734
 
 
4735
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4736
  ievent->mask = IN_DELETE;
 
4737
  ievent->len = sizeof(dummy_file_name);
 
4738
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4739
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4740
                              + sizeof(dummy_file_name));
 
4741
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4742
                  ==, ievent_size);
 
4743
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4744
 
 
4745
  bool quit_now = false;
 
4746
  buffer password = {};
 
4747
  bool mandos_client_exited = false;
 
4748
  bool password_is_read = false;
 
4749
  __attribute__((cleanup(cleanup_queue)))
 
4750
    task_queue *queue = create_queue();
 
4751
  g_assert_nonnull(queue);
 
4752
 
 
4753
  task_context task = {
 
4754
    .func=read_inotify_event,
 
4755
    .epoll_fd=epoll_fd,
 
4756
    .fd=pipefds[0],
 
4757
    .quit_now=&quit_now,
 
4758
    .password=&password,
 
4759
    .filename=strdup("/nonexistent"),
 
4760
    .cancelled_filenames=&cancelled_filenames,
 
4761
    .current_time=&current_time,
 
4762
    .mandos_client_exited=&mandos_client_exited,
 
4763
    .password_is_read=&password_is_read,
 
4764
  };
 
4765
  task.func(task, queue);
 
4766
  g_assert_false(quit_now);
 
4767
  g_assert_true(queue->next_run == 0);
 
4768
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4769
 
 
4770
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4771
        .func=read_inotify_event,
 
4772
        .epoll_fd=epoll_fd,
 
4773
        .fd=pipefds[0],
 
4774
        .quit_now=&quit_now,
 
4775
        .password=&password,
 
4776
        .filename=task.filename,
 
4777
        .cancelled_filenames=&cancelled_filenames,
 
4778
        .current_time=&current_time,
 
4779
        .mandos_client_exited=&mandos_client_exited,
 
4780
        .password_is_read=&password_is_read,
 
4781
      }));
 
4782
 
 
4783
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4784
                                   EPOLLIN | EPOLLRDHUP));
 
4785
 
 
4786
  __attribute__((cleanup(cleanup_string)))
 
4787
    char *filename = NULL;
 
4788
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4789
                           dummy_file_name), >, 0);
 
4790
  g_assert_nonnull(filename);
 
4791
  g_assert_false(string_set_contains(cancelled_filenames, filename));
 
4792
}
 
4793
 
 
4794
static
 
4795
void test_open_and_parse_question_ENOENT(__attribute__((unused))
 
4796
                                         test_fixture *fixture,
 
4797
                                         __attribute__((unused))
 
4798
                                         gconstpointer user_data){
 
4799
  __attribute__((cleanup(cleanup_close)))
 
4800
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4801
  g_assert_cmpint(epoll_fd, >=, 0);
 
4802
  __attribute__((cleanup(string_set_clear)))
 
4803
    string_set cancelled_filenames = {};
 
4804
  bool mandos_client_exited = false;
 
4805
  bool password_is_read = false;
 
4806
  __attribute__((cleanup(cleanup_queue)))
 
4807
    task_queue *queue = create_queue();
 
4808
  g_assert_nonnull(queue);
 
4809
 
 
4810
  char *const filename = strdup("/nonexistent");
 
4811
  g_assert_nonnull(filename);
 
4812
  task_context task = {
 
4813
    .func=open_and_parse_question,
 
4814
    .question_filename=filename,
 
4815
    .epoll_fd=epoll_fd,
 
4816
    .password=(buffer[]){{}},
 
4817
    .filename=filename,
 
4818
    .cancelled_filenames=&cancelled_filenames,
 
4819
    .current_time=(mono_microsecs[]){0},
 
4820
    .mandos_client_exited=&mandos_client_exited,
 
4821
    .password_is_read=&password_is_read,
 
4822
  };
 
4823
  task.func(task, queue);
 
4824
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4825
}
 
4826
 
 
4827
static void test_open_and_parse_question_EIO(__attribute__((unused))
 
4828
                                             test_fixture *fixture,
 
4829
                                             __attribute__((unused))
 
4830
                                             gconstpointer user_data){
 
4831
  __attribute__((cleanup(cleanup_close)))
 
4832
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4833
  g_assert_cmpint(epoll_fd, >=, 0);
 
4834
  __attribute__((cleanup(string_set_clear)))
 
4835
    string_set cancelled_filenames = {};
 
4836
  buffer password = {};
 
4837
  bool mandos_client_exited = false;
 
4838
  bool password_is_read = false;
 
4839
  __attribute__((cleanup(cleanup_queue)))
 
4840
    task_queue *queue = create_queue();
 
4841
  g_assert_nonnull(queue);
 
4842
  const mono_microsecs current_time = 0;
 
4843
 
 
4844
  char *filename = strdup("/proc/self/mem");
 
4845
  task_context task = {
 
4846
    .func=open_and_parse_question,
 
4847
    .question_filename=filename,
 
4848
    .epoll_fd=epoll_fd,
 
4849
    .password=&password,
 
4850
    .filename=filename,
 
4851
    .cancelled_filenames=&cancelled_filenames,
 
4852
    .current_time=&current_time,
 
4853
    .mandos_client_exited=&mandos_client_exited,
 
4854
    .password_is_read=&password_is_read,
 
4855
  };
 
4856
  run_task_with_stderr_to_dev_null(task, queue);
 
4857
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4858
}
 
4859
 
 
4860
static void
 
4861
test_open_and_parse_question_parse_error(__attribute__((unused))
 
4862
                                         test_fixture *fixture,
 
4863
                                         __attribute__((unused))
 
4864
                                         gconstpointer user_data){
 
4865
  __attribute__((cleanup(cleanup_close)))
 
4866
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4867
  g_assert_cmpint(epoll_fd, >=, 0);
 
4868
  __attribute__((cleanup(string_set_clear)))
 
4869
    string_set cancelled_filenames = {};
 
4870
  __attribute__((cleanup(cleanup_queue)))
 
4871
    task_queue *queue = create_queue();
 
4872
  g_assert_nonnull(queue);
 
4873
 
 
4874
  __attribute__((cleanup(cleanup_string)))
 
4875
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
4876
  g_assert_nonnull(tempfilename);
 
4877
  int tempfile = mkostemp(tempfilename, O_CLOEXEC);
 
4878
  g_assert_cmpint(tempfile, >, 0);
 
4879
  const char bad_data[] = "this is bad syntax\n";
 
4880
  g_assert_cmpint(write(tempfile, bad_data, sizeof(bad_data)),
 
4881
                  ==, sizeof(bad_data));
 
4882
  g_assert_cmpint(close(tempfile), ==, 0);
 
4883
 
 
4884
  char *const filename = strdup(tempfilename);
 
4885
  g_assert_nonnull(filename);
 
4886
  task_context task = {
 
4887
    .func=open_and_parse_question,
 
4888
    .question_filename=filename,
 
4889
    .epoll_fd=epoll_fd,
 
4890
    .password=(buffer[]){{}},
 
4891
    .filename=filename,
 
4892
    .cancelled_filenames=&cancelled_filenames,
 
4893
    .current_time=(mono_microsecs[]){0},
 
4894
    .mandos_client_exited=(bool[]){false},
 
4895
    .password_is_read=(bool[]){false},
 
4896
  };
 
4897
  run_task_with_stderr_to_dev_null(task, queue);
 
4898
 
 
4899
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4900
 
 
4901
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
4902
}
 
4903
 
 
4904
static
 
4905
void test_open_and_parse_question_nosocket(__attribute__((unused))
 
4906
                                           test_fixture *fixture,
 
4907
                                           __attribute__((unused))
 
4908
                                           gconstpointer user_data){
 
4909
  __attribute__((cleanup(cleanup_close)))
 
4910
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4911
  g_assert_cmpint(epoll_fd, >=, 0);
 
4912
  __attribute__((cleanup(string_set_clear)))
 
4913
    string_set cancelled_filenames = {};
 
4914
  __attribute__((cleanup(cleanup_queue)))
 
4915
    task_queue *queue = create_queue();
 
4916
  g_assert_nonnull(queue);
 
4917
 
 
4918
  __attribute__((cleanup(cleanup_string)))
 
4919
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
4920
  g_assert_nonnull(tempfilename);
 
4921
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
4922
  g_assert_cmpint(questionfile, >, 0);
 
4923
  FILE *qf = fdopen(questionfile, "w");
 
4924
  g_assert_cmpint(fprintf(qf, "[Ask]\nPID=1\n"), >, 0);
 
4925
  g_assert_cmpint(fclose(qf), ==, 0);
 
4926
 
 
4927
  char *const filename = strdup(tempfilename);
 
4928
  g_assert_nonnull(filename);
 
4929
  task_context task = {
 
4930
    .func=open_and_parse_question,
 
4931
    .question_filename=filename,
 
4932
    .epoll_fd=epoll_fd,
 
4933
    .password=(buffer[]){{}},
 
4934
    .filename=filename,
 
4935
    .cancelled_filenames=&cancelled_filenames,
 
4936
    .current_time=(mono_microsecs[]){0},
 
4937
    .mandos_client_exited=(bool[]){false},
 
4938
    .password_is_read=(bool[]){false},
 
4939
  };
 
4940
  run_task_with_stderr_to_dev_null(task, queue);
 
4941
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4942
 
 
4943
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
4944
}
 
4945
 
 
4946
static
 
4947
void test_open_and_parse_question_badsocket(__attribute__((unused))
 
4948
                                            test_fixture *fixture,
 
4949
                                            __attribute__((unused))
 
4950
                                            gconstpointer user_data){
 
4951
  __attribute__((cleanup(cleanup_close)))
 
4952
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4953
  g_assert_cmpint(epoll_fd, >=, 0);
 
4954
  __attribute__((cleanup(string_set_clear)))
 
4955
    string_set cancelled_filenames = {};
 
4956
  __attribute__((cleanup(cleanup_queue)))
 
4957
    task_queue *queue = create_queue();
 
4958
  g_assert_nonnull(queue);
 
4959
 
 
4960
  __attribute__((cleanup(cleanup_string)))
 
4961
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
4962
  g_assert_nonnull(tempfilename);
 
4963
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
4964
  g_assert_cmpint(questionfile, >, 0);
 
4965
  FILE *qf = fdopen(questionfile, "w");
 
4966
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=\nPID=1\n"), >, 0);
 
4967
  g_assert_cmpint(fclose(qf), ==, 0);
 
4968
 
 
4969
  char *const filename = strdup(tempfilename);
 
4970
  g_assert_nonnull(filename);
 
4971
  task_context task = {
 
4972
    .func=open_and_parse_question,
 
4973
    .question_filename=filename,
 
4974
    .epoll_fd=epoll_fd,
 
4975
    .password=(buffer[]){{}},
 
4976
    .filename=filename,
 
4977
    .cancelled_filenames=&cancelled_filenames,
 
4978
    .current_time=(mono_microsecs[]){0},
 
4979
    .mandos_client_exited=(bool[]){false},
 
4980
    .password_is_read=(bool[]){false},
 
4981
  };
 
4982
  run_task_with_stderr_to_dev_null(task, queue);
 
4983
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4984
 
 
4985
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
4986
}
 
4987
 
 
4988
static
 
4989
void test_open_and_parse_question_nopid(__attribute__((unused))
 
4990
                                        test_fixture *fixture,
 
4991
                                        __attribute__((unused))
 
4992
                                        gconstpointer user_data){
 
4993
  __attribute__((cleanup(cleanup_close)))
 
4994
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4995
  g_assert_cmpint(epoll_fd, >=, 0);
 
4996
  __attribute__((cleanup(string_set_clear)))
 
4997
    string_set cancelled_filenames = {};
 
4998
  __attribute__((cleanup(cleanup_queue)))
 
4999
    task_queue *queue = create_queue();
 
5000
  g_assert_nonnull(queue);
 
5001
 
 
5002
  __attribute__((cleanup(cleanup_string)))
 
5003
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5004
  g_assert_nonnull(tempfilename);
 
5005
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5006
  g_assert_cmpint(questionfile, >, 0);
 
5007
  FILE *qf = fdopen(questionfile, "w");
 
5008
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\n"), >, 0);
 
5009
  g_assert_cmpint(fclose(qf), ==, 0);
 
5010
 
 
5011
  char *const filename = strdup(tempfilename);
 
5012
  g_assert_nonnull(filename);
 
5013
  task_context task = {
 
5014
    .func=open_and_parse_question,
 
5015
    .question_filename=filename,
 
5016
    .epoll_fd=epoll_fd,
 
5017
    .password=(buffer[]){{}},
 
5018
    .filename=filename,
 
5019
    .cancelled_filenames=&cancelled_filenames,
 
5020
    .current_time=(mono_microsecs[]){0},
 
5021
    .mandos_client_exited=(bool[]){false},
 
5022
    .password_is_read=(bool[]){false},
 
5023
  };
 
5024
  run_task_with_stderr_to_dev_null(task, queue);
 
5025
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5026
 
 
5027
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5028
}
 
5029
 
 
5030
static
 
5031
void test_open_and_parse_question_badpid(__attribute__((unused))
 
5032
                                         test_fixture *fixture,
 
5033
                                         __attribute__((unused))
 
5034
                                         gconstpointer user_data){
 
5035
  __attribute__((cleanup(cleanup_close)))
 
5036
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5037
  g_assert_cmpint(epoll_fd, >=, 0);
 
5038
  __attribute__((cleanup(string_set_clear)))
 
5039
    string_set cancelled_filenames = {};
 
5040
  __attribute__((cleanup(cleanup_queue)))
 
5041
    task_queue *queue = create_queue();
 
5042
  g_assert_nonnull(queue);
 
5043
 
 
5044
  __attribute__((cleanup(cleanup_string)))
 
5045
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5046
  g_assert_nonnull(tempfilename);
 
5047
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5048
  g_assert_cmpint(questionfile, >, 0);
 
5049
  FILE *qf = fdopen(questionfile, "w");
 
5050
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=\n"),
 
5051
                  >, 0);
 
5052
  g_assert_cmpint(fclose(qf), ==, 0);
 
5053
 
 
5054
  char *const filename = strdup(tempfilename);
 
5055
  g_assert_nonnull(filename);
 
5056
  task_context task = {
 
5057
    .func=open_and_parse_question,
 
5058
    .question_filename=filename,
 
5059
    .epoll_fd=epoll_fd,
 
5060
    .password=(buffer[]){{}},
 
5061
    .filename=filename,
 
5062
    .cancelled_filenames=&cancelled_filenames,
 
5063
    .current_time=(mono_microsecs[]){0},
 
5064
    .mandos_client_exited=(bool[]){false},
 
5065
    .password_is_read=(bool[]){false},
 
5066
  };
 
5067
  run_task_with_stderr_to_dev_null(task, queue);
 
5068
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5069
 
 
5070
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5071
}
 
5072
 
 
5073
static void
 
5074
test_open_and_parse_question_noexist_pid(__attribute__((unused))
 
5075
                                         test_fixture *fixture,
 
5076
                                         __attribute__((unused))
 
5077
                                         gconstpointer user_data){
 
5078
  __attribute__((cleanup(cleanup_close)))
 
5079
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5080
  g_assert_cmpint(epoll_fd, >=, 0);
 
5081
  __attribute__((cleanup(string_set_clear)))
 
5082
    string_set cancelled_filenames = {};
 
5083
  buffer password = {};
 
5084
  bool mandos_client_exited = false;
 
5085
  bool password_is_read = false;
 
5086
  __attribute__((cleanup(cleanup_queue)))
 
5087
    task_queue *queue = create_queue();
 
5088
  g_assert_nonnull(queue);
 
5089
  const mono_microsecs current_time = 0;
 
5090
 
 
5091
  /* Find value of sysctl kernel.pid_max */
 
5092
  uintmax_t pid_max = 0;
 
5093
  FILE *sysctl_pid_max = fopen("/proc/sys/kernel/pid_max", "r");
 
5094
  g_assert_nonnull(sysctl_pid_max);
 
5095
  g_assert_cmpint(fscanf(sysctl_pid_max, "%" PRIuMAX, &pid_max),
 
5096
                  ==, 1);
 
5097
  g_assert_cmpint(fclose(sysctl_pid_max), ==, 0);
 
5098
 
 
5099
  pid_t nonexisting_pid = ((pid_t)pid_max)+1;
 
5100
  g_assert_true(nonexisting_pid > 0); /* Overflow check */
 
5101
 
 
5102
  __attribute__((cleanup(cleanup_string)))
 
5103
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5104
  g_assert_nonnull(tempfilename);
 
5105
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5106
  g_assert_cmpint(questionfile, >, 0);
 
5107
  FILE *qf = fdopen(questionfile, "w");
 
5108
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5109
                          PRIuMAX"\n", (uintmax_t)nonexisting_pid),
 
5110
                  >, 0);
 
5111
  g_assert_cmpint(fclose(qf), ==, 0);
 
5112
 
 
5113
  char *const question_filename = strdup(tempfilename);
 
5114
  g_assert_nonnull(question_filename);
 
5115
  task_context task = {
 
5116
    .func=open_and_parse_question,
 
5117
    .question_filename=question_filename,
 
5118
    .epoll_fd=epoll_fd,
 
5119
    .password=&password,
 
5120
    .filename=question_filename,
 
5121
    .cancelled_filenames=&cancelled_filenames,
 
5122
    .current_time=&current_time,
 
5123
    .mandos_client_exited=&mandos_client_exited,
 
5124
    .password_is_read=&password_is_read,
 
5125
  };
 
5126
  run_task_with_stderr_to_dev_null(task, queue);
 
5127
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5128
 
 
5129
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5130
}
 
5131
 
 
5132
static void
 
5133
test_open_and_parse_question_no_notafter(__attribute__((unused))
 
5134
                                         test_fixture *fixture,
 
5135
                                         __attribute__((unused))
 
5136
                                         gconstpointer user_data){
 
5137
  __attribute__((cleanup(cleanup_close)))
 
5138
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5139
  g_assert_cmpint(epoll_fd, >=, 0);
 
5140
  __attribute__((cleanup(string_set_clear)))
 
5141
    string_set cancelled_filenames = {};
 
5142
  buffer password = {};
 
5143
  bool mandos_client_exited = false;
 
5144
  bool password_is_read = false;
 
5145
  __attribute__((cleanup(cleanup_queue)))
 
5146
    task_queue *queue = create_queue();
 
5147
  g_assert_nonnull(queue);
 
5148
  const mono_microsecs current_time = 0;
 
5149
 
 
5150
  __attribute__((cleanup(cleanup_string)))
 
5151
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5152
  g_assert_nonnull(tempfilename);
 
5153
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5154
  g_assert_cmpint(questionfile, >, 0);
 
5155
  FILE *qf = fdopen(questionfile, "w");
 
5156
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5157
                          PRIuMAX "\n", (uintmax_t)getpid()), >, 0);
 
5158
  g_assert_cmpint(fclose(qf), ==, 0);
 
5159
 
 
5160
  char *const filename = strdup(tempfilename);
 
5161
  g_assert_nonnull(filename);
 
5162
  task_context task = {
 
5163
    .func=open_and_parse_question,
 
5164
    .question_filename=filename,
 
5165
    .epoll_fd=epoll_fd,
 
5166
    .password=&password,
 
5167
    .filename=filename,
 
5168
    .cancelled_filenames=&cancelled_filenames,
 
5169
    .current_time=&current_time,
 
5170
    .mandos_client_exited=&mandos_client_exited,
 
5171
    .password_is_read=&password_is_read,
 
5172
  };
 
5173
  task.func(task, queue);
 
5174
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5175
 
 
5176
  __attribute__((cleanup(cleanup_string)))
 
5177
    char *socket_filename = strdup("/nonexistent");
 
5178
  g_assert_nonnull(socket_filename);
 
5179
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
5180
        .func=connect_question_socket,
 
5181
        .question_filename=tempfilename,
 
5182
        .filename=socket_filename,
 
5183
        .epoll_fd=epoll_fd,
 
5184
        .password=&password,
 
5185
        .current_time=&current_time,
 
5186
        .mandos_client_exited=&mandos_client_exited,
 
5187
        .password_is_read=&password_is_read,
 
5188
      }));
 
5189
 
 
5190
  g_assert_true(queue->next_run != 0);
 
5191
 
 
5192
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5193
}
 
5194
 
 
5195
static void
 
5196
test_open_and_parse_question_bad_notafter(__attribute__((unused))
 
5197
                                          test_fixture *fixture,
 
5198
                                          __attribute__((unused))
 
5199
                                          gconstpointer user_data){
 
5200
  __attribute__((cleanup(cleanup_close)))
 
5201
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5202
  g_assert_cmpint(epoll_fd, >=, 0);
 
5203
  __attribute__((cleanup(string_set_clear)))
 
5204
    string_set cancelled_filenames = {};
 
5205
  buffer password = {};
 
5206
  bool mandos_client_exited = false;
 
5207
  bool password_is_read = false;
 
5208
  __attribute__((cleanup(cleanup_queue)))
 
5209
    task_queue *queue = create_queue();
 
5210
  g_assert_nonnull(queue);
 
5211
  const mono_microsecs current_time = 0;
 
5212
 
 
5213
  __attribute__((cleanup(cleanup_string)))
 
5214
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5215
  g_assert_nonnull(tempfilename);
 
5216
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5217
  g_assert_cmpint(questionfile, >, 0);
 
5218
  FILE *qf = fdopen(questionfile, "w");
 
5219
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5220
                          PRIuMAX "\nNotAfter=\n",
 
5221
                          (uintmax_t)getpid()), >, 0);
 
5222
  g_assert_cmpint(fclose(qf), ==, 0);
 
5223
 
 
5224
  char *const filename = strdup(tempfilename);
 
5225
  g_assert_nonnull(filename);
 
5226
  task_context task = {
 
5227
    .func=open_and_parse_question,
 
5228
    .question_filename=filename,
 
5229
    .epoll_fd=epoll_fd,
 
5230
    .password=&password,
 
5231
    .filename=filename,
 
5232
    .cancelled_filenames=&cancelled_filenames,
 
5233
    .current_time=&current_time,
 
5234
    .mandos_client_exited=&mandos_client_exited,
 
5235
    .password_is_read=&password_is_read,
 
5236
  };
 
5237
  run_task_with_stderr_to_dev_null(task, queue);
 
5238
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5239
 
 
5240
  __attribute__((cleanup(cleanup_string)))
 
5241
    char *socket_filename = strdup("/nonexistent");
 
5242
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
5243
        .func=connect_question_socket,
 
5244
        .question_filename=tempfilename,
 
5245
        .filename=socket_filename,
 
5246
        .epoll_fd=epoll_fd,
 
5247
        .password=&password,
 
5248
        .current_time=&current_time,
 
5249
        .mandos_client_exited=&mandos_client_exited,
 
5250
        .password_is_read=&password_is_read,
 
5251
      }));
 
5252
  g_assert_true(queue->next_run != 0);
 
5253
 
 
5254
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5255
}
 
5256
 
 
5257
static
 
5258
void assert_open_and_parse_question_with_notafter(const mono_microsecs
 
5259
                                                  current_time,
 
5260
                                                  const mono_microsecs
 
5261
                                                  notafter,
 
5262
                                                  const mono_microsecs
 
5263
                                                  next_queue_run){
 
5264
  __attribute__((cleanup(cleanup_close)))
 
5265
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5266
  g_assert_cmpint(epoll_fd, >=, 0);
 
5267
  __attribute__((cleanup(string_set_clear)))
 
5268
    string_set cancelled_filenames = {};
 
5269
  buffer password = {};
 
5270
  bool mandos_client_exited = false;
 
5271
  bool password_is_read = false;
 
5272
  __attribute__((cleanup(cleanup_queue)))
 
5273
    task_queue *queue = create_queue();
 
5274
  g_assert_nonnull(queue);
 
5275
  queue->next_run = next_queue_run;
 
5276
 
 
5277
  __attribute__((cleanup(cleanup_string)))
 
5278
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5279
  g_assert_nonnull(tempfilename);
 
5280
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5281
  g_assert_cmpint(questionfile, >, 0);
 
5282
  FILE *qf = fdopen(questionfile, "w");
 
5283
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5284
                          PRIuMAX "\nNotAfter=%" PRIuMAX "\n",
 
5285
                          (uintmax_t)getpid(), notafter), >, 0);
 
5286
  g_assert_cmpint(fclose(qf), ==, 0);
 
5287
 
 
5288
  char *const filename = strdup(tempfilename);
 
5289
  g_assert_nonnull(filename);
 
5290
  task_context task = {
 
5291
    .func=open_and_parse_question,
 
5292
    .question_filename=filename,
 
5293
    .epoll_fd=epoll_fd,
 
5294
    .password=&password,
 
5295
    .filename=filename,
 
5296
    .cancelled_filenames=&cancelled_filenames,
 
5297
    .current_time=&current_time,
 
5298
    .mandos_client_exited=&mandos_client_exited,
 
5299
    .password_is_read=&password_is_read,
 
5300
  };
 
5301
  task.func(task, queue);
 
5302
 
 
5303
  if(queue->length >= 1){
 
5304
    __attribute__((cleanup(cleanup_string)))
 
5305
      char *socket_filename = strdup("/nonexistent");
 
5306
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5307
          .func=connect_question_socket,
 
5308
          .filename=socket_filename,
 
5309
          .epoll_fd=epoll_fd,
 
5310
          .password=&password,
 
5311
          .current_time=&current_time,
 
5312
          .cancelled_filenames=&cancelled_filenames,
 
5313
          .mandos_client_exited=&mandos_client_exited,
 
5314
          .password_is_read=&password_is_read,
 
5315
        }));
 
5316
    g_assert_true(queue->next_run != 0);
 
5317
  }
 
5318
 
 
5319
  if(notafter == 0){
 
5320
    g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5321
  } else if(current_time >= notafter) {
 
5322
    g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5323
  } else {
 
5324
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5325
          .func=cancel_old_question,
 
5326
          .question_filename=tempfilename,
 
5327
          .filename=tempfilename,
 
5328
          .notafter=notafter,
 
5329
          .cancelled_filenames=&cancelled_filenames,
 
5330
          .current_time=&current_time,
 
5331
        }));
 
5332
  }
 
5333
  g_assert_true(queue->next_run == 1);
 
5334
 
 
5335
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5336
}
 
5337
 
 
5338
static void
 
5339
test_open_and_parse_question_notafter_0(__attribute__((unused))
 
5340
                                        test_fixture *fixture,
 
5341
                                        __attribute__((unused))
 
5342
                                        gconstpointer user_data){
 
5343
  /* current_time, notafter, next_queue_run */
 
5344
  assert_open_and_parse_question_with_notafter(0, 0, 0);
 
5345
}
 
5346
 
 
5347
static void
 
5348
test_open_and_parse_question_notafter_1(__attribute__((unused))
 
5349
                                        test_fixture *fixture,
 
5350
                                        __attribute__((unused))
 
5351
                                        gconstpointer user_data){
 
5352
  /* current_time, notafter, next_queue_run */
 
5353
  assert_open_and_parse_question_with_notafter(0, 1, 0);
 
5354
}
 
5355
 
 
5356
static void
 
5357
test_open_and_parse_question_notafter_1_1(__attribute__((unused))
 
5358
                                          test_fixture *fixture,
 
5359
                                          __attribute__((unused))
 
5360
                                          gconstpointer user_data){
 
5361
  /* current_time, notafter, next_queue_run */
 
5362
  assert_open_and_parse_question_with_notafter(0, 1, 1);
 
5363
}
 
5364
 
 
5365
static void
 
5366
test_open_and_parse_question_notafter_1_2(__attribute__((unused))
 
5367
                                          test_fixture *fixture,
 
5368
                                          __attribute__((unused))
 
5369
                                          gconstpointer user_data){
 
5370
  /* current_time, notafter, next_queue_run */
 
5371
  assert_open_and_parse_question_with_notafter(0, 1, 2);
 
5372
}
 
5373
 
 
5374
static void
 
5375
test_open_and_parse_question_equal_notafter(__attribute__((unused))
 
5376
                                            test_fixture *fixture,
 
5377
                                            __attribute__((unused))
 
5378
                                            gconstpointer user_data){
 
5379
  /* current_time, notafter, next_queue_run */
 
5380
  assert_open_and_parse_question_with_notafter(1, 1, 0);
 
5381
}
 
5382
 
 
5383
static void
 
5384
test_open_and_parse_question_late_notafter(__attribute__((unused))
 
5385
                                           test_fixture *fixture,
 
5386
                                           __attribute__((unused))
 
5387
                                           gconstpointer user_data){
 
5388
  /* current_time, notafter, next_queue_run */
 
5389
  assert_open_and_parse_question_with_notafter(2, 1, 0);
 
5390
}
 
5391
 
 
5392
static void assert_cancel_old_question_param(const mono_microsecs
 
5393
                                             next_queue_run,
 
5394
                                             const mono_microsecs
 
5395
                                             notafter,
 
5396
                                             const mono_microsecs
 
5397
                                             current_time,
 
5398
                                             const mono_microsecs
 
5399
                                             next_set_to){
 
5400
  __attribute__((cleanup(string_set_clear)))
 
5401
    string_set cancelled_filenames = {};
 
5402
  __attribute__((cleanup(cleanup_queue)))
 
5403
    task_queue *queue = create_queue();
 
5404
  g_assert_nonnull(queue);
 
5405
  queue->next_run = next_queue_run;
 
5406
 
 
5407
  char *const question_filename = strdup("/nonexistent");
 
5408
  g_assert_nonnull(question_filename);
 
5409
  task_context task = {
 
5410
    .func=cancel_old_question,
 
5411
    .question_filename=question_filename,
 
5412
    .filename=question_filename,
 
5413
    .notafter=notafter,
 
5414
    .cancelled_filenames=&cancelled_filenames,
 
5415
    .current_time=&current_time,
 
5416
  };
 
5417
  task.func(task, queue);
 
5418
 
 
5419
  if(current_time >= notafter){
 
5420
    g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5421
    g_assert_true(string_set_contains(cancelled_filenames,
 
5422
                                      "/nonexistent"));
 
5423
  } else {
 
5424
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5425
          .func=cancel_old_question,
 
5426
          .question_filename=question_filename,
 
5427
          .filename=question_filename,
 
5428
          .notafter=notafter,
 
5429
          .cancelled_filenames=&cancelled_filenames,
 
5430
          .current_time=&current_time,
 
5431
        }));
 
5432
 
 
5433
    g_assert_false(string_set_contains(cancelled_filenames,
 
5434
                                       question_filename));
 
5435
  }
 
5436
  g_assert_cmpuint((unsigned int)queue->next_run, ==,
 
5437
                   (unsigned int)next_set_to);
 
5438
}
 
5439
 
 
5440
static void test_cancel_old_question_0_1_2(__attribute__((unused))
 
5441
                                           test_fixture *fixture,
 
5442
                                           __attribute__((unused))
 
5443
                                           gconstpointer user_data){
 
5444
  /* next_queue_run unset,
 
5445
     cancellation should happen because time has come,
 
5446
     next_queue_run should be unchanged */
 
5447
  /* next_queue_run, notafter, current_time, next_set_to */
 
5448
  assert_cancel_old_question_param(0, 1, 2, 0);
 
5449
}
 
5450
 
 
5451
static void test_cancel_old_question_0_2_1(__attribute__((unused))
 
5452
                                           test_fixture *fixture,
 
5453
                                           __attribute__((unused))
 
5454
                                           gconstpointer user_data){
 
5455
  /* If next_queue_run is 0, meaning unset, and notafter is 2,
 
5456
     and current_time is not yet notafter or greater,
 
5457
     update value of next_queue_run to value of notafter */
 
5458
  /* next_queue_run, notafter, current_time, next_set_to */
 
5459
  assert_cancel_old_question_param(0, 2, 1, 2);
 
5460
}
 
5461
 
 
5462
static void test_cancel_old_question_1_2_3(__attribute__((unused))
 
5463
                                           test_fixture *fixture,
 
5464
                                           __attribute__((unused))
 
5465
                                           gconstpointer user_data){
 
5466
  /* next_queue_run 1,
 
5467
     cancellation should happen because time has come,
 
5468
     next_queue_run should be unchanged */
 
5469
  /* next_queue_run, notafter, current_time, next_set_to */
 
5470
  assert_cancel_old_question_param(1, 2, 3, 1);
 
5471
}
 
5472
 
 
5473
static void test_cancel_old_question_1_3_2(__attribute__((unused))
 
5474
                                           test_fixture *fixture,
 
5475
                                           __attribute__((unused))
 
5476
                                           gconstpointer user_data){
 
5477
  /* If next_queue_run is set,
 
5478
     and current_time is not yet notafter or greater,
 
5479
     and notafter is larger than next_queue_run
 
5480
     next_queue_run should be unchanged */
 
5481
  /* next_queue_run, notafter, current_time, next_set_to */
 
5482
  assert_cancel_old_question_param(1, 3, 2, 1);
 
5483
}
 
5484
 
 
5485
static void test_cancel_old_question_2_1_3(__attribute__((unused))
 
5486
                                           test_fixture *fixture,
 
5487
                                           __attribute__((unused))
 
5488
                                           gconstpointer user_data){
 
5489
  /* next_queue_run 2,
 
5490
     cancellation should happen because time has come,
 
5491
     next_queue_run should be unchanged */
 
5492
  /* next_queue_run, notafter, current_time, next_set_to */
 
5493
  assert_cancel_old_question_param(2, 1, 3, 2);
 
5494
}
 
5495
 
 
5496
static void test_cancel_old_question_2_3_1(__attribute__((unused))
 
5497
                                           test_fixture *fixture,
 
5498
                                           __attribute__((unused))
 
5499
                                           gconstpointer user_data){
 
5500
  /* If next_queue_run is set,
 
5501
     and current_time is not yet notafter or greater,
 
5502
     and notafter is larger than next_queue_run
 
5503
     next_queue_run should be unchanged */
 
5504
  /* next_queue_run, notafter, current_time, next_set_to */
 
5505
  assert_cancel_old_question_param(2, 3, 1, 2);
 
5506
}
 
5507
 
 
5508
static void test_cancel_old_question_3_1_2(__attribute__((unused))
 
5509
                                           test_fixture *fixture,
 
5510
                                           __attribute__((unused))
 
5511
                                           gconstpointer user_data){
 
5512
  /* next_queue_run 3,
 
5513
     cancellation should happen because time has come,
 
5514
     next_queue_run should be unchanged */
 
5515
  /* next_queue_run, notafter, current_time, next_set_to */
 
5516
  assert_cancel_old_question_param(3, 1, 2, 3);
 
5517
}
 
5518
 
 
5519
static void test_cancel_old_question_3_2_1(__attribute__((unused))
 
5520
                                           test_fixture *fixture,
 
5521
                                           __attribute__((unused))
 
5522
                                           gconstpointer user_data){
 
5523
  /* If next_queue_run is set,
 
5524
     and current_time is not yet notafter or greater,
 
5525
     and notafter is smaller than next_queue_run
 
5526
     update value of next_queue_run to value of notafter */
 
5527
  /* next_queue_run, notafter, current_time, next_set_to */
 
5528
  assert_cancel_old_question_param(3, 2, 1, 2);
 
5529
}
 
5530
 
 
5531
static void
 
5532
test_connect_question_socket_name_too_long(__attribute__((unused))
 
5533
                                           test_fixture *fixture,
 
5534
                                           __attribute__((unused))
 
5535
                                           gconstpointer user_data){
 
5536
  __attribute__((cleanup(cleanup_close)))
 
5537
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5538
  g_assert_cmpint(epoll_fd, >=, 0);
 
5539
  const char question_filename[] = "/nonexistent/question";
 
5540
  __attribute__((cleanup(string_set_clear)))
 
5541
    string_set cancelled_filenames = {};
 
5542
  __attribute__((cleanup(cleanup_queue)))
 
5543
    task_queue *queue = create_queue();
 
5544
  g_assert_nonnull(queue);
 
5545
  __attribute__((cleanup(cleanup_string)))
 
5546
    char *tempdir = make_temporary_directory();
 
5547
  g_assert_nonnull(tempdir);
 
5548
  struct sockaddr_un unix_socket = { .sun_family=AF_LOCAL };
 
5549
  char socket_name[sizeof(unix_socket.sun_path)];
 
5550
  memset(socket_name, 'x', sizeof(socket_name));
 
5551
  socket_name[sizeof(socket_name)-1] = '\0';
 
5552
  char *filename = NULL;
 
5553
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5554
                  >, 0);
 
5555
  g_assert_nonnull(filename);
 
5556
 
 
5557
  task_context task = {
 
5558
    .func=connect_question_socket,
 
5559
    .question_filename=strdup(question_filename),
 
5560
    .epoll_fd=epoll_fd,
 
5561
    .password=(buffer[]){{}},
 
5562
    .filename=filename,
 
5563
    .cancelled_filenames=&cancelled_filenames,
 
5564
    .mandos_client_exited=(bool[]){false},
 
5565
    .password_is_read=(bool[]){false},
 
5566
    .current_time=(mono_microsecs[]){0},
 
5567
  };
 
5568
  g_assert_nonnull(task.question_filename);
 
5569
  run_task_with_stderr_to_dev_null(task, queue);
 
5570
 
 
5571
  g_assert_true(string_set_contains(cancelled_filenames,
 
5572
                                    question_filename));
 
5573
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5574
  g_assert_true(queue->next_run == 0);
 
5575
 
 
5576
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5577
}
 
5578
 
 
5579
static
 
5580
void test_connect_question_socket_connect_fail(__attribute__((unused))
 
5581
                                               test_fixture *fixture,
 
5582
                                               __attribute__((unused))
 
5583
                                               gconstpointer
 
5584
                                               user_data){
 
5585
  __attribute__((cleanup(cleanup_close)))
 
5586
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5587
  g_assert_cmpint(epoll_fd, >=, 0);
 
5588
  const char question_filename[] = "/nonexistent/question";
 
5589
  __attribute__((cleanup(string_set_clear)))
 
5590
    string_set cancelled_filenames = {};
 
5591
  const mono_microsecs current_time = 3;
 
5592
  __attribute__((cleanup(cleanup_queue)))
 
5593
    task_queue *queue = create_queue();
 
5594
  g_assert_nonnull(queue);
 
5595
  __attribute__((cleanup(cleanup_string)))
 
5596
    char *tempdir = make_temporary_directory();
 
5597
  g_assert_nonnull(tempdir);
 
5598
  char socket_name[] = "nonexistent";
 
5599
  char *filename = NULL;
 
5600
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5601
                  >, 0);
 
5602
  g_assert_nonnull(filename);
 
5603
 
 
5604
  task_context task = {
 
5605
    .func=connect_question_socket,
 
5606
    .question_filename=strdup(question_filename),
 
5607
    .epoll_fd=epoll_fd,
 
5608
    .password=(buffer[]){{}},
 
5609
    .filename=filename,
 
5610
    .cancelled_filenames=&cancelled_filenames,
 
5611
    .mandos_client_exited=(bool[]){false},
 
5612
    .password_is_read=(bool[]){false},
 
5613
    .current_time=&current_time,
 
5614
  };
 
5615
  g_assert_nonnull(task.question_filename);
 
5616
  run_task_with_stderr_to_dev_null(task, queue);
 
5617
 
 
5618
  g_assert_nonnull(find_matching_task(queue, task));
 
5619
 
 
5620
  g_assert_false(string_set_contains(cancelled_filenames,
 
5621
                                     question_filename));
 
5622
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5623
  g_assert_true(queue->next_run == 1000000 + current_time);
 
5624
 
 
5625
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5626
}
 
5627
 
 
5628
static
 
5629
void test_connect_question_socket_bad_epoll(__attribute__((unused))
 
5630
                                            test_fixture *fixture,
 
5631
                                            __attribute__((unused))
 
5632
                                            gconstpointer user_data){
 
5633
  __attribute__((cleanup(cleanup_close)))
 
5634
    const int epoll_fd = open("/dev/null",
 
5635
                              O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
5636
  __attribute__((cleanup(cleanup_string)))
 
5637
    char *const question_filename = strdup("/nonexistent/question");
 
5638
  g_assert_nonnull(question_filename);
 
5639
  __attribute__((cleanup(string_set_clear)))
 
5640
    string_set cancelled_filenames = {};
 
5641
  const mono_microsecs current_time = 5;
 
5642
  __attribute__((cleanup(cleanup_queue)))
 
5643
    task_queue *queue = create_queue();
 
5644
  g_assert_nonnull(queue);
 
5645
  __attribute__((cleanup(cleanup_string)))
 
5646
    char *tempdir = make_temporary_directory();
 
5647
  g_assert_nonnull(tempdir);
 
5648
  __attribute__((cleanup(cleanup_close)))
 
5649
    const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
 
5650
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
5651
  g_assert_cmpint(sock_fd, >=, 0);
 
5652
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
5653
  const char socket_name[] = "socket_name";
 
5654
  __attribute__((cleanup(cleanup_string)))
 
5655
    char *filename = NULL;
 
5656
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5657
                  >, 0);
 
5658
  g_assert_nonnull(filename);
 
5659
  g_assert_cmpint((int)strlen(filename), <,
 
5660
                  (int)sizeof(sock_name.sun_path));
 
5661
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
5662
  sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
 
5663
  g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
 
5664
                            (socklen_t)SUN_LEN(&sock_name)), >=, 0);
 
5665
  task_context task = {
 
5666
    .func=connect_question_socket,
 
5667
    .question_filename=strdup(question_filename),
 
5668
    .epoll_fd=epoll_fd,
 
5669
    .password=(buffer[]){{}},
 
5670
    .filename=strdup(filename),
 
5671
    .cancelled_filenames=&cancelled_filenames,
 
5672
    .mandos_client_exited=(bool[]){false},
 
5673
    .password_is_read=(bool[]){false},
 
5674
    .current_time=&current_time,
 
5675
  };
 
5676
  g_assert_nonnull(task.question_filename);
 
5677
  run_task_with_stderr_to_dev_null(task, queue);
 
5678
 
 
5679
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5680
  const task_context *const added_task
 
5681
    = find_matching_task(queue, task);
 
5682
  g_assert_nonnull(added_task);
 
5683
  g_assert_true(queue->next_run == 1000000 + current_time);
 
5684
 
 
5685
  g_assert_cmpint(unlink(filename), ==, 0);
 
5686
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5687
}
 
5688
 
 
5689
static
 
5690
void test_connect_question_socket_usable(__attribute__((unused))
 
5691
                                         test_fixture *fixture,
 
5692
                                         __attribute__((unused))
 
5693
                                         gconstpointer user_data){
 
5694
  __attribute__((cleanup(cleanup_close)))
 
5695
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5696
  g_assert_cmpint(epoll_fd, >=, 0);
 
5697
  __attribute__((cleanup(cleanup_string)))
 
5698
    char *const question_filename = strdup("/nonexistent/question");
 
5699
  g_assert_nonnull(question_filename);
 
5700
  __attribute__((cleanup(string_set_clear)))
 
5701
    string_set cancelled_filenames = {};
 
5702
  buffer password = {};
 
5703
  bool mandos_client_exited = false;
 
5704
  bool password_is_read = false;
 
5705
  const mono_microsecs current_time = 0;
 
5706
  __attribute__((cleanup(cleanup_queue)))
 
5707
    task_queue *queue = create_queue();
 
5708
  g_assert_nonnull(queue);
 
5709
  __attribute__((cleanup(cleanup_string)))
 
5710
    char *tempdir = make_temporary_directory();
 
5711
  g_assert_nonnull(tempdir);
 
5712
  __attribute__((cleanup(cleanup_close)))
 
5713
    const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
 
5714
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
5715
  g_assert_cmpint(sock_fd, >=, 0);
 
5716
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
5717
  const char socket_name[] = "socket_name";
 
5718
  __attribute__((cleanup(cleanup_string)))
 
5719
    char *filename = NULL;
 
5720
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5721
                  >, 0);
 
5722
  g_assert_nonnull(filename);
 
5723
  g_assert_cmpint((int)strlen(filename), <,
 
5724
                  (int)sizeof(sock_name.sun_path));
 
5725
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
5726
  sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
 
5727
  g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
 
5728
                            (socklen_t)SUN_LEN(&sock_name)), >=, 0);
 
5729
  task_context task = {
 
5730
    .func=connect_question_socket,
 
5731
    .question_filename=strdup(question_filename),
 
5732
    .epoll_fd=epoll_fd,
 
5733
    .password=&password,
 
5734
    .filename=strdup(filename),
 
5735
    .cancelled_filenames=&cancelled_filenames,
 
5736
    .mandos_client_exited=&mandos_client_exited,
 
5737
    .password_is_read=&password_is_read,
 
5738
    .current_time=&current_time,
 
5739
  };
 
5740
  g_assert_nonnull(task.question_filename);
 
5741
  task.func(task, queue);
 
5742
 
 
5743
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5744
  const task_context *const added_task
 
5745
    = find_matching_task(queue, (task_context){
 
5746
        .func=send_password_to_socket,
 
5747
        .question_filename=question_filename,
 
5748
        .filename=filename,
 
5749
        .epoll_fd=epoll_fd,
 
5750
        .password=&password,
 
5751
        .cancelled_filenames=&cancelled_filenames,
 
5752
        .mandos_client_exited=&mandos_client_exited,
 
5753
        .password_is_read=&password_is_read,
 
5754
        .current_time=&current_time,
 
5755
      });
 
5756
  g_assert_nonnull(added_task);
 
5757
  g_assert_cmpint(added_task->fd, >, 0);
 
5758
 
 
5759
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5760
                                   EPOLLOUT));
 
5761
 
 
5762
  const int fd = added_task->fd;
 
5763
  g_assert_cmpint(fd, >, 0);
 
5764
  g_assert_true(fd_has_cloexec_and_nonblock(fd));
 
5765
 
 
5766
  /* write to fd */
 
5767
  char write_data[PIPE_BUF];
 
5768
  {
 
5769
    /* Construct test password buffer */
 
5770
    /* Start with + since that is what the real procotol uses */
 
5771
    write_data[0] = '+';
 
5772
    /* Set a special character at string end just to mark the end */
 
5773
    write_data[sizeof(write_data)-2] = 'y';
 
5774
    /* Set NUL at buffer end, as suggested by the protocol */
 
5775
    write_data[sizeof(write_data)-1] = '\0';
 
5776
    /* Fill rest of password with 'x' */
 
5777
    memset(write_data+1, 'x', sizeof(write_data)-3);
 
5778
    g_assert_cmpint((int)send(fd, write_data, sizeof(write_data),
 
5779
                              MSG_NOSIGNAL), ==, sizeof(write_data));
 
5780
  }
 
5781
 
 
5782
  /* read from sock_fd */
 
5783
  char read_data[sizeof(write_data)];
 
5784
  g_assert_cmpint((int)read(sock_fd, read_data, sizeof(read_data)),
 
5785
                  ==, sizeof(read_data));
 
5786
 
 
5787
  g_assert_true(memcmp(write_data, read_data, sizeof(write_data))
 
5788
                == 0);
 
5789
 
 
5790
  /* writing to sock_fd should fail */
 
5791
  g_assert_cmpint(send(sock_fd, write_data, sizeof(write_data),
 
5792
                       MSG_NOSIGNAL), <, 0);
 
5793
 
 
5794
  /* reading from fd should fail */
 
5795
  g_assert_cmpint((int)recv(fd, read_data, sizeof(read_data),
 
5796
                            MSG_NOSIGNAL), <, 0);
 
5797
 
 
5798
  g_assert_cmpint(unlink(filename), ==, 0);
 
5799
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5800
}
 
5801
 
 
5802
static void
 
5803
test_send_password_to_socket_client_not_exited(__attribute__((unused))
 
5804
                                               test_fixture *fixture,
 
5805
                                               __attribute__((unused))
 
5806
                                               gconstpointer
 
5807
                                               user_data){
 
5808
  __attribute__((cleanup(cleanup_close)))
 
5809
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5810
  g_assert_cmpint(epoll_fd, >=, 0);
 
5811
  __attribute__((cleanup(cleanup_string)))
 
5812
    char *const question_filename = strdup("/nonexistent/question");
 
5813
  g_assert_nonnull(question_filename);
 
5814
  __attribute__((cleanup(cleanup_string)))
 
5815
    char *const filename = strdup("/nonexistent/socket");
 
5816
  g_assert_nonnull(filename);
 
5817
  __attribute__((cleanup(string_set_clear)))
 
5818
    string_set cancelled_filenames = {};
 
5819
  buffer password = {};
 
5820
  bool password_is_read = true;
 
5821
  __attribute__((cleanup(cleanup_queue)))
 
5822
    task_queue *queue = create_queue();
 
5823
  g_assert_nonnull(queue);
 
5824
  int socketfds[2];
 
5825
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5826
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5827
                             socketfds), ==, 0);
 
5828
  __attribute__((cleanup(cleanup_close)))
 
5829
    const int read_socket = socketfds[0];
 
5830
  const int write_socket = socketfds[1];
 
5831
  task_context task = {
 
5832
    .func=send_password_to_socket,
 
5833
    .question_filename=strdup(question_filename),
 
5834
    .filename=strdup(filename),
 
5835
    .epoll_fd=epoll_fd,
 
5836
    .fd=write_socket,
 
5837
    .password=&password,
 
5838
    .cancelled_filenames=&cancelled_filenames,
 
5839
    .mandos_client_exited=(bool[]){false},
 
5840
    .password_is_read=&password_is_read,
 
5841
    .current_time=(mono_microsecs[]){0},
 
5842
  };
 
5843
  g_assert_nonnull(task.question_filename);
 
5844
 
 
5845
  task.func(task, queue);
 
5846
 
 
5847
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5848
 
 
5849
  const task_context *const added_task
 
5850
    = find_matching_task(queue, task);
 
5851
  g_assert_nonnull(added_task);
 
5852
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
5853
  g_assert_true(password_is_read);
 
5854
 
 
5855
  g_assert_cmpint(added_task->fd, >, 0);
 
5856
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5857
                                   EPOLLOUT));
 
5858
}
 
5859
 
 
5860
static void
 
5861
test_send_password_to_socket_password_not_read(__attribute__((unused))
 
5862
                                               test_fixture *fixture,
 
5863
                                               __attribute__((unused))
 
5864
                                               gconstpointer
 
5865
                                               user_data){
 
5866
  __attribute__((cleanup(cleanup_close)))
 
5867
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5868
  g_assert_cmpint(epoll_fd, >=, 0);
 
5869
  __attribute__((cleanup(cleanup_string)))
 
5870
    char *const question_filename = strdup("/nonexistent/question");
 
5871
  g_assert_nonnull(question_filename);
 
5872
  __attribute__((cleanup(cleanup_string)))
 
5873
    char *const filename = strdup("/nonexistent/socket");
 
5874
  __attribute__((cleanup(string_set_clear)))
 
5875
    string_set cancelled_filenames = {};
 
5876
  buffer password = {};
 
5877
  __attribute__((cleanup(cleanup_queue)))
 
5878
    task_queue *queue = create_queue();
 
5879
  g_assert_nonnull(queue);
 
5880
  int socketfds[2];
 
5881
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5882
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5883
                             socketfds), ==, 0);
 
5884
  __attribute__((cleanup(cleanup_close)))
 
5885
    const int read_socket = socketfds[0];
 
5886
  const int write_socket = socketfds[1];
 
5887
  task_context task = {
 
5888
    .func=send_password_to_socket,
 
5889
    .question_filename=strdup(question_filename),
 
5890
    .filename=strdup(filename),
 
5891
    .epoll_fd=epoll_fd,
 
5892
    .fd=write_socket,
 
5893
    .password=&password,
 
5894
    .cancelled_filenames=&cancelled_filenames,
 
5895
    .mandos_client_exited=(bool[]){false},
 
5896
    .password_is_read=(bool[]){false},
 
5897
    .current_time=(mono_microsecs[]){0},
 
5898
  };
 
5899
  g_assert_nonnull(task.question_filename);
 
5900
 
 
5901
  task.func(task, queue);
 
5902
 
 
5903
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5904
 
 
5905
  const task_context *const added_task = find_matching_task(queue,
 
5906
                                                            task);
 
5907
  g_assert_nonnull(added_task);
 
5908
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
5909
  g_assert_true(queue->next_run == 0);
 
5910
 
 
5911
  g_assert_cmpint(added_task->fd, >, 0);
 
5912
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5913
                                   EPOLLOUT));
 
5914
}
 
5915
 
 
5916
static
 
5917
void test_send_password_to_socket_EMSGSIZE(__attribute__((unused))
 
5918
                                           test_fixture *fixture,
 
5919
                                           __attribute__((unused))
 
5920
                                           gconstpointer user_data){
 
5921
  __attribute__((cleanup(cleanup_close)))
 
5922
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5923
  g_assert_cmpint(epoll_fd, >=, 0);
 
5924
  const char question_filename[] = "/nonexistent/question";
 
5925
  char *const filename = strdup("/nonexistent/socket");
 
5926
  __attribute__((cleanup(string_set_clear)))
 
5927
    string_set cancelled_filenames = {};
 
5928
  const size_t oversized = 1024*1024; /* Limit seems to be 212960 */
 
5929
  __attribute__((cleanup(cleanup_buffer)))
 
5930
    buffer password = {
 
5931
    .data=malloc(oversized),
 
5932
    .length=oversized,
 
5933
    .allocated=oversized,
 
5934
  };
 
5935
  g_assert_nonnull(password.data);
 
5936
  if(mlock(password.data, password.allocated) != 0){
 
5937
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
5938
  }
 
5939
  /* Construct test password buffer */
 
5940
  /* Start with + since that is what the real procotol uses */
 
5941
  password.data[0] = '+';
 
5942
  /* Set a special character at string end just to mark the end */
 
5943
  password.data[oversized-3] = 'y';
 
5944
  /* Set NUL at buffer end, as suggested by the protocol */
 
5945
  password.data[oversized-2] = '\0';
 
5946
  /* Fill rest of password with 'x' */
 
5947
  memset(password.data+1, 'x', oversized-3);
 
5948
 
 
5949
  __attribute__((cleanup(cleanup_queue)))
 
5950
    task_queue *queue = create_queue();
 
5951
  g_assert_nonnull(queue);
 
5952
  int socketfds[2];
 
5953
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5954
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5955
                             socketfds), ==, 0);
 
5956
  __attribute__((cleanup(cleanup_close)))
 
5957
    const int read_socket = socketfds[0];
 
5958
  __attribute__((cleanup(cleanup_close)))
 
5959
    const int write_socket = socketfds[1];
 
5960
  task_context task = {
 
5961
    .func=send_password_to_socket,
 
5962
    .question_filename=strdup(question_filename),
 
5963
    .filename=filename,
 
5964
    .epoll_fd=epoll_fd,
 
5965
    .fd=write_socket,
 
5966
    .password=&password,
 
5967
    .cancelled_filenames=&cancelled_filenames,
 
5968
    .mandos_client_exited=(bool[]){true},
 
5969
    .password_is_read=(bool[]){true},
 
5970
    .current_time=(mono_microsecs[]){0},
 
5971
  };
 
5972
  g_assert_nonnull(task.question_filename);
 
5973
 
 
5974
  run_task_with_stderr_to_dev_null(task, queue);
 
5975
 
 
5976
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5977
  g_assert_true(string_set_contains(cancelled_filenames,
 
5978
                                    question_filename));
 
5979
}
 
5980
 
 
5981
static void test_send_password_to_socket_retry(__attribute__((unused))
 
5982
                                               test_fixture *fixture,
 
5983
                                               __attribute__((unused))
 
5984
                                               gconstpointer
 
5985
                                               user_data){
 
5986
  __attribute__((cleanup(cleanup_close)))
 
5987
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5988
  g_assert_cmpint(epoll_fd, >=, 0);
 
5989
  __attribute__((cleanup(cleanup_string)))
 
5990
    char *const question_filename = strdup("/nonexistent/question");
 
5991
  g_assert_nonnull(question_filename);
 
5992
  __attribute__((cleanup(cleanup_string)))
 
5993
    char *const filename = strdup("/nonexistent/socket");
 
5994
  g_assert_nonnull(filename);
 
5995
  __attribute__((cleanup(string_set_clear)))
 
5996
    string_set cancelled_filenames = {};
 
5997
  __attribute__((cleanup(cleanup_buffer)))
 
5998
    buffer password = {};
 
5999
 
 
6000
  __attribute__((cleanup(cleanup_queue)))
 
6001
    task_queue *queue = create_queue();
 
6002
  g_assert_nonnull(queue);
 
6003
  int socketfds[2];
 
6004
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6005
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6006
                             socketfds), ==, 0);
 
6007
  __attribute__((cleanup(cleanup_close)))
 
6008
    const int read_socket = socketfds[0];
 
6009
  const int write_socket = socketfds[1];
 
6010
  /* Close the server side socket to force ECONNRESET on client */
 
6011
  g_assert_cmpint(close(read_socket), ==, 0);
 
6012
  task_context task = {
 
6013
    .func=send_password_to_socket,
 
6014
    .question_filename=strdup(question_filename),
 
6015
    .filename=strdup(filename),
 
6016
    .epoll_fd=epoll_fd,
 
6017
    .fd=write_socket,
 
6018
    .password=&password,
 
6019
    .cancelled_filenames=&cancelled_filenames,
 
6020
    .mandos_client_exited=(bool[]){true},
 
6021
    .password_is_read=(bool[]){true},
 
6022
    .current_time=(mono_microsecs[]){0},
 
6023
  };
 
6024
  g_assert_nonnull(task.question_filename);
 
6025
 
 
6026
  task.func(task, queue);
 
6027
 
 
6028
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6029
 
 
6030
  const task_context *const added_task = find_matching_task(queue,
 
6031
                                                            task);
 
6032
  g_assert_nonnull(added_task);
 
6033
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
6034
 
 
6035
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
6036
                                   EPOLLOUT));
 
6037
}
 
6038
 
 
6039
static
 
6040
void test_send_password_to_socket_bad_epoll(__attribute__((unused))
 
6041
                                            test_fixture *fixture,
 
6042
                                            __attribute__((unused))
 
6043
                                            gconstpointer user_data){
 
6044
  __attribute__((cleanup(cleanup_close)))
 
6045
    const int epoll_fd = open("/dev/null",
 
6046
                              O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
6047
  __attribute__((cleanup(cleanup_string)))
 
6048
    char *const question_filename = strdup("/nonexistent/question");
 
6049
  g_assert_nonnull(question_filename);
 
6050
  __attribute__((cleanup(cleanup_string)))
 
6051
    char *const filename = strdup("/nonexistent/socket");
 
6052
  g_assert_nonnull(filename);
 
6053
  __attribute__((cleanup(string_set_clear)))
 
6054
    string_set cancelled_filenames = {};
 
6055
  __attribute__((cleanup(cleanup_buffer)))
 
6056
    buffer password = {};
 
6057
 
 
6058
  const mono_microsecs current_time = 11;
 
6059
  __attribute__((cleanup(cleanup_queue)))
 
6060
    task_queue *queue = create_queue();
 
6061
  g_assert_nonnull(queue);
 
6062
  int socketfds[2];
 
6063
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6064
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6065
                             socketfds), ==, 0);
 
6066
  __attribute__((cleanup(cleanup_close)))
 
6067
    const int read_socket = socketfds[0];
 
6068
  const int write_socket = socketfds[1];
 
6069
  /* Close the server side socket to force ECONNRESET on client */
 
6070
  g_assert_cmpint(close(read_socket), ==, 0);
 
6071
  task_context task = {
 
6072
    .func=send_password_to_socket,
 
6073
    .question_filename=strdup(question_filename),
 
6074
    .filename=strdup(filename),
 
6075
    .epoll_fd=epoll_fd,
 
6076
    .fd=write_socket,
 
6077
    .password=&password,
 
6078
    .cancelled_filenames=&cancelled_filenames,
 
6079
    .mandos_client_exited=(bool[]){true},
 
6080
    .password_is_read=(bool[]){true},
 
6081
    .current_time=&current_time,
 
6082
  };
 
6083
  g_assert_nonnull(task.question_filename);
 
6084
 
 
6085
  run_task_with_stderr_to_dev_null(task, queue);
 
6086
 
 
6087
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6088
 
 
6089
  const task_context *const added_task = find_matching_task(queue,
 
6090
                                                            task);
 
6091
  g_assert_nonnull(added_task);
 
6092
  g_assert_true(queue->next_run == current_time + 1000000);
 
6093
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
6094
}
 
6095
 
 
6096
static void assert_send_password_to_socket_password(buffer password){
 
6097
  __attribute__((cleanup(cleanup_close)))
 
6098
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6099
  g_assert_cmpint(epoll_fd, >=, 0);
 
6100
  char *const question_filename = strdup("/nonexistent/question");
 
6101
  g_assert_nonnull(question_filename);
 
6102
  char *const filename = strdup("/nonexistent/socket");
 
6103
  g_assert_nonnull(filename);
 
6104
  __attribute__((cleanup(string_set_clear)))
 
6105
    string_set cancelled_filenames = {};
 
6106
 
 
6107
  __attribute__((cleanup(cleanup_queue)))
 
6108
    task_queue *queue = create_queue();
 
6109
  g_assert_nonnull(queue);
 
6110
  int socketfds[2];
 
6111
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6112
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6113
                             socketfds), ==, 0);
 
6114
  __attribute__((cleanup(cleanup_close)))
 
6115
    const int read_socket = socketfds[0];
 
6116
  const int write_socket = socketfds[1];
 
6117
  task_context task = {
 
6118
    .func=send_password_to_socket,
 
6119
    .question_filename=question_filename,
 
6120
    .filename=filename,
 
6121
    .epoll_fd=epoll_fd,
 
6122
    .fd=write_socket,
 
6123
    .password=&password,
 
6124
    .cancelled_filenames=&cancelled_filenames,
 
6125
    .mandos_client_exited=(bool[]){true},
 
6126
    .password_is_read=(bool[]){true},
 
6127
    .current_time=(mono_microsecs[]){0},
 
6128
  };
 
6129
 
 
6130
  char *expected_written_data = malloc(password.length + 2);
 
6131
  g_assert_nonnull(expected_written_data);
 
6132
  expected_written_data[0] = '+';
 
6133
  expected_written_data[password.length + 1] = '\0';
 
6134
  if(password.length > 0){
 
6135
    g_assert_nonnull(password.data);
 
6136
    memcpy(expected_written_data + 1, password.data, password.length);
 
6137
  }
 
6138
 
 
6139
  task.func(task, queue);
 
6140
 
 
6141
  char buf[PIPE_BUF];
 
6142
  g_assert_cmpint((int)read(read_socket, buf, PIPE_BUF), ==,
 
6143
                  (int)(password.length + 2));
 
6144
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6145
 
 
6146
  g_assert_true(memcmp(expected_written_data, buf,
 
6147
                       password.length + 2) == 0);
 
6148
 
 
6149
  g_assert_true(epoll_set_does_not_contain(epoll_fd, write_socket));
 
6150
 
 
6151
  free(expected_written_data);
 
6152
}
 
6153
 
 
6154
static void
 
6155
test_send_password_to_socket_null_password(__attribute__((unused))
 
6156
                                           test_fixture *fixture,
 
6157
                                           __attribute__((unused))
 
6158
                                           gconstpointer user_data){
 
6159
  __attribute__((cleanup(cleanup_buffer)))
 
6160
    buffer password = {};
 
6161
  assert_send_password_to_socket_password(password);
 
6162
}
 
6163
 
 
6164
static void
 
6165
test_send_password_to_socket_empty_password(__attribute__((unused))
 
6166
                                            test_fixture *fixture,
 
6167
                                            __attribute__((unused))
 
6168
                                            gconstpointer user_data){
 
6169
  __attribute__((cleanup(cleanup_buffer)))
 
6170
    buffer password = {
 
6171
    .data=malloc(1),           /* because malloc(0) may return NULL */
 
6172
    .length=0,
 
6173
    .allocated=0,               /* deliberate lie */
 
6174
  };
 
6175
  g_assert_nonnull(password.data);
 
6176
  assert_send_password_to_socket_password(password);
 
6177
}
 
6178
 
 
6179
static void
 
6180
test_send_password_to_socket_empty_str_pass(__attribute__((unused))
 
6181
                                            test_fixture *fixture,
 
6182
                                            __attribute__((unused))
 
6183
                                            gconstpointer user_data){
 
6184
  __attribute__((cleanup(cleanup_buffer)))
 
6185
    buffer password = {
 
6186
    .data=strdup(""),
 
6187
    .length=0,
 
6188
    .allocated=1,
 
6189
  };
 
6190
  if(mlock(password.data, password.allocated) != 0){
 
6191
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6192
  }
 
6193
  assert_send_password_to_socket_password(password);
 
6194
}
 
6195
 
 
6196
static void
 
6197
test_send_password_to_socket_text_password(__attribute__((unused))
 
6198
                                           test_fixture *fixture,
 
6199
                                           __attribute__((unused))
 
6200
                                           gconstpointer user_data){
 
6201
  const char dummy_test_password[] = "dummy test password";
 
6202
  __attribute__((cleanup(cleanup_buffer)))
 
6203
    buffer password = {
 
6204
    .data = strdup(dummy_test_password),
 
6205
    .length = strlen(dummy_test_password),
 
6206
    .allocated = sizeof(dummy_test_password),
 
6207
  };
 
6208
  if(mlock(password.data, password.allocated) != 0){
 
6209
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6210
  }
 
6211
  assert_send_password_to_socket_password(password);
 
6212
}
 
6213
 
 
6214
static void
 
6215
test_send_password_to_socket_binary_password(__attribute__((unused))
 
6216
                                             test_fixture *fixture,
 
6217
                                             __attribute__((unused))
 
6218
                                             gconstpointer user_data){
 
6219
  __attribute__((cleanup(cleanup_buffer)))
 
6220
    buffer password = {
 
6221
    .data=malloc(255),
 
6222
    .length=255,
 
6223
    .allocated=255,
 
6224
  };
 
6225
  g_assert_nonnull(password.data);
 
6226
  if(mlock(password.data, password.allocated) != 0){
 
6227
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6228
  }
 
6229
  char c = 1;                   /* Start at 1, avoiding NUL */
 
6230
  for(int i=0; i < 255; i++){
 
6231
    password.data[i] = c++;
 
6232
  }
 
6233
  assert_send_password_to_socket_password(password);
 
6234
}
 
6235
 
 
6236
static void
 
6237
test_send_password_to_socket_nuls_in_password(__attribute__((unused))
 
6238
                                              test_fixture *fixture,
 
6239
                                              __attribute__((unused))
 
6240
                                              gconstpointer
 
6241
                                              user_data){
 
6242
  char test_password[] = {'\0', 'a', '\0', 'b', '\0', 'c', '\0'};
 
6243
  __attribute__((cleanup(cleanup_buffer)))
 
6244
    buffer password = {
 
6245
    .data=malloc(sizeof(test_password)),
 
6246
    .length=sizeof(test_password),
 
6247
    .allocated=sizeof(test_password),
 
6248
  };
 
6249
  g_assert_nonnull(password.data);
 
6250
  if(mlock(password.data, password.allocated) !=0){
 
6251
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6252
  }
 
6253
  memcpy(password.data, test_password, password.allocated);
 
6254
  assert_send_password_to_socket_password(password);
 
6255
}
 
6256
 
 
6257
static bool assert_add_existing_questions_to_devnull(task_queue
 
6258
                                                     *const,
 
6259
                                                     const int,
 
6260
                                                     buffer *const,
 
6261
                                                     string_set *,
 
6262
                                                     const
 
6263
                                                     mono_microsecs
 
6264
                                                     *const,
 
6265
                                                     bool *const,
 
6266
                                                     bool *const,
 
6267
                                                     const char
 
6268
                                                     *const);
 
6269
 
 
6270
static void test_add_existing_questions_ENOENT(__attribute__((unused))
 
6271
                                               test_fixture *fixture,
 
6272
                                               __attribute__((unused))
 
6273
                                               gconstpointer
 
6274
                                               user_data){
 
6275
  __attribute__((cleanup(cleanup_queue)))
 
6276
    task_queue *queue = create_queue();
 
6277
  g_assert_nonnull(queue);
 
6278
  __attribute__((cleanup(cleanup_close)))
 
6279
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6280
  g_assert_cmpint(epoll_fd, >=, 0);
 
6281
  __attribute__((cleanup(string_set_clear)))
 
6282
    string_set cancelled_filenames = {};
 
6283
 
 
6284
  g_assert_false(assert_add_existing_questions_to_devnull
 
6285
                 (queue,
 
6286
                  epoll_fd,
 
6287
                  (buffer[]){{}}, /* password */
 
6288
                  &cancelled_filenames,
 
6289
                  (mono_microsecs[]){0}, /* current_time */
 
6290
                  (bool[]){false},       /* mandos_client_exited */
 
6291
                  (bool[]){false},       /* password_is_read */
 
6292
                  "/nonexistent"));      /* dirname */
 
6293
 
 
6294
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6295
}
 
6296
 
 
6297
static
 
6298
bool assert_add_existing_questions_to_devnull(task_queue
 
6299
                                              *const queue,
 
6300
                                              const int
 
6301
                                              epoll_fd,
 
6302
                                              buffer *const
 
6303
                                              password,
 
6304
                                              string_set
 
6305
                                              *cancelled_filenames,
 
6306
                                              const mono_microsecs
 
6307
                                              *const current_time,
 
6308
                                              bool *const
 
6309
                                              mandos_client_exited,
 
6310
                                              bool *const
 
6311
                                              password_is_read,
 
6312
                                              const char *const
 
6313
                                              dirname){
 
6314
  __attribute__((cleanup(cleanup_close)))
 
6315
    const int devnull_fd = open("/dev/null",
 
6316
                                O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
6317
  g_assert_cmpint(devnull_fd, >=, 0);
 
6318
  __attribute__((cleanup(cleanup_close)))
 
6319
    const int real_stderr_fd = dup(STDERR_FILENO);
 
6320
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
6321
  dup2(devnull_fd, STDERR_FILENO);
 
6322
  const bool ret = add_existing_questions(queue, epoll_fd, password,
 
6323
                                          cancelled_filenames,
 
6324
                                          current_time,
 
6325
                                          mandos_client_exited,
 
6326
                                          password_is_read, dirname);
 
6327
  dup2(real_stderr_fd, STDERR_FILENO);
 
6328
  return ret;
 
6329
}
 
6330
 
 
6331
static
 
6332
void test_add_existing_questions_no_questions(__attribute__((unused))
 
6333
                                              test_fixture *fixture,
 
6334
                                              __attribute__((unused))
 
6335
                                              gconstpointer
 
6336
                                              user_data){
 
6337
  __attribute__((cleanup(cleanup_queue)))
 
6338
    task_queue *queue = create_queue();
 
6339
  g_assert_nonnull(queue);
 
6340
  __attribute__((cleanup(cleanup_close)))
 
6341
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6342
  g_assert_cmpint(epoll_fd, >=, 0);
 
6343
  __attribute__((cleanup(string_set_clear)))
 
6344
    string_set cancelled_filenames = {};
 
6345
  __attribute__((cleanup(cleanup_string)))
 
6346
    char *tempdir = make_temporary_directory();
 
6347
  g_assert_nonnull(tempdir);
 
6348
 
 
6349
  g_assert_false(assert_add_existing_questions_to_devnull
 
6350
                 (queue,
 
6351
                  epoll_fd,
 
6352
                  (buffer[]){{}}, /* password */
 
6353
                  &cancelled_filenames,
 
6354
                  (mono_microsecs[]){0}, /* current_time */
 
6355
                  (bool[]){false},       /* mandos_client_exited */
 
6356
                  (bool[]){false},       /* password_is_read */
 
6357
                  tempdir));
 
6358
 
 
6359
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6360
 
 
6361
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6362
}
 
6363
 
 
6364
static char *make_question_file_in_directory(const char *const);
 
6365
 
 
6366
static
 
6367
void test_add_existing_questions_one_question(__attribute__((unused))
 
6368
                                              test_fixture *fixture,
 
6369
                                              __attribute__((unused))
 
6370
                                              gconstpointer
 
6371
                                              user_data){
 
6372
  __attribute__((cleanup(cleanup_queue)))
 
6373
    task_queue *queue = create_queue();
 
6374
  g_assert_nonnull(queue);
 
6375
  __attribute__((cleanup(cleanup_close)))
 
6376
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6377
  g_assert_cmpint(epoll_fd, >=, 0);
 
6378
  __attribute__((cleanup(cleanup_buffer)))
 
6379
    buffer password = {};
 
6380
  __attribute__((cleanup(string_set_clear)))
 
6381
    string_set cancelled_filenames = {};
 
6382
  const mono_microsecs current_time = 0;
 
6383
  bool mandos_client_exited = false;
 
6384
  bool password_is_read = false;
 
6385
  __attribute__((cleanup(cleanup_string)))
 
6386
    char *tempdir = make_temporary_directory();
 
6387
  g_assert_nonnull(tempdir);
 
6388
  __attribute__((cleanup(cleanup_string)))
 
6389
    char *question_filename
 
6390
    = make_question_file_in_directory(tempdir);
 
6391
  g_assert_nonnull(question_filename);
 
6392
 
 
6393
  g_assert_true(assert_add_existing_questions_to_devnull
 
6394
                (queue,
 
6395
                 epoll_fd,
 
6396
                 &password,
 
6397
                 &cancelled_filenames,
 
6398
                 &current_time,
 
6399
                 &mandos_client_exited,
 
6400
                 &password_is_read,
 
6401
                 tempdir));
 
6402
 
 
6403
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6404
 
 
6405
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
6406
        .func=open_and_parse_question,
 
6407
        .epoll_fd=epoll_fd,
 
6408
        .filename=question_filename,
 
6409
        .question_filename=question_filename,
 
6410
        .password=&password,
 
6411
        .cancelled_filenames=&cancelled_filenames,
 
6412
        .current_time=&current_time,
 
6413
        .mandos_client_exited=&mandos_client_exited,
 
6414
        .password_is_read=&password_is_read,
 
6415
      }));
 
6416
 
 
6417
  g_assert_true(queue->next_run == 1);
 
6418
 
 
6419
  g_assert_cmpint(unlink(question_filename), ==, 0);
 
6420
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6421
}
 
6422
 
 
6423
static char *make_question_file_in_directory(const char
 
6424
                                             *const dir){
 
6425
  return make_temporary_prefixed_file_in_directory("ask.", dir);
 
6426
}
 
6427
 
 
6428
static
 
6429
void test_add_existing_questions_two_questions(__attribute__((unused))
 
6430
                                               test_fixture *fixture,
 
6431
                                               __attribute__((unused))
 
6432
                                               gconstpointer
 
6433
                                               user_data){
 
6434
  __attribute__((cleanup(cleanup_queue)))
 
6435
    task_queue *queue = create_queue();
 
6436
  g_assert_nonnull(queue);
 
6437
  __attribute__((cleanup(cleanup_close)))
 
6438
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6439
  g_assert_cmpint(epoll_fd, >=, 0);
 
6440
  __attribute__((cleanup(cleanup_buffer)))
 
6441
    buffer password = {};
 
6442
  __attribute__((cleanup(string_set_clear)))
 
6443
    string_set cancelled_filenames = {};
 
6444
  const mono_microsecs current_time = 0;
 
6445
  bool mandos_client_exited = false;
 
6446
  bool password_is_read = false;
 
6447
  __attribute__((cleanup(cleanup_string)))
 
6448
    char *tempdir = make_temporary_directory();
 
6449
  g_assert_nonnull(tempdir);
 
6450
  __attribute__((cleanup(cleanup_string)))
 
6451
    char *question_filename1
 
6452
    = make_question_file_in_directory(tempdir);
 
6453
  g_assert_nonnull(question_filename1);
 
6454
  __attribute__((cleanup(cleanup_string)))
 
6455
    char *question_filename2
 
6456
    = make_question_file_in_directory(tempdir);
 
6457
  g_assert_nonnull(question_filename2);
 
6458
 
 
6459
  g_assert_true(assert_add_existing_questions_to_devnull
 
6460
                (queue,
 
6461
                 epoll_fd,
 
6462
                 &password,
 
6463
                 &cancelled_filenames,
 
6464
                 &current_time,
 
6465
                 &mandos_client_exited,
 
6466
                 &password_is_read,
 
6467
                 tempdir));
 
6468
 
 
6469
  g_assert_cmpuint((unsigned int)queue->length, ==, 2);
 
6470
 
 
6471
  g_assert_true(queue->next_run == 1);
 
6472
 
 
6473
  __attribute__((cleanup(string_set_clear)))
 
6474
    string_set seen_questions = {};
 
6475
 
 
6476
  bool queue_contains_question_opener(char *const question_filename){
 
6477
    return(find_matching_task(queue, (task_context){
 
6478
          .func=open_and_parse_question,
 
6479
          .epoll_fd=epoll_fd,
 
6480
          .question_filename=question_filename,
 
6481
          .password=&password,
 
6482
          .cancelled_filenames=&cancelled_filenames,
 
6483
          .current_time=&current_time,
 
6484
          .mandos_client_exited=&mandos_client_exited,
 
6485
          .password_is_read=&password_is_read,
 
6486
        }) != NULL);
 
6487
  }
 
6488
 
 
6489
  g_assert_true(queue_contains_question_opener(question_filename1));
 
6490
  g_assert_true(queue_contains_question_opener(question_filename2));
 
6491
 
 
6492
  g_assert_true(queue->next_run == 1);
 
6493
 
 
6494
  g_assert_cmpint(unlink(question_filename1), ==, 0);
 
6495
  g_assert_cmpint(unlink(question_filename2), ==, 0);
 
6496
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6497
}
 
6498
 
 
6499
static void
 
6500
test_add_existing_questions_non_questions(__attribute__((unused))
 
6501
                                          test_fixture *fixture,
 
6502
                                          __attribute__((unused))
 
6503
                                          gconstpointer user_data){
 
6504
  __attribute__((cleanup(cleanup_queue)))
 
6505
    task_queue *queue = create_queue();
 
6506
  g_assert_nonnull(queue);
 
6507
  __attribute__((cleanup(cleanup_close)))
 
6508
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6509
  g_assert_cmpint(epoll_fd, >=, 0);
 
6510
  __attribute__((cleanup(string_set_clear)))
 
6511
    string_set cancelled_filenames = {};
 
6512
  __attribute__((cleanup(cleanup_string)))
 
6513
    char *tempdir = make_temporary_directory();
 
6514
  g_assert_nonnull(tempdir);
 
6515
  __attribute__((cleanup(cleanup_string)))
 
6516
    char *question_filename1
 
6517
    = make_temporary_file_in_directory(tempdir);
 
6518
  g_assert_nonnull(question_filename1);
 
6519
  __attribute__((cleanup(cleanup_string)))
 
6520
    char *question_filename2
 
6521
    = make_temporary_file_in_directory(tempdir);
 
6522
  g_assert_nonnull(question_filename2);
 
6523
 
 
6524
  g_assert_false(assert_add_existing_questions_to_devnull
 
6525
                 (queue,
 
6526
                  epoll_fd,
 
6527
                  (buffer[]){{}}, /* password */
 
6528
                  &cancelled_filenames,
 
6529
                  (mono_microsecs[]){0}, /* current_time */
 
6530
                  (bool[]){false},       /* mandos_client_exited */
 
6531
                  (bool[]){false},       /* password_is_read */
 
6532
                  tempdir));
 
6533
 
 
6534
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6535
 
 
6536
  g_assert_cmpint(unlink(question_filename1), ==, 0);
 
6537
  g_assert_cmpint(unlink(question_filename2), ==, 0);
 
6538
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6539
}
 
6540
 
 
6541
static void
 
6542
test_add_existing_questions_both_types(__attribute__((unused))
 
6543
                                       test_fixture *fixture,
 
6544
                                       __attribute__((unused))
 
6545
                                       gconstpointer user_data){
 
6546
  __attribute__((cleanup(cleanup_queue)))
 
6547
    task_queue *queue = create_queue();
 
6548
  g_assert_nonnull(queue);
 
6549
  __attribute__((cleanup(cleanup_close)))
 
6550
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6551
  g_assert_cmpint(epoll_fd, >=, 0);
 
6552
  __attribute__((cleanup(cleanup_buffer)))
 
6553
    buffer password = {};
 
6554
  __attribute__((cleanup(string_set_clear)))
 
6555
    string_set cancelled_filenames = {};
 
6556
  const mono_microsecs current_time = 0;
 
6557
  bool mandos_client_exited = false;
 
6558
  bool password_is_read = false;
 
6559
  __attribute__((cleanup(cleanup_string)))
 
6560
    char *tempdir = make_temporary_directory();
 
6561
  g_assert_nonnull(tempdir);
 
6562
  __attribute__((cleanup(cleanup_string)))
 
6563
    char *tempfilename1 = make_temporary_file_in_directory(tempdir);
 
6564
  g_assert_nonnull(tempfilename1);
 
6565
  __attribute__((cleanup(cleanup_string)))
 
6566
    char *tempfilename2 = make_temporary_file_in_directory(tempdir);
 
6567
  g_assert_nonnull(tempfilename2);
 
6568
  __attribute__((cleanup(cleanup_string)))
 
6569
    char *question_filename
 
6570
    = make_question_file_in_directory(tempdir);
 
6571
  g_assert_nonnull(question_filename);
 
6572
 
 
6573
  g_assert_true(assert_add_existing_questions_to_devnull
 
6574
                (queue,
 
6575
                 epoll_fd,
 
6576
                 &password,
 
6577
                 &cancelled_filenames,
 
6578
                 &current_time,
 
6579
                 &mandos_client_exited,
 
6580
                 &password_is_read,
 
6581
                 tempdir));
 
6582
 
 
6583
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6584
 
 
6585
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
6586
        .func=open_and_parse_question,
 
6587
        .epoll_fd=epoll_fd,
 
6588
        .filename=question_filename,
 
6589
        .question_filename=question_filename,
 
6590
        .password=&password,
 
6591
        .cancelled_filenames=&cancelled_filenames,
 
6592
        .current_time=&current_time,
 
6593
        .mandos_client_exited=&mandos_client_exited,
 
6594
        .password_is_read=&password_is_read,
 
6595
      }));
 
6596
 
 
6597
  g_assert_true(queue->next_run == 1);
 
6598
 
 
6599
  g_assert_cmpint(unlink(tempfilename1), ==, 0);
 
6600
  g_assert_cmpint(unlink(tempfilename2), ==, 0);
 
6601
  g_assert_cmpint(unlink(question_filename), ==, 0);
 
6602
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6603
}
 
6604
 
 
6605
static void test_wait_for_event_timeout(__attribute__((unused))
 
6606
                                        test_fixture *fixture,
 
6607
                                        __attribute__((unused))
 
6608
                                        gconstpointer user_data){
 
6609
  __attribute__((cleanup(cleanup_close)))
 
6610
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6611
  g_assert_cmpint(epoll_fd, >=, 0);
 
6612
 
 
6613
  g_assert_true(wait_for_event(epoll_fd, 1, 0));
 
6614
}
 
6615
 
 
6616
static void test_wait_for_event_event(__attribute__((unused))
 
6617
                                      test_fixture *fixture,
 
6618
                                      __attribute__((unused))
 
6619
                                      gconstpointer user_data){
 
6620
  __attribute__((cleanup(cleanup_close)))
 
6621
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6622
  g_assert_cmpint(epoll_fd, >=, 0);
 
6623
  int pipefds[2];
 
6624
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6625
  __attribute__((cleanup(cleanup_close)))
 
6626
    const int read_pipe = pipefds[0];
 
6627
  __attribute__((cleanup(cleanup_close)))
 
6628
    const int write_pipe = pipefds[1];
 
6629
  g_assert_cmpint(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, read_pipe,
 
6630
                            &(struct epoll_event)
 
6631
                            { .events=EPOLLIN | EPOLLRDHUP }), ==, 0);
 
6632
  g_assert_cmpint((int)write(write_pipe, "x", 1), ==, 1);
 
6633
 
 
6634
  g_assert_true(wait_for_event(epoll_fd, 0, 0));
 
6635
}
 
6636
 
 
6637
static void test_wait_for_event_sigchld(test_fixture *fixture,
 
6638
                                        __attribute__((unused))
 
6639
                                        gconstpointer user_data){
 
6640
  const pid_t pid = fork();
 
6641
  if(pid == 0){         /* Child */
 
6642
    if(not restore_signal_handler(&fixture->orig_sigaction)){
 
6643
      _exit(EXIT_FAILURE);
 
6644
    }
 
6645
    if(not restore_sigmask(&fixture->orig_sigmask)){
 
6646
      _exit(EXIT_FAILURE);
 
6647
    }
 
6648
    exit(EXIT_SUCCESS);
 
6649
  }
 
6650
  g_assert_true(pid != -1);
 
6651
  __attribute__((cleanup(cleanup_close)))
 
6652
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6653
  g_assert_cmpint(epoll_fd, >=, 0);
 
6654
 
 
6655
  g_assert_true(wait_for_event(epoll_fd, 0, 0));
 
6656
 
 
6657
  int status;
 
6658
  g_assert_true(waitpid(pid, &status, 0) == pid);
 
6659
  g_assert_true(WIFEXITED(status));
 
6660
  g_assert_cmpint(WEXITSTATUS(status), ==, EXIT_SUCCESS);
 
6661
}
 
6662
 
 
6663
static void test_run_queue_zeroes_next_run(__attribute__((unused))
 
6664
                                           test_fixture *fixture,
 
6665
                                           __attribute__((unused))
 
6666
                                           gconstpointer user_data){
 
6667
  __attribute__((cleanup(cleanup_queue)))
 
6668
    task_queue *queue = create_queue();
 
6669
  g_assert_nonnull(queue);
 
6670
  queue->next_run = 1;
 
6671
  __attribute__((cleanup(cleanup_close)))
 
6672
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6673
  __attribute__((cleanup(string_set_clear)))
 
6674
    string_set cancelled_filenames = {};
 
6675
  bool quit_now = false;
 
6676
 
 
6677
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6678
  g_assert_false(quit_now);
 
6679
  g_assert_cmpuint((unsigned int)queue->next_run, ==, 0);
 
6680
}
 
6681
 
 
6682
static
 
6683
void test_run_queue_clears_cancelled_filenames(__attribute__((unused))
 
6684
                                               test_fixture *fixture,
 
6685
                                               __attribute__((unused))
 
6686
                                               gconstpointer
 
6687
                                               user_data){
 
6688
  __attribute__((cleanup(cleanup_queue)))
 
6689
    task_queue *queue = create_queue();
 
6690
  g_assert_nonnull(queue);
 
6691
  __attribute__((cleanup(string_set_clear)))
 
6692
    string_set cancelled_filenames = {};
 
6693
  bool quit_now = false;
 
6694
  const char question_filename[] = "/nonexistent/question_filename";
 
6695
  g_assert_true(string_set_add(&cancelled_filenames,
 
6696
                               question_filename));
 
6697
 
 
6698
  g_assert_true(add_to_queue(queue,
 
6699
                             (task_context){ .func=dummy_func }));
 
6700
 
 
6701
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6702
  g_assert_false(quit_now);
 
6703
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6704
  g_assert_false(string_set_contains(cancelled_filenames,
 
6705
                                     question_filename));
 
6706
}
 
6707
 
 
6708
static
 
6709
void test_run_queue_skips_cancelled_filenames(__attribute__((unused))
 
6710
                                              test_fixture *fixture,
 
6711
                                              __attribute__((unused))
 
6712
                                              gconstpointer
 
6713
                                              user_data){
 
6714
  __attribute__((cleanup(cleanup_queue)))
 
6715
    task_queue *queue = create_queue();
 
6716
  g_assert_nonnull(queue);
 
6717
  __attribute__((cleanup(string_set_clear)))
 
6718
    string_set cancelled_filenames = {};
 
6719
  bool quit_now = false;
 
6720
  int pipefds[2];
 
6721
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6722
  __attribute__((cleanup(cleanup_close)))
 
6723
    const int read_pipe = pipefds[0];
 
6724
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
6725
  const char question_filename[] = "/nonexistent/question_filename";
 
6726
  g_assert_true(string_set_add(&cancelled_filenames,
 
6727
                               question_filename));
 
6728
  __attribute__((nonnull))
 
6729
    void quit_func(const task_context task,
 
6730
                   __attribute__((unused)) task_queue *const q){
 
6731
    g_assert_nonnull(task.quit_now);
 
6732
    *task.quit_now = true;
 
6733
  }
 
6734
  task_context task = {
 
6735
    .func=quit_func,
 
6736
    .question_filename=strdup(question_filename),
 
6737
    .quit_now=&quit_now,
 
6738
    .fd=read_pipe,
 
6739
  };
 
6740
  g_assert_nonnull(task.question_filename);
 
6741
 
 
6742
  g_assert_true(add_to_queue(queue, task));
 
6743
 
 
6744
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6745
  g_assert_false(quit_now);
 
6746
 
 
6747
  /* read_pipe should be closed already */
 
6748
  errno = 0;
 
6749
  bool read_pipe_closed = (close(read_pipe) == -1);
 
6750
  read_pipe_closed &= (errno == EBADF);
 
6751
  g_assert_true(read_pipe_closed);
 
6752
}
 
6753
 
 
6754
static void test_run_queue_one_task(__attribute__((unused))
 
6755
                                    test_fixture *fixture,
 
6756
                                    __attribute__((unused))
 
6757
                                    gconstpointer user_data){
 
6758
  __attribute__((cleanup(cleanup_queue)))
 
6759
    task_queue *queue = create_queue();
 
6760
  g_assert_nonnull(queue);
 
6761
  __attribute__((cleanup(string_set_clear)))
 
6762
    string_set cancelled_filenames = {};
 
6763
  bool quit_now = false;
 
6764
 
 
6765
  __attribute__((nonnull))
 
6766
    void next_run_func(__attribute__((unused))
 
6767
                       const task_context task,
 
6768
                       task_queue *const q){
 
6769
    q->next_run = 1;
 
6770
  }
 
6771
 
 
6772
  task_context task = {
 
6773
    .func=next_run_func,
 
6774
  };
 
6775
  g_assert_true(add_to_queue(queue, task));
 
6776
 
 
6777
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6778
  g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
 
6779
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6780
}
 
6781
 
 
6782
static void test_run_queue_two_tasks(__attribute__((unused))
 
6783
                                     test_fixture *fixture,
 
6784
                                     __attribute__((unused))
 
6785
                                     gconstpointer user_data){
 
6786
  __attribute__((cleanup(cleanup_queue)))
 
6787
    task_queue *queue = create_queue();
 
6788
  g_assert_nonnull(queue);
 
6789
  queue->next_run = 1;
 
6790
  __attribute__((cleanup(string_set_clear)))
 
6791
    string_set cancelled_filenames = {};
 
6792
  bool quit_now = false;
 
6793
  bool mandos_client_exited = false;
 
6794
 
 
6795
  __attribute__((nonnull))
 
6796
    void next_run_func(__attribute__((unused))
 
6797
                       const task_context task,
 
6798
                       task_queue *const q){
 
6799
    q->next_run = 1;
 
6800
  }
 
6801
 
 
6802
  __attribute__((nonnull))
 
6803
    void exited_func(const task_context task,
 
6804
                     __attribute__((unused)) task_queue *const q){
 
6805
    *task.mandos_client_exited = true;
 
6806
  }
 
6807
 
 
6808
  task_context task1 = {
 
6809
    .func=next_run_func,
 
6810
  };
 
6811
  g_assert_true(add_to_queue(queue, task1));
 
6812
 
 
6813
  task_context task2 = {
 
6814
    .func=exited_func,
 
6815
    .mandos_client_exited=&mandos_client_exited,
 
6816
  };
 
6817
  g_assert_true(add_to_queue(queue, task2));
 
6818
 
 
6819
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6820
  g_assert_false(quit_now);
 
6821
  g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
 
6822
  g_assert_true(mandos_client_exited);
 
6823
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6824
}
 
6825
 
 
6826
static void test_run_queue_two_tasks_quit(__attribute__((unused))
 
6827
                                          test_fixture *fixture,
 
6828
                                          __attribute__((unused))
 
6829
                                          gconstpointer user_data){
 
6830
  __attribute__((cleanup(cleanup_queue)))
 
6831
    task_queue *queue = create_queue();
 
6832
  g_assert_nonnull(queue);
 
6833
  __attribute__((cleanup(string_set_clear)))
 
6834
    string_set cancelled_filenames = {};
 
6835
  bool quit_now = false;
 
6836
  bool mandos_client_exited = false;
 
6837
  bool password_is_read = false;
 
6838
 
 
6839
  __attribute__((nonnull))
 
6840
    void set_exited_func(const task_context task,
 
6841
                         __attribute__((unused)) task_queue *const q){
 
6842
    *task.mandos_client_exited = true;
 
6843
    *task.quit_now = true;
 
6844
  }
 
6845
  task_context task1 = {
 
6846
    .func=set_exited_func,
 
6847
    .quit_now=&quit_now,
 
6848
    .mandos_client_exited=&mandos_client_exited,
 
6849
  };
 
6850
  g_assert_true(add_to_queue(queue, task1));
 
6851
 
 
6852
  __attribute__((nonnull))
 
6853
    void set_read_func(const task_context task,
 
6854
                       __attribute__((unused)) task_queue *const q){
 
6855
    *task.quit_now = true;
 
6856
    *task.password_is_read = true;
 
6857
  }
 
6858
  task_context task2 = {
 
6859
    .func=set_read_func,
 
6860
    .quit_now=&quit_now,
 
6861
    .password_is_read=&password_is_read,
 
6862
  };
 
6863
  g_assert_true(add_to_queue(queue, task2));
 
6864
 
 
6865
  g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6866
  g_assert_true(quit_now);
 
6867
  g_assert_true(mandos_client_exited xor password_is_read);
 
6868
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6869
}
 
6870
 
 
6871
static void test_run_queue_two_tasks_cleanup(__attribute__((unused))
 
6872
                                             test_fixture *fixture,
 
6873
                                             __attribute__((unused))
 
6874
                                             gconstpointer user_data){
 
6875
  __attribute__((cleanup(cleanup_queue)))
 
6876
    task_queue *queue = create_queue();
 
6877
  g_assert_nonnull(queue);
 
6878
  __attribute__((cleanup(string_set_clear)))
 
6879
    string_set cancelled_filenames = {};
 
6880
  int pipefds[2];
 
6881
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6882
  __attribute__((cleanup(cleanup_close)))
 
6883
    const int read_pipe = pipefds[0];
 
6884
  __attribute__((cleanup(cleanup_close)))
 
6885
    const int write_pipe = pipefds[1];
 
6886
  bool quit_now = false;
 
6887
 
 
6888
  __attribute__((nonnull))
 
6889
    void read_func(const task_context task,
 
6890
                   __attribute__((unused)) task_queue *const q){
 
6891
    *task.quit_now = true;
 
6892
  }
 
6893
  task_context task1 = {
 
6894
    .func=read_func,
 
6895
    .quit_now=&quit_now,
 
6896
    .fd=read_pipe,
 
6897
  };
 
6898
  g_assert_true(add_to_queue(queue, task1));
 
6899
 
 
6900
  __attribute__((nonnull))
 
6901
    void write_func(const task_context task,
 
6902
                    __attribute__((unused)) task_queue *const q){
 
6903
    *task.quit_now = true;
 
6904
  }
 
6905
  task_context task2 = {
 
6906
    .func=write_func,
 
6907
    .quit_now=&quit_now,
 
6908
    .fd=write_pipe,
 
6909
  };
 
6910
  g_assert_true(add_to_queue(queue, task2));
 
6911
 
 
6912
  g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6913
  g_assert_true(quit_now);
 
6914
 
 
6915
  /* Either read_pipe or write_pipe should be closed already */
 
6916
  errno = 0;
 
6917
  bool close_read_pipe = (close(read_pipe) == -1);
 
6918
  close_read_pipe &= (errno == EBADF);
 
6919
  errno = 0;
 
6920
  bool close_write_pipe = (close(write_pipe) == -1);
 
6921
  close_write_pipe &= (errno == EBADF);
 
6922
  g_assert_true(close_read_pipe xor close_write_pipe);
 
6923
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6924
}
 
6925
 
 
6926
static void test_setup_signal_handler(__attribute__((unused))
 
6927
                                      test_fixture *fixture,
 
6928
                                      __attribute__((unused))
 
6929
                                      gconstpointer user_data){
 
6930
  /* Save current SIGCHLD action, whatever it is */
 
6931
  struct sigaction expected_sigchld_action;
 
6932
  g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
 
6933
                  ==, 0);
 
6934
 
 
6935
  /* Act; i.e. run the setup_signal_handler() function */
 
6936
  struct sigaction actual_old_sigchld_action;
 
6937
  g_assert_true(setup_signal_handler(&actual_old_sigchld_action));
 
6938
 
 
6939
  /* Check that the function correctly set "actual_old_sigchld_action"
 
6940
     to the same values as the previously saved
 
6941
     "expected_sigchld_action" */
 
6942
  /* Check member sa_handler */
 
6943
  g_assert_true(actual_old_sigchld_action.sa_handler
 
6944
                == expected_sigchld_action.sa_handler);
 
6945
  /* Check member sa_mask */
 
6946
  for(int signum = 1; signum < NSIG; signum++){
 
6947
    const int expected_old_block_state
 
6948
      = sigismember(&expected_sigchld_action.sa_mask, signum);
 
6949
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
6950
    const int actual_old_block_state
 
6951
      = sigismember(&actual_old_sigchld_action.sa_mask, signum);
 
6952
    g_assert_cmpint(actual_old_block_state, >=, 0);
 
6953
    g_assert_cmpint(actual_old_block_state,
 
6954
                    ==, expected_old_block_state);
 
6955
  }
 
6956
  /* Check member sa_flags */
 
6957
  g_assert_true((actual_old_sigchld_action.sa_flags
 
6958
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
6959
                == (expected_sigchld_action.sa_flags
 
6960
                    & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
 
6961
 
 
6962
  /* Retrieve the current signal handler for SIGCHLD as set by
 
6963
     setup_signal_handler() */
 
6964
  struct sigaction actual_new_sigchld_action;
 
6965
  g_assert_cmpint(sigaction(SIGCHLD, NULL,
 
6966
                            &actual_new_sigchld_action), ==, 0);
 
6967
  /* Check that the signal handler (member sa_handler) is correctly
 
6968
     set to the "handle_sigchld" function */
 
6969
  g_assert_true(actual_new_sigchld_action.sa_handler != SIG_DFL);
 
6970
  g_assert_true(actual_new_sigchld_action.sa_handler != SIG_IGN);
 
6971
  g_assert_true(actual_new_sigchld_action.sa_handler
 
6972
                == handle_sigchld);
 
6973
  /* Check (in member sa_mask) that at least a handful of signals are
 
6974
     actually blocked during the signal handler */
 
6975
  for(int signum = 1; signum < NSIG; signum++){
 
6976
    int actual_new_block_state;
 
6977
    switch(signum){
 
6978
    case SIGTERM:
 
6979
    case SIGINT:
 
6980
    case SIGQUIT:
 
6981
    case SIGHUP:
 
6982
      actual_new_block_state
 
6983
        = sigismember(&actual_new_sigchld_action.sa_mask, signum);
 
6984
      g_assert_cmpint(actual_new_block_state, ==, 1);
 
6985
      continue;
 
6986
    case SIGKILL:               /* non-blockable */
 
6987
    case SIGSTOP:               /* non-blockable */
 
6988
    case SIGCHLD:               /* always blocked */
 
6989
    default:
 
6990
      continue;
 
6991
    }
 
6992
  }
 
6993
  /* Check member sa_flags */
 
6994
  g_assert_true((actual_new_sigchld_action.sa_flags
 
6995
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
6996
                == (SA_NOCLDSTOP | SA_RESTART));
 
6997
 
 
6998
  /* Restore signal handler */
 
6999
  g_assert_cmpint(sigaction(SIGCHLD, &expected_sigchld_action, NULL),
 
7000
                  ==, 0);
 
7001
}
 
7002
 
 
7003
static void test_restore_signal_handler(__attribute__((unused))
 
7004
                                        test_fixture *fixture,
 
7005
                                        __attribute__((unused))
 
7006
                                        gconstpointer user_data){
 
7007
  /* Save current SIGCHLD action, whatever it is */
 
7008
  struct sigaction expected_sigchld_action;
 
7009
  g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
 
7010
                  ==, 0);
 
7011
  /* Since we haven't established a signal handler yet, there should
 
7012
     not be one established.  But another test may have relied on
 
7013
     restore_signal_handler() to restore the signal handler, and if
 
7014
     restore_signal_handler() is buggy (which we should be prepared
 
7015
     for in this test) the signal handler may not have been restored
 
7016
     properly; check for this: */
 
7017
  g_assert_true(expected_sigchld_action.sa_handler != handle_sigchld);
 
7018
 
 
7019
  /* Establish a signal handler */
 
7020
  struct sigaction sigchld_action = {
 
7021
    .sa_handler=handle_sigchld,
 
7022
    .sa_flags=SA_RESTART | SA_NOCLDSTOP,
 
7023
  };
 
7024
  g_assert_cmpint(sigfillset(&sigchld_action.sa_mask), ==, 0);
 
7025
  g_assert_cmpint(sigaction(SIGCHLD, &sigchld_action, NULL), ==, 0);
 
7026
 
 
7027
  /* Act; i.e. run the restore_signal_handler() function */
 
7028
  g_assert_true(restore_signal_handler(&expected_sigchld_action));
 
7029
 
 
7030
  /* Retrieve the restored signal handler data */
 
7031
  struct sigaction actual_restored_sigchld_action;
 
7032
  g_assert_cmpint(sigaction(SIGCHLD, NULL,
 
7033
                            &actual_restored_sigchld_action), ==, 0);
 
7034
 
 
7035
  /* Check that the function correctly restored the signal action, as
 
7036
     saved in "actual_restored_sigchld_action", to the same values as
 
7037
     the previously saved "expected_sigchld_action" */
 
7038
  /* Check member sa_handler */
 
7039
  g_assert_true(actual_restored_sigchld_action.sa_handler
 
7040
                == expected_sigchld_action.sa_handler);
 
7041
  /* Check member sa_mask */
 
7042
  for(int signum = 1; signum < NSIG; signum++){
 
7043
    const int expected_old_block_state
 
7044
      = sigismember(&expected_sigchld_action.sa_mask, signum);
 
7045
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
7046
    const int actual_restored_block_state
 
7047
      = sigismember(&actual_restored_sigchld_action.sa_mask, signum);
 
7048
    g_assert_cmpint(actual_restored_block_state, >=, 0);
 
7049
    g_assert_cmpint(actual_restored_block_state,
 
7050
                    ==, expected_old_block_state);
 
7051
  }
 
7052
  /* Check member sa_flags */
 
7053
  g_assert_true((actual_restored_sigchld_action.sa_flags
 
7054
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
7055
                == (expected_sigchld_action.sa_flags
 
7056
                    & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
 
7057
}
 
7058
 
 
7059
static void test_block_sigchld(__attribute__((unused))
 
7060
                               test_fixture *fixture,
 
7061
                               __attribute__((unused))
 
7062
                               gconstpointer user_data){
 
7063
  /* Save original signal mask */
 
7064
  sigset_t expected_sigmask;
 
7065
  g_assert_cmpint(pthread_sigmask(-1, NULL, &expected_sigmask),
 
7066
                  ==, 0);
 
7067
 
 
7068
  /* Make sure SIGCHLD is unblocked for this test */
 
7069
  sigset_t sigchld_sigmask;
 
7070
  g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
 
7071
  g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
 
7072
  g_assert_cmpint(pthread_sigmask(SIG_UNBLOCK, &sigchld_sigmask,
 
7073
                                  NULL), ==, 0);
 
7074
 
 
7075
  /* Act; i.e. run the block_sigchld() function */
 
7076
  sigset_t actual_old_sigmask;
 
7077
  g_assert_true(block_sigchld(&actual_old_sigmask));
 
7078
 
 
7079
  /* Check the actual_old_sigmask; it should be the same as the
 
7080
     previously saved signal mask "expected_sigmask". */
 
7081
  for(int signum = 1; signum < NSIG; signum++){
 
7082
    const int expected_old_block_state
 
7083
      = sigismember(&expected_sigmask, signum);
 
7084
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
7085
    const int actual_old_block_state
 
7086
      = sigismember(&actual_old_sigmask, signum);
 
7087
    g_assert_cmpint(actual_old_block_state, >=, 0);
 
7088
    g_assert_cmpint(actual_old_block_state,
 
7089
                    ==, expected_old_block_state);
 
7090
  }
 
7091
 
 
7092
  /* Retrieve the newly set signal mask */
 
7093
  sigset_t actual_sigmask;
 
7094
  g_assert_cmpint(pthread_sigmask(-1, NULL, &actual_sigmask), ==, 0);
 
7095
 
 
7096
  /* SIGCHLD should be blocked */
 
7097
  g_assert_cmpint(sigismember(&actual_sigmask, SIGCHLD), ==, 1);
 
7098
 
 
7099
  /* Restore signal mask */
 
7100
  g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &expected_sigmask,
 
7101
                                  NULL), ==, 0);
 
7102
}
 
7103
 
 
7104
static void test_restore_sigmask(__attribute__((unused))
 
7105
                                 test_fixture *fixture,
 
7106
                                 __attribute__((unused))
 
7107
                                 gconstpointer user_data){
 
7108
  /* Save original signal mask */
 
7109
  sigset_t orig_sigmask;
 
7110
  g_assert_cmpint(pthread_sigmask(-1, NULL, &orig_sigmask), ==, 0);
 
7111
 
 
7112
  /* Make sure SIGCHLD is blocked for this test */
 
7113
  sigset_t sigchld_sigmask;
 
7114
  g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
 
7115
  g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
 
7116
  g_assert_cmpint(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask,
 
7117
                                  NULL), ==, 0);
 
7118
 
 
7119
  /* Act; i.e. run the restore_sigmask() function */
 
7120
  g_assert_true(restore_sigmask(&orig_sigmask));
 
7121
 
 
7122
  /* Retrieve the newly restored signal mask */
 
7123
  sigset_t restored_sigmask;
 
7124
  g_assert_cmpint(pthread_sigmask(-1, NULL, &restored_sigmask),
 
7125
                  ==, 0);
 
7126
 
 
7127
  /* Check the restored_sigmask; it should be the same as the
 
7128
     previously saved signal mask "orig_sigmask". */
 
7129
  for(int signum = 1; signum < NSIG; signum++){
 
7130
    const int orig_block_state = sigismember(&orig_sigmask, signum);
 
7131
    g_assert_cmpint(orig_block_state, >=, 0);
 
7132
    const int restored_block_state = sigismember(&restored_sigmask,
 
7133
                                                 signum);
 
7134
    g_assert_cmpint(restored_block_state, >=, 0);
 
7135
    g_assert_cmpint(restored_block_state, ==, orig_block_state);
 
7136
  }
 
7137
 
 
7138
  /* Restore signal mask */
 
7139
  g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &orig_sigmask,
 
7140
                                  NULL), ==, 0);
 
7141
}
 
7142
 
 
7143
static void test_parse_arguments_noargs(__attribute__((unused))
 
7144
                                        test_fixture *fixture,
 
7145
                                        __attribute__((unused))
 
7146
                                        gconstpointer user_data){
 
7147
  char *argv[] = {
 
7148
    strdup("prgname"),
 
7149
    NULL };
 
7150
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7151
 
 
7152
  char *agent_directory = NULL;
 
7153
  char *helper_directory = NULL;
 
7154
  uid_t user = 0;
 
7155
  gid_t group = 0;
 
7156
  char *mandos_argz = NULL;
 
7157
  size_t mandos_argz_length = 0;
 
7158
 
 
7159
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7160
                                &helper_directory, &user, &group,
 
7161
                                &mandos_argz, &mandos_argz_length));
 
7162
  g_assert_null(agent_directory);
 
7163
  g_assert_null(helper_directory);
 
7164
  g_assert_true(user == 0);
 
7165
  g_assert_true(group == 0);
 
7166
  g_assert_null(mandos_argz);
 
7167
  g_assert_true(mandos_argz_length == 0);
 
7168
 
 
7169
  for(char **arg = argv; *arg != NULL; arg++){
 
7170
    free(*arg);
 
7171
  }
 
7172
}
 
7173
 
 
7174
__attribute__((nonnull))
 
7175
static bool parse_arguments_devnull(int argc, char *argv[],
 
7176
                                    const bool exit_failure,
 
7177
                                    char **agent_directory,
 
7178
                                    char **helper_directory,
 
7179
                                    uid_t *const user,
 
7180
                                    gid_t *const group,
 
7181
                                    char **mandos_argz,
 
7182
                                    size_t *mandos_argz_length){
 
7183
 
 
7184
  FILE *real_stderr = stderr;
 
7185
  FILE *devnull = fopen("/dev/null", "we");
 
7186
  g_assert_nonnull(devnull);
 
7187
  stderr = devnull;
 
7188
 
 
7189
  const bool ret = parse_arguments(argc, argv, exit_failure,
 
7190
                                   agent_directory,
 
7191
                                   helper_directory, user, group,
 
7192
                                   mandos_argz, mandos_argz_length);
 
7193
  const error_t saved_errno = errno;
 
7194
 
 
7195
  stderr = real_stderr;
 
7196
  g_assert_cmpint(fclose(devnull), ==, 0);
 
7197
 
 
7198
  errno = saved_errno;
 
7199
 
 
7200
  return ret;
 
7201
}
 
7202
 
 
7203
static void test_parse_arguments_invalid(__attribute__((unused))
 
7204
                                         test_fixture *fixture,
 
7205
                                         __attribute__((unused))
 
7206
                                         gconstpointer user_data){
 
7207
  char *argv[] = {
 
7208
    strdup("prgname"),
 
7209
    strdup("--invalid"),
 
7210
    NULL };
 
7211
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7212
 
 
7213
  char *agent_directory = NULL;
 
7214
  char *helper_directory = NULL;
 
7215
  uid_t user = 0;
 
7216
  gid_t group = 0;
 
7217
  char *mandos_argz = NULL;
 
7218
  size_t mandos_argz_length = 0;
 
7219
 
 
7220
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7221
                                         &agent_directory,
 
7222
                                         &helper_directory, &user,
 
7223
                                         &group, &mandos_argz,
 
7224
                                         &mandos_argz_length));
 
7225
 
 
7226
  g_assert_true(errno == EINVAL);
 
7227
  g_assert_null(agent_directory);
 
7228
  g_assert_null(helper_directory);
 
7229
  g_assert_null(mandos_argz);
 
7230
  g_assert_true(mandos_argz_length == 0);
 
7231
 
 
7232
  for(char **arg = argv; *arg != NULL; arg++){
 
7233
    free(*arg);
 
7234
  }
 
7235
}
 
7236
 
 
7237
static void test_parse_arguments_long_dir(__attribute__((unused))
 
7238
                                          test_fixture *fixture,
 
7239
                                          __attribute__((unused))
 
7240
                                          gconstpointer user_data){
 
7241
  char *argv[] = {
 
7242
    strdup("prgname"),
 
7243
    strdup("--agent-directory"),
 
7244
    strdup("/tmp"),
 
7245
    NULL };
 
7246
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7247
 
 
7248
  __attribute__((cleanup(cleanup_string)))
 
7249
    char *agent_directory = NULL;
 
7250
  char *helper_directory = NULL;
 
7251
  uid_t user = 0;
 
7252
  gid_t group = 0;
 
7253
  __attribute__((cleanup(cleanup_string)))
 
7254
    char *mandos_argz = NULL;
 
7255
  size_t mandos_argz_length = 0;
 
7256
 
 
7257
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7258
                                &helper_directory, &user, &group,
 
7259
                                &mandos_argz, &mandos_argz_length));
 
7260
 
 
7261
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7262
  g_assert_null(helper_directory);
 
7263
  g_assert_true(user == 0);
 
7264
  g_assert_true(group == 0);
 
7265
  g_assert_null(mandos_argz);
 
7266
  g_assert_true(mandos_argz_length == 0);
 
7267
 
 
7268
  for(char **arg = argv; *arg != NULL; arg++){
 
7269
    free(*arg);
 
7270
  }
 
7271
}
 
7272
 
 
7273
static void test_parse_arguments_short_dir(__attribute__((unused))
 
7274
                                           test_fixture *fixture,
 
7275
                                           __attribute__((unused))
 
7276
                                           gconstpointer user_data){
 
7277
  char *argv[] = {
 
7278
    strdup("prgname"),
 
7279
    strdup("-d"),
 
7280
    strdup("/tmp"),
 
7281
    NULL };
 
7282
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7283
 
 
7284
  __attribute__((cleanup(cleanup_string)))
 
7285
    char *agent_directory = NULL;
 
7286
  char *helper_directory = NULL;
 
7287
  uid_t user = 0;
 
7288
  gid_t group = 0;
 
7289
  __attribute__((cleanup(cleanup_string)))
 
7290
    char *mandos_argz = NULL;
 
7291
  size_t mandos_argz_length = 0;
 
7292
 
 
7293
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7294
                                &helper_directory, &user, &group,
 
7295
                                &mandos_argz, &mandos_argz_length));
 
7296
 
 
7297
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7298
  g_assert_null(helper_directory);
 
7299
  g_assert_true(user == 0);
 
7300
  g_assert_true(group == 0);
 
7301
  g_assert_null(mandos_argz);
 
7302
  g_assert_true(mandos_argz_length == 0);
 
7303
 
 
7304
  for(char **arg = argv; *arg != NULL; arg++){
 
7305
    free(*arg);
 
7306
  }
 
7307
}
 
7308
 
 
7309
static
 
7310
void test_parse_arguments_helper_directory(__attribute__((unused))
 
7311
                                           test_fixture *fixture,
 
7312
                                           __attribute__((unused))
 
7313
                                           gconstpointer user_data){
 
7314
  char *argv[] = {
 
7315
    strdup("prgname"),
 
7316
    strdup("--helper-directory"),
 
7317
    strdup("/tmp"),
 
7318
    NULL };
 
7319
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7320
 
 
7321
  char *agent_directory = NULL;
 
7322
  __attribute__((cleanup(cleanup_string)))
 
7323
    char *helper_directory = NULL;
 
7324
  uid_t user = 0;
 
7325
  gid_t group = 0;
 
7326
  __attribute__((cleanup(cleanup_string)))
 
7327
    char *mandos_argz = NULL;
 
7328
  size_t mandos_argz_length = 0;
 
7329
 
 
7330
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7331
                                &helper_directory, &user, &group,
 
7332
                                &mandos_argz, &mandos_argz_length));
 
7333
 
 
7334
  g_assert_cmpstr(helper_directory, ==, "/tmp");
 
7335
  g_assert_null(agent_directory);
 
7336
  g_assert_true(user == 0);
 
7337
  g_assert_true(group == 0);
 
7338
  g_assert_null(mandos_argz);
 
7339
  g_assert_true(mandos_argz_length == 0);
 
7340
 
 
7341
  for(char **arg = argv; *arg != NULL; arg++){
 
7342
    free(*arg);
 
7343
  }
 
7344
}
 
7345
 
 
7346
static
 
7347
void test_parse_arguments_plugin_helper_dir(__attribute__((unused))
 
7348
                                            test_fixture *fixture,
 
7349
                                            __attribute__((unused))
 
7350
                                            gconstpointer user_data){
 
7351
  char *argv[] = {
 
7352
    strdup("prgname"),
 
7353
    strdup("--plugin-helper-dir"),
 
7354
    strdup("/tmp"),
 
7355
    NULL };
 
7356
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7357
 
 
7358
  char *agent_directory = NULL;
 
7359
  __attribute__((cleanup(cleanup_string)))
 
7360
    char *helper_directory = NULL;
 
7361
  uid_t user = 0;
 
7362
  gid_t group = 0;
 
7363
  __attribute__((cleanup(cleanup_string)))
 
7364
    char *mandos_argz = NULL;
 
7365
  size_t mandos_argz_length = 0;
 
7366
 
 
7367
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7368
                                &helper_directory, &user, &group,
 
7369
                                &mandos_argz, &mandos_argz_length));
 
7370
 
 
7371
  g_assert_cmpstr(helper_directory, ==, "/tmp");
 
7372
  g_assert_null(agent_directory);
 
7373
  g_assert_true(user == 0);
 
7374
  g_assert_true(group == 0);
 
7375
  g_assert_null(mandos_argz);
 
7376
  g_assert_true(mandos_argz_length == 0);
 
7377
 
 
7378
  for(char **arg = argv; *arg != NULL; arg++){
 
7379
    free(*arg);
 
7380
  }
 
7381
}
 
7382
 
 
7383
static void test_parse_arguments_user(__attribute__((unused))
 
7384
                                      test_fixture *fixture,
 
7385
                                      __attribute__((unused))
 
7386
                                      gconstpointer user_data){
 
7387
  char *argv[] = {
 
7388
    strdup("prgname"),
 
7389
    strdup("--user"),
 
7390
    strdup("1000"),
 
7391
    NULL };
 
7392
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7393
 
 
7394
  char *agent_directory = NULL;
 
7395
  __attribute__((cleanup(cleanup_string)))
 
7396
    char *helper_directory = NULL;
 
7397
  uid_t user = 0;
 
7398
  gid_t group = 0;
 
7399
  __attribute__((cleanup(cleanup_string)))
 
7400
    char *mandos_argz = NULL;
 
7401
  size_t mandos_argz_length = 0;
 
7402
 
 
7403
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7404
                                &helper_directory, &user, &group,
 
7405
                                &mandos_argz, &mandos_argz_length));
 
7406
 
 
7407
  g_assert_null(helper_directory);
 
7408
  g_assert_null(agent_directory);
 
7409
  g_assert_cmpuint((unsigned int)user, ==, 1000);
 
7410
  g_assert_true(group == 0);
 
7411
  g_assert_null(mandos_argz);
 
7412
  g_assert_true(mandos_argz_length == 0);
 
7413
 
 
7414
  for(char **arg = argv; *arg != NULL; arg++){
 
7415
    free(*arg);
 
7416
  }
 
7417
}
 
7418
 
 
7419
static void test_parse_arguments_user_invalid(__attribute__((unused))
 
7420
                                              test_fixture *fixture,
 
7421
                                              __attribute__((unused))
 
7422
                                              gconstpointer
 
7423
                                              user_data){
 
7424
  char *argv[] = {
 
7425
    strdup("prgname"),
 
7426
    strdup("--user"),
 
7427
    strdup("invalid"),
 
7428
    NULL };
 
7429
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7430
 
 
7431
  char *agent_directory = NULL;
 
7432
  __attribute__((cleanup(cleanup_string)))
 
7433
    char *helper_directory = NULL;
 
7434
  uid_t user = 0;
 
7435
  gid_t group = 0;
 
7436
  __attribute__((cleanup(cleanup_string)))
 
7437
    char *mandos_argz = NULL;
 
7438
  size_t mandos_argz_length = 0;
 
7439
 
 
7440
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7441
                                         &agent_directory,
 
7442
                                         &helper_directory, &user,
 
7443
                                         &group, &mandos_argz,
 
7444
                                         &mandos_argz_length));
 
7445
 
 
7446
  g_assert_null(helper_directory);
 
7447
  g_assert_null(agent_directory);
 
7448
  g_assert_cmpuint((unsigned int)user, ==, 0);
 
7449
  g_assert_true(group == 0);
 
7450
  g_assert_null(mandos_argz);
 
7451
  g_assert_true(mandos_argz_length == 0);
 
7452
 
 
7453
  for(char **arg = argv; *arg != NULL; arg++){
 
7454
    free(*arg);
 
7455
  }
 
7456
}
 
7457
 
 
7458
static
 
7459
void test_parse_arguments_user_zero_invalid(__attribute__((unused))
 
7460
                                            test_fixture *fixture,
 
7461
                                            __attribute__((unused))
 
7462
                                            gconstpointer user_data){
 
7463
  char *argv[] = {
 
7464
    strdup("prgname"),
 
7465
    strdup("--user"),
 
7466
    strdup("0"),
 
7467
    NULL };
 
7468
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7469
 
 
7470
  char *agent_directory = NULL;
 
7471
  __attribute__((cleanup(cleanup_string)))
 
7472
    char *helper_directory = NULL;
 
7473
  uid_t user = 0;
 
7474
  gid_t group = 0;
 
7475
  __attribute__((cleanup(cleanup_string)))
 
7476
    char *mandos_argz = NULL;
 
7477
  size_t mandos_argz_length = 0;
 
7478
 
 
7479
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7480
                                         &agent_directory,
 
7481
                                         &helper_directory, &user,
 
7482
                                         &group, &mandos_argz,
 
7483
                                         &mandos_argz_length));
 
7484
 
 
7485
  g_assert_null(helper_directory);
 
7486
  g_assert_null(agent_directory);
 
7487
  g_assert_cmpuint((unsigned int)user, ==, 0);
 
7488
  g_assert_true(group == 0);
 
7489
  g_assert_null(mandos_argz);
 
7490
  g_assert_true(mandos_argz_length == 0);
 
7491
 
 
7492
  for(char **arg = argv; *arg != NULL; arg++){
 
7493
    free(*arg);
 
7494
  }
 
7495
}
 
7496
 
 
7497
static void test_parse_arguments_group(__attribute__((unused))
 
7498
                                       test_fixture *fixture,
 
7499
                                       __attribute__((unused))
 
7500
                                       gconstpointer user_data){
 
7501
  char *argv[] = {
 
7502
    strdup("prgname"),
 
7503
    strdup("--group"),
 
7504
    strdup("1000"),
 
7505
    NULL };
 
7506
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7507
 
 
7508
  char *agent_directory = NULL;
 
7509
  __attribute__((cleanup(cleanup_string)))
 
7510
    char *helper_directory = NULL;
 
7511
  uid_t user = 0;
 
7512
  gid_t group = 0;
 
7513
  __attribute__((cleanup(cleanup_string)))
 
7514
    char *mandos_argz = NULL;
 
7515
  size_t mandos_argz_length = 0;
 
7516
 
 
7517
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7518
                                &helper_directory, &user, &group,
 
7519
                                &mandos_argz, &mandos_argz_length));
 
7520
 
 
7521
  g_assert_null(helper_directory);
 
7522
  g_assert_null(agent_directory);
 
7523
  g_assert_true(user == 0);
 
7524
  g_assert_cmpuint((unsigned int)group, ==, 1000);
 
7525
  g_assert_null(mandos_argz);
 
7526
  g_assert_true(mandos_argz_length == 0);
 
7527
 
 
7528
  for(char **arg = argv; *arg != NULL; arg++){
 
7529
    free(*arg);
 
7530
  }
 
7531
}
 
7532
 
 
7533
static void test_parse_arguments_group_invalid(__attribute__((unused))
 
7534
                                               test_fixture *fixture,
 
7535
                                               __attribute__((unused))
 
7536
                                               gconstpointer
 
7537
                                               user_data){
 
7538
  char *argv[] = {
 
7539
    strdup("prgname"),
 
7540
    strdup("--group"),
 
7541
    strdup("invalid"),
 
7542
    NULL };
 
7543
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7544
 
 
7545
  char *agent_directory = NULL;
 
7546
  __attribute__((cleanup(cleanup_string)))
 
7547
    char *helper_directory = NULL;
 
7548
  uid_t user = 0;
 
7549
  gid_t group = 0;
 
7550
  __attribute__((cleanup(cleanup_string)))
 
7551
    char *mandos_argz = NULL;
 
7552
  size_t mandos_argz_length = 0;
 
7553
 
 
7554
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7555
                                         &agent_directory,
 
7556
                                         &helper_directory, &user,
 
7557
                                         &group, &mandos_argz,
 
7558
                                         &mandos_argz_length));
 
7559
 
 
7560
  g_assert_null(helper_directory);
 
7561
  g_assert_null(agent_directory);
 
7562
  g_assert_true(user == 0);
 
7563
  g_assert_true(group == 0);
 
7564
  g_assert_null(mandos_argz);
 
7565
  g_assert_true(mandos_argz_length == 0);
 
7566
 
 
7567
  for(char **arg = argv; *arg != NULL; arg++){
 
7568
    free(*arg);
 
7569
  }
 
7570
}
 
7571
 
 
7572
static
 
7573
void test_parse_arguments_group_zero_invalid(__attribute__((unused))
 
7574
                                             test_fixture *fixture,
 
7575
                                             __attribute__((unused))
 
7576
                                             gconstpointer user_data){
 
7577
  char *argv[] = {
 
7578
    strdup("prgname"),
 
7579
    strdup("--group"),
 
7580
    strdup("0"),
 
7581
    NULL };
 
7582
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7583
 
 
7584
  char *agent_directory = NULL;
 
7585
  __attribute__((cleanup(cleanup_string)))
 
7586
    char *helper_directory = NULL;
 
7587
  uid_t user = 0;
 
7588
  gid_t group = 0;
 
7589
  __attribute__((cleanup(cleanup_string)))
 
7590
    char *mandos_argz = NULL;
 
7591
  size_t mandos_argz_length = 0;
 
7592
 
 
7593
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7594
                                         &agent_directory,
 
7595
                                         &helper_directory, &user,
 
7596
                                         &group, &mandos_argz,
 
7597
                                         &mandos_argz_length));
 
7598
 
 
7599
  g_assert_null(helper_directory);
 
7600
  g_assert_null(agent_directory);
 
7601
  g_assert_cmpuint((unsigned int)group, ==, 0);
 
7602
  g_assert_true(group == 0);
 
7603
  g_assert_null(mandos_argz);
 
7604
  g_assert_true(mandos_argz_length == 0);
 
7605
 
 
7606
  for(char **arg = argv; *arg != NULL; arg++){
 
7607
    free(*arg);
 
7608
  }
 
7609
}
 
7610
 
 
7611
static void test_parse_arguments_mandos_noargs(__attribute__((unused))
 
7612
                                               test_fixture *fixture,
 
7613
                                               __attribute__((unused))
 
7614
                                               gconstpointer
 
7615
                                               user_data){
 
7616
  char *argv[] = {
 
7617
    strdup("prgname"),
 
7618
    strdup("mandos-client"),
 
7619
    NULL };
 
7620
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7621
 
 
7622
  __attribute__((cleanup(cleanup_string)))
 
7623
    char *agent_directory = NULL;
 
7624
  __attribute__((cleanup(cleanup_string)))
 
7625
    char *helper_directory = NULL;
 
7626
  uid_t user = 0;
 
7627
  gid_t group = 0;
 
7628
  __attribute__((cleanup(cleanup_string)))
 
7629
    char *mandos_argz = NULL;
 
7630
  size_t mandos_argz_length = 0;
 
7631
 
 
7632
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7633
                                &helper_directory, &user, &group,
 
7634
                                &mandos_argz, &mandos_argz_length));
 
7635
 
 
7636
  g_assert_null(agent_directory);
 
7637
  g_assert_null(helper_directory);
 
7638
  g_assert_true(user == 0);
 
7639
  g_assert_true(group == 0);
 
7640
  g_assert_cmpstr(mandos_argz, ==, "mandos-client");
 
7641
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7642
                                            mandos_argz_length),
 
7643
                   ==, 1);
 
7644
 
 
7645
  for(char **arg = argv; *arg != NULL; arg++){
 
7646
    free(*arg);
 
7647
  }
 
7648
}
 
7649
 
 
7650
static void test_parse_arguments_mandos_args(__attribute__((unused))
 
7651
                                             test_fixture *fixture,
 
7652
                                             __attribute__((unused))
 
7653
                                             gconstpointer user_data){
 
7654
  char *argv[] = {
 
7655
    strdup("prgname"),
 
7656
    strdup("mandos-client"),
 
7657
    strdup("one"),
 
7658
    strdup("two"),
 
7659
    strdup("three"),
 
7660
    NULL };
 
7661
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7662
 
 
7663
  __attribute__((cleanup(cleanup_string)))
 
7664
    char *agent_directory = NULL;
 
7665
  __attribute__((cleanup(cleanup_string)))
 
7666
    char *helper_directory = NULL;
 
7667
  uid_t user = 0;
 
7668
  gid_t group = 0;
 
7669
  __attribute__((cleanup(cleanup_string)))
 
7670
    char *mandos_argz = NULL;
 
7671
  size_t mandos_argz_length = 0;
 
7672
 
 
7673
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7674
                                &helper_directory, &user, &group,
 
7675
                                &mandos_argz, &mandos_argz_length));
 
7676
 
 
7677
  g_assert_null(agent_directory);
 
7678
  g_assert_null(helper_directory);
 
7679
  g_assert_true(user == 0);
 
7680
  g_assert_true(group == 0);
 
7681
  char *marg = mandos_argz;
 
7682
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7683
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7684
  g_assert_cmpstr(marg, ==, "one");
 
7685
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7686
  g_assert_cmpstr(marg, ==, "two");
 
7687
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7688
  g_assert_cmpstr(marg, ==, "three");
 
7689
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7690
                                            mandos_argz_length),
 
7691
                   ==, 4);
 
7692
 
 
7693
  for(char **arg = argv; *arg != NULL; arg++){
 
7694
    free(*arg);
 
7695
  }
 
7696
}
 
7697
 
 
7698
static void test_parse_arguments_all_args(__attribute__((unused))
 
7699
                                          test_fixture *fixture,
 
7700
                                          __attribute__((unused))
 
7701
                                          gconstpointer user_data){
 
7702
  char *argv[] = {
 
7703
    strdup("prgname"),
 
7704
    strdup("--agent-directory"),
 
7705
    strdup("/tmp"),
 
7706
    strdup("--helper-directory"),
 
7707
    strdup("/var/tmp"),
 
7708
    strdup("--user"),
 
7709
    strdup("1"),
 
7710
    strdup("--group"),
 
7711
    strdup("2"),
 
7712
    strdup("mandos-client"),
 
7713
    strdup("one"),
 
7714
    strdup("two"),
 
7715
    strdup("three"),
 
7716
    NULL };
 
7717
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7718
 
 
7719
  __attribute__((cleanup(cleanup_string)))
 
7720
    char *agent_directory = NULL;
 
7721
  __attribute__((cleanup(cleanup_string)))
 
7722
    char *helper_directory = NULL;
 
7723
  uid_t user = 0;
 
7724
  gid_t group = 0;
 
7725
  __attribute__((cleanup(cleanup_string)))
 
7726
    char *mandos_argz = NULL;
 
7727
  size_t mandos_argz_length = 0;
 
7728
 
 
7729
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7730
                                &helper_directory, &user, &group,
 
7731
                                &mandos_argz, &mandos_argz_length));
 
7732
 
 
7733
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7734
  g_assert_cmpstr(helper_directory, ==, "/var/tmp");
 
7735
  g_assert_true(user == 1);
 
7736
  g_assert_true(group == 2);
 
7737
  char *marg = mandos_argz;
 
7738
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7739
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7740
  g_assert_cmpstr(marg, ==, "one");
 
7741
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7742
  g_assert_cmpstr(marg, ==, "two");
 
7743
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7744
  g_assert_cmpstr(marg, ==, "three");
 
7745
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7746
                                            mandos_argz_length),
 
7747
                   ==, 4);
 
7748
 
 
7749
  for(char **arg = argv; *arg != NULL; arg++){
 
7750
    free(*arg);
 
7751
  }
 
7752
}
 
7753
 
 
7754
static void test_parse_arguments_mixed(__attribute__((unused))
 
7755
                                       test_fixture *fixture,
 
7756
                                       __attribute__((unused))
 
7757
                                       gconstpointer user_data){
 
7758
  char *argv[] = {
 
7759
    strdup("prgname"),
 
7760
    strdup("mandos-client"),
 
7761
    strdup("--user"),
 
7762
    strdup("1"),
 
7763
    strdup("one"),
 
7764
    strdup("--agent-directory"),
 
7765
    strdup("/tmp"),
 
7766
    strdup("two"),
 
7767
    strdup("three"),
 
7768
    strdup("--helper-directory=/var/tmp"),
 
7769
    NULL };
 
7770
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7771
 
 
7772
  __attribute__((cleanup(cleanup_string)))
 
7773
    char *agent_directory = NULL;
 
7774
  __attribute__((cleanup(cleanup_string)))
 
7775
    char *helper_directory = NULL;
 
7776
  uid_t user = 0;
 
7777
  gid_t group = 0;
 
7778
  __attribute__((cleanup(cleanup_string)))
 
7779
    char *mandos_argz = NULL;
 
7780
  size_t mandos_argz_length = 0;
 
7781
 
 
7782
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7783
                                &helper_directory, &user, &group,
 
7784
                                &mandos_argz, &mandos_argz_length));
 
7785
 
 
7786
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7787
  g_assert_cmpstr(helper_directory, ==, "/var/tmp");
 
7788
  g_assert_true(user == 1);
 
7789
  g_assert_true(group == 0);
 
7790
  char *marg = mandos_argz;
 
7791
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7792
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7793
  g_assert_cmpstr(marg, ==, "one");
 
7794
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7795
  g_assert_cmpstr(marg, ==, "two");
 
7796
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7797
  g_assert_cmpstr(marg, ==, "three");
 
7798
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7799
                                            mandos_argz_length),
 
7800
                   ==, 4);
 
7801
 
 
7802
  for(char **arg = argv; *arg != NULL; arg++){
 
7803
    free(*arg);
 
7804
  }
 
7805
}
 
7806
 
 
7807
/* End of tests section */
 
7808
 
 
7809
/* Test boilerplate section; New tests should be added to the test
 
7810
   suite definition here, in the "run_tests" function.
 
7811
 
 
7812
   Finally, this section also contains the should_only_run_tests()
 
7813
   function used by main() for deciding if tests should be run or to
 
7814
   start normally. */
 
7815
 
 
7816
__attribute__((cold))
 
7817
static bool run_tests(int argc, char *argv[]){
 
7818
  g_test_init(&argc, &argv, NULL);
 
7819
 
 
7820
  /* A macro to add a test with no setup or teardown functions */
 
7821
#define test_add(testpath, testfunc)                    \
 
7822
  do {                                                  \
 
7823
    g_test_add((testpath), test_fixture, NULL, NULL,    \
 
7824
               (testfunc), NULL);                       \
 
7825
  } while(false)
 
7826
 
 
7827
  /* Test the signal-related functions first, since some other tests
 
7828
     depend on these functions in their setups and teardowns */
 
7829
  test_add("/signal-handling/setup", test_setup_signal_handler);
 
7830
  test_add("/signal-handling/restore", test_restore_signal_handler);
 
7831
  test_add("/signal-handling/block", test_block_sigchld);
 
7832
  test_add("/signal-handling/restore-sigmask", test_restore_sigmask);
 
7833
 
 
7834
  /* Regular non-signal-related tests; these use no setups or
 
7835
     teardowns */
 
7836
  test_add("/parse_arguments/noargs", test_parse_arguments_noargs);
 
7837
  test_add("/parse_arguments/invalid", test_parse_arguments_invalid);
 
7838
  test_add("/parse_arguments/long-dir",
 
7839
           test_parse_arguments_long_dir);
 
7840
  test_add("/parse_arguments/short-dir",
 
7841
           test_parse_arguments_short_dir);
 
7842
  test_add("/parse_arguments/helper-directory",
 
7843
           test_parse_arguments_helper_directory);
 
7844
  test_add("/parse_arguments/plugin-helper-dir",
 
7845
           test_parse_arguments_plugin_helper_dir);
 
7846
  test_add("/parse_arguments/user", test_parse_arguments_user);
 
7847
  test_add("/parse_arguments/user-invalid",
 
7848
           test_parse_arguments_user_invalid);
 
7849
  test_add("/parse_arguments/user-zero-invalid",
 
7850
           test_parse_arguments_user_zero_invalid);
 
7851
  test_add("/parse_arguments/group", test_parse_arguments_group);
 
7852
  test_add("/parse_arguments/group-invalid",
 
7853
           test_parse_arguments_group_invalid);
 
7854
  test_add("/parse_arguments/group-zero-invalid",
 
7855
           test_parse_arguments_group_zero_invalid);
 
7856
  test_add("/parse_arguments/mandos-noargs",
 
7857
           test_parse_arguments_mandos_noargs);
 
7858
  test_add("/parse_arguments/mandos-args",
 
7859
           test_parse_arguments_mandos_args);
 
7860
  test_add("/parse_arguments/all-args",
 
7861
           test_parse_arguments_all_args);
 
7862
  test_add("/parse_arguments/mixed", test_parse_arguments_mixed);
 
7863
  test_add("/queue/create", test_create_queue);
 
7864
  test_add("/queue/add", test_add_to_queue);
 
7865
  test_add("/queue/has_question/empty",
 
7866
           test_queue_has_question_empty);
 
7867
  test_add("/queue/has_question/false",
 
7868
           test_queue_has_question_false);
 
7869
  test_add("/queue/has_question/true", test_queue_has_question_true);
 
7870
  test_add("/queue/has_question/false2",
 
7871
           test_queue_has_question_false2);
 
7872
  test_add("/queue/has_question/true2",
 
7873
           test_queue_has_question_true2);
 
7874
  test_add("/buffer/cleanup", test_cleanup_buffer);
 
7875
  test_add("/string_set/net-set-contains-nothing",
 
7876
           test_string_set_new_set_contains_nothing);
 
7877
  test_add("/string_set/with-added-string-contains-it",
 
7878
           test_string_set_with_added_string_contains_it);
 
7879
  test_add("/string_set/cleared-does-not-contain-string",
 
7880
           test_string_set_cleared_does_not_contain_str);
 
7881
  test_add("/string_set/swap/one-with-empty",
 
7882
           test_string_set_swap_one_with_empty);
 
7883
  test_add("/string_set/swap/empty-with-one",
 
7884
           test_string_set_swap_empty_with_one);
 
7885
  test_add("/string_set/swap/one-with-one",
 
7886
           test_string_set_swap_one_with_one);
 
7887
 
 
7888
  /* A macro to add a test using the setup and teardown functions */
 
7889
#define test_add_st(path, func)                                 \
 
7890
  do {                                                          \
 
7891
    g_test_add((path), test_fixture, NULL, test_setup, (func),  \
 
7892
               test_teardown);                                  \
 
7893
  } while(false)
 
7894
 
 
7895
  /* Signal-related tests; these use setups and teardowns which
 
7896
     establish, during each test run, a signal handler for, and a
 
7897
     signal mask blocking, the SIGCHLD signal, just like main() */
 
7898
  test_add_st("/wait_for_event/timeout", test_wait_for_event_timeout);
 
7899
  test_add_st("/wait_for_event/event", test_wait_for_event_event);
 
7900
  test_add_st("/wait_for_event/sigchld", test_wait_for_event_sigchld);
 
7901
  test_add_st("/run_queue/zeroes-next-run",
 
7902
              test_run_queue_zeroes_next_run);
 
7903
  test_add_st("/run_queue/clears-cancelled_filenames",
 
7904
              test_run_queue_clears_cancelled_filenames);
 
7905
  test_add_st("/run_queue/skips-cancelled-filenames",
 
7906
              test_run_queue_skips_cancelled_filenames);
 
7907
  test_add_st("/run_queue/one-task", test_run_queue_one_task);
 
7908
  test_add_st("/run_queue/two-tasks", test_run_queue_two_tasks);
 
7909
  test_add_st("/run_queue/two-tasks/quit",
 
7910
              test_run_queue_two_tasks_quit);
 
7911
  test_add_st("/run_queue/two-tasks-cleanup",
 
7912
              test_run_queue_two_tasks_cleanup);
 
7913
  test_add_st("/task-creators/start_mandos_client",
 
7914
              test_start_mandos_client);
 
7915
  test_add_st("/task-creators/start_mandos_client/execv",
 
7916
              test_start_mandos_client_execv);
 
7917
  test_add_st("/task-creators/start_mandos_client/suid/euid",
 
7918
              test_start_mandos_client_suid_euid);
 
7919
  test_add_st("/task-creators/start_mandos_client/suid/egid",
 
7920
              test_start_mandos_client_suid_egid);
 
7921
  test_add_st("/task-creators/start_mandos_client/suid/ruid",
 
7922
              test_start_mandos_client_suid_ruid);
 
7923
  test_add_st("/task-creators/start_mandos_client/suid/rgid",
 
7924
              test_start_mandos_client_suid_rgid);
 
7925
  test_add_st("/task-creators/start_mandos_client/read",
 
7926
              test_start_mandos_client_read);
 
7927
  test_add_st("/task-creators/start_mandos_client/helper-directory",
 
7928
              test_start_mandos_client_helper_directory);
 
7929
  test_add_st("/task-creators/start_mandos_client/sigmask",
 
7930
              test_start_mandos_client_sigmask);
 
7931
  test_add_st("/task/wait_for_mandos_client_exit/badpid",
 
7932
              test_wait_for_mandos_client_exit_badpid);
 
7933
  test_add_st("/task/wait_for_mandos_client_exit/noexit",
 
7934
              test_wait_for_mandos_client_exit_noexit);
 
7935
  test_add_st("/task/wait_for_mandos_client_exit/success",
 
7936
              test_wait_for_mandos_client_exit_success);
 
7937
  test_add_st("/task/wait_for_mandos_client_exit/failure",
 
7938
              test_wait_for_mandos_client_exit_failure);
 
7939
  test_add_st("/task/wait_for_mandos_client_exit/killed",
 
7940
              test_wait_for_mandos_client_exit_killed);
 
7941
  test_add_st("/task/read_mandos_client_output/readerror",
 
7942
              test_read_mandos_client_output_readerror);
 
7943
  test_add_st("/task/read_mandos_client_output/nodata",
 
7944
              test_read_mandos_client_output_nodata);
 
7945
  test_add_st("/task/read_mandos_client_output/eof",
 
7946
              test_read_mandos_client_output_eof);
 
7947
  test_add_st("/task/read_mandos_client_output/once",
 
7948
              test_read_mandos_client_output_once);
 
7949
  test_add_st("/task/read_mandos_client_output/malloc",
 
7950
              test_read_mandos_client_output_malloc);
 
7951
  test_add_st("/task/read_mandos_client_output/append",
 
7952
              test_read_mandos_client_output_append);
 
7953
  test_add_st("/task-creators/add_inotify_dir_watch",
 
7954
              test_add_inotify_dir_watch);
 
7955
  test_add_st("/task-creators/add_inotify_dir_watch/fail",
 
7956
              test_add_inotify_dir_watch_fail);
 
7957
  test_add_st("/task-creators/add_inotify_dir_watch/not-a-directory",
 
7958
              test_add_inotify_dir_watch_nondir);
 
7959
  test_add_st("/task-creators/add_inotify_dir_watch/EAGAIN",
 
7960
              test_add_inotify_dir_watch_EAGAIN);
 
7961
  test_add_st("/task-creators/add_inotify_dir_watch/IN_CLOSE_WRITE",
 
7962
              test_add_inotify_dir_watch_IN_CLOSE_WRITE);
 
7963
  test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_TO",
 
7964
              test_add_inotify_dir_watch_IN_MOVED_TO);
 
7965
  test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_FROM",
 
7966
              test_add_inotify_dir_watch_IN_MOVED_FROM);
 
7967
  test_add_st("/task-creators/add_inotify_dir_watch/IN_EXCL_UNLINK",
 
7968
              test_add_inotify_dir_watch_IN_EXCL_UNLINK);
 
7969
  test_add_st("/task-creators/add_inotify_dir_watch/IN_DELETE",
 
7970
              test_add_inotify_dir_watch_IN_DELETE);
 
7971
  test_add_st("/task/read_inotify_event/readerror",
 
7972
              test_read_inotify_event_readerror);
 
7973
  test_add_st("/task/read_inotify_event/bad-epoll",
 
7974
              test_read_inotify_event_bad_epoll);
 
7975
  test_add_st("/task/read_inotify_event/nodata",
 
7976
              test_read_inotify_event_nodata);
 
7977
  test_add_st("/task/read_inotify_event/eof",
 
7978
              test_read_inotify_event_eof);
 
7979
  test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE",
 
7980
              test_read_inotify_event_IN_CLOSE_WRITE);
 
7981
  test_add_st("/task/read_inotify_event/IN_MOVED_TO",
 
7982
              test_read_inotify_event_IN_MOVED_TO);
 
7983
  test_add_st("/task/read_inotify_event/IN_MOVED_FROM",
 
7984
              test_read_inotify_event_IN_MOVED_FROM);
 
7985
  test_add_st("/task/read_inotify_event/IN_DELETE",
 
7986
              test_read_inotify_event_IN_DELETE);
 
7987
  test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE/badname",
 
7988
              test_read_inotify_event_IN_CLOSE_WRITE_badname);
 
7989
  test_add_st("/task/read_inotify_event/IN_MOVED_TO/badname",
 
7990
              test_read_inotify_event_IN_MOVED_TO_badname);
 
7991
  test_add_st("/task/read_inotify_event/IN_MOVED_FROM/badname",
 
7992
              test_read_inotify_event_IN_MOVED_FROM_badname);
 
7993
  test_add_st("/task/read_inotify_event/IN_DELETE/badname",
 
7994
              test_read_inotify_event_IN_DELETE_badname);
 
7995
  test_add_st("/task/open_and_parse_question/ENOENT",
 
7996
              test_open_and_parse_question_ENOENT);
 
7997
  test_add_st("/task/open_and_parse_question/EIO",
 
7998
              test_open_and_parse_question_EIO);
 
7999
  test_add_st("/task/open_and_parse_question/parse-error",
 
8000
              test_open_and_parse_question_parse_error);
 
8001
  test_add_st("/task/open_and_parse_question/nosocket",
 
8002
              test_open_and_parse_question_nosocket);
 
8003
  test_add_st("/task/open_and_parse_question/badsocket",
 
8004
              test_open_and_parse_question_badsocket);
 
8005
  test_add_st("/task/open_and_parse_question/nopid",
 
8006
              test_open_and_parse_question_nopid);
 
8007
  test_add_st("/task/open_and_parse_question/badpid",
 
8008
              test_open_and_parse_question_badpid);
 
8009
  test_add_st("/task/open_and_parse_question/noexist_pid",
 
8010
              test_open_and_parse_question_noexist_pid);
 
8011
  test_add_st("/task/open_and_parse_question/no-notafter",
 
8012
              test_open_and_parse_question_no_notafter);
 
8013
  test_add_st("/task/open_and_parse_question/bad-notafter",
 
8014
              test_open_and_parse_question_bad_notafter);
 
8015
  test_add_st("/task/open_and_parse_question/notafter-0",
 
8016
              test_open_and_parse_question_notafter_0);
 
8017
  test_add_st("/task/open_and_parse_question/notafter-1",
 
8018
              test_open_and_parse_question_notafter_1);
 
8019
  test_add_st("/task/open_and_parse_question/notafter-1-1",
 
8020
              test_open_and_parse_question_notafter_1_1);
 
8021
  test_add_st("/task/open_and_parse_question/notafter-1-2",
 
8022
              test_open_and_parse_question_notafter_1_2);
 
8023
  test_add_st("/task/open_and_parse_question/equal-notafter",
 
8024
              test_open_and_parse_question_equal_notafter);
 
8025
  test_add_st("/task/open_and_parse_question/late-notafter",
 
8026
              test_open_and_parse_question_late_notafter);
 
8027
  test_add_st("/task/cancel_old_question/0-1-2",
 
8028
              test_cancel_old_question_0_1_2);
 
8029
  test_add_st("/task/cancel_old_question/0-2-1",
 
8030
              test_cancel_old_question_0_2_1);
 
8031
  test_add_st("/task/cancel_old_question/1-2-3",
 
8032
              test_cancel_old_question_1_2_3);
 
8033
  test_add_st("/task/cancel_old_question/1-3-2",
 
8034
              test_cancel_old_question_1_3_2);
 
8035
  test_add_st("/task/cancel_old_question/2-1-3",
 
8036
              test_cancel_old_question_2_1_3);
 
8037
  test_add_st("/task/cancel_old_question/2-3-1",
 
8038
              test_cancel_old_question_2_3_1);
 
8039
  test_add_st("/task/cancel_old_question/3-1-2",
 
8040
              test_cancel_old_question_3_1_2);
 
8041
  test_add_st("/task/cancel_old_question/3-2-1",
 
8042
              test_cancel_old_question_3_2_1);
 
8043
  test_add_st("/task/connect_question_socket/name-too-long",
 
8044
              test_connect_question_socket_name_too_long);
 
8045
  test_add_st("/task/connect_question_socket/connect-fail",
 
8046
              test_connect_question_socket_connect_fail);
 
8047
  test_add_st("/task/connect_question_socket/bad-epoll",
 
8048
              test_connect_question_socket_bad_epoll);
 
8049
  test_add_st("/task/connect_question_socket/usable",
 
8050
              test_connect_question_socket_usable);
 
8051
  test_add_st("/task/send_password_to_socket/client-not-exited",
 
8052
              test_send_password_to_socket_client_not_exited);
 
8053
  test_add_st("/task/send_password_to_socket/password-not-read",
 
8054
              test_send_password_to_socket_password_not_read);
 
8055
  test_add_st("/task/send_password_to_socket/EMSGSIZE",
 
8056
              test_send_password_to_socket_EMSGSIZE);
 
8057
  test_add_st("/task/send_password_to_socket/retry",
 
8058
              test_send_password_to_socket_retry);
 
8059
  test_add_st("/task/send_password_to_socket/bad-epoll",
 
8060
              test_send_password_to_socket_bad_epoll);
 
8061
  test_add_st("/task/send_password_to_socket/null-password",
 
8062
              test_send_password_to_socket_null_password);
 
8063
  test_add_st("/task/send_password_to_socket/empty-password",
 
8064
              test_send_password_to_socket_empty_password);
 
8065
  test_add_st("/task/send_password_to_socket/empty-str-password",
 
8066
              test_send_password_to_socket_empty_str_pass);
 
8067
  test_add_st("/task/send_password_to_socket/text-password",
 
8068
              test_send_password_to_socket_text_password);
 
8069
  test_add_st("/task/send_password_to_socket/binary-password",
 
8070
              test_send_password_to_socket_binary_password);
 
8071
  test_add_st("/task/send_password_to_socket/nuls-in-password",
 
8072
              test_send_password_to_socket_nuls_in_password);
 
8073
  test_add_st("/task-creators/add_existing_questions/ENOENT",
 
8074
              test_add_existing_questions_ENOENT);
 
8075
  test_add_st("/task-creators/add_existing_questions/no-questions",
 
8076
              test_add_existing_questions_no_questions);
 
8077
  test_add_st("/task-creators/add_existing_questions/one-question",
 
8078
              test_add_existing_questions_one_question);
 
8079
  test_add_st("/task-creators/add_existing_questions/two-questions",
 
8080
              test_add_existing_questions_two_questions);
 
8081
  test_add_st("/task-creators/add_existing_questions/non-questions",
 
8082
              test_add_existing_questions_non_questions);
 
8083
  test_add_st("/task-creators/add_existing_questions/both-types",
 
8084
              test_add_existing_questions_both_types);
 
8085
 
 
8086
  return g_test_run() == 0;
 
8087
}
 
8088
 
 
8089
static bool should_only_run_tests(int *argc_p, char **argv_p[]){
 
8090
  GOptionContext *context = g_option_context_new("");
 
8091
 
 
8092
  g_option_context_set_help_enabled(context, FALSE);
 
8093
  g_option_context_set_ignore_unknown_options(context, TRUE);
 
8094
 
 
8095
  gboolean run_tests = FALSE;
 
8096
  GOptionEntry entries[] = {
 
8097
    { "test", 0, 0, G_OPTION_ARG_NONE,
 
8098
      &run_tests, "Run tests", NULL },
 
8099
    { NULL }
 
8100
  };
 
8101
  g_option_context_add_main_entries(context, entries, NULL);
 
8102
 
 
8103
  GError *error = NULL;
 
8104
 
 
8105
  if(g_option_context_parse(context, argc_p, argv_p, &error) != TRUE){
 
8106
    g_option_context_free(context);
 
8107
    g_error("Failed to parse options: %s", error->message);
 
8108
  }
 
8109
 
 
8110
  g_option_context_free(context);
 
8111
  return run_tests != FALSE;
 
8112
}