/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to dracut-module/password-agent.c

  • Committer: teddy at recompile
  • Date: 2020-04-05 21:30:59 UTC
  • mto: This revision was merged to the branch mainline in revision 398.
  • Revision ID: teddy@recompile.se-20200405213059-fb2a61ckqynrmatk
Fix file descriptor leak in mandos-client

When the local network has Mandos servers announcing themselves using
real, globally reachable, IPv6 addresses (i.e. not link-local
addresses), but there is no router on the local network providing IPv6
RA (Router Advertisement) packets, the client cannot reach the server
by normal means, since the client only has a link-local IPv6 address,
and has no usable route to reach the server's global IPv6 address.
(This is not a common situation, and usually only happens when the
router itself reboots and runs a Mandos client, since it cannot then
give RA packets to itself.)  The client code has a solution for
this, which consists of adding a temporary local route to reach the
address of the server during communication, and removing this
temporary route afterwards.

This solution with a temporary route works, but has a file descriptor
leak; it leaks one file descriptor for each addition and for each
removal of a route.  If one server requiring an added route is present
on the network, but no servers gives a password, making the client
retry after the default ten seconds, and we furthermore assume a
default 1024 open files limit, the client runs out of file descriptors
after about 90 minutes, after which time the client process will be
useless and fail to retrieve any passwords, necessitating manual
password entry via the keyboard.

Fix this by eliminating the file descriptor leak in the client.

* plugins.d/mandos-client.c (add_delete_local_route): Do
  close(devnull) also in parent process, also if fork() fails, and on
  any failure in child process.

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
/* -*- mode: c; coding: utf-8; after-save-hook: (lambda () (let* ((find-build-directory (lambda (try-directory &optional base-directory) (let ((base-directory (or base-directory try-directory))) (cond ((equal try-directory "/") base-directory) ((file-readable-p (concat (file-name-as-directory try-directory) "Makefile")) try-directory) ((funcall find-build-directory (directory-file-name (file-name-directory try-directory)) base-directory)))))) (build-directory (funcall find-build-directory (buffer-file-name))) (local-build-directory (if (fboundp 'file-local-name) (file-local-name build-directory) (or (file-remote-p build-directory 'localname) build-directory))) (command (file-relative-name (file-name-sans-extension (buffer-file-name)) build-directory))) (pcase (progn (if (get-buffer "*Test*") (kill-buffer "*Test*")) (process-file-shell-command (let ((qbdir (shell-quote-argument local-build-directory)) (qcmd (shell-quote-argument command))) (format "cd %s && CFLAGS=-Werror make --silent %s && %s --test --verbose" qbdir qcmd qcmd)) nil "*Test*")) (0 (let ((w (get-buffer-window "*Test*"))) (if w (delete-window w)))) (_ (with-current-buffer "*Test*" (compilation-mode) (cd-absolute build-directory)) (display-buffer "*Test*" '(display-buffer-in-side-window)))))); -*- */
 
2
/*
 
3
 * Mandos password agent - Simple password agent to run Mandos client
 
4
 *
 
5
 * Copyright © 2019 Teddy Hogeborn
 
6
 * Copyright © 2019 Björn Påhlsson
 
7
 * 
 
8
 * This file is part of Mandos.
 
9
 * 
 
10
 * Mandos is free software: you can redistribute it and/or modify it
 
11
 * under the terms of the GNU General Public License as published by
 
12
 * the Free Software Foundation, either version 3 of the License, or
 
13
 * (at your option) any later version.
 
14
 * 
 
15
 * Mandos is distributed in the hope that it will be useful, but
 
16
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 
17
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 
18
 * General Public License for more details.
 
19
 * 
 
20
 * You should have received a copy of the GNU General Public License
 
21
 * along with Mandos.  If not, see <http://www.gnu.org/licenses/>.
 
22
 * 
 
23
 * Contact the authors at <mandos@recompile.se>.
 
24
 */
 
25
 
 
26
#define _GNU_SOURCE
 
27
#include <inttypes.h>           /* uintmax_t, PRIuMAX, PRIdMAX,
 
28
                                   intmax_t, uint32_t, SCNx32,
 
29
                                   SCNuMAX, SCNxMAX */
 
30
#include <stddef.h>             /* size_t */
 
31
#include <sys/types.h>          /* pid_t, uid_t, gid_t, getuid(),
 
32
                                   getpid() */
 
33
#include <stdbool.h>            /* bool, true, false */
 
34
#include <signal.h>             /* struct sigaction, sigset_t,
 
35
                                   sigemptyset(), sigaddset(),
 
36
                                   SIGCHLD, pthread_sigmask(),
 
37
                                   SIG_BLOCK, SIG_SETMASK, SA_RESTART,
 
38
                                   SA_NOCLDSTOP, sigfillset(), kill(),
 
39
                                   SIGTERM, sigdelset(), SIGKILL,
 
40
                                   NSIG, sigismember(), SA_ONSTACK,
 
41
                                   SIG_DFL, SIG_IGN, SIGINT, SIGQUIT,
 
42
                                   SIGHUP, SIGSTOP, SIG_UNBLOCK */
 
43
#include <stdlib.h>             /* EXIT_SUCCESS, EXIT_FAILURE,
 
44
                                   malloc(), free(), strtoumax(),
 
45
                                   realloc(), setenv(), calloc(),
 
46
                                   mkdtemp(), mkostemp() */
 
47
#include <iso646.h>             /* not, or, and, xor */
 
48
#include <error.h>              /* error() */
 
49
#include <sysexits.h>           /* EX_USAGE, EX_OSERR, EX_OSFILE */
 
50
#include <errno.h>              /* errno, error_t, EACCES,
 
51
                                   ENAMETOOLONG, ENOENT, ENOTDIR,
 
52
                                   ENOMEM, EEXIST, ECHILD, EPERM,
 
53
                                   EAGAIN, EINTR, ENOBUFS, EADDRINUSE,
 
54
                                   ECONNREFUSED, ECONNRESET,
 
55
                                   ETOOMANYREFS, EMSGSIZE, EBADF,
 
56
                                   EINVAL */
 
57
#include <string.h>             /* strdup(), memcpy(),
 
58
                                   explicit_bzero(), memset(),
 
59
                                   strcmp(), strlen(), strncpy(),
 
60
                                   memcmp(), basename() */
 
61
#include <argz.h>               /* argz_create(), argz_count(),
 
62
                                   argz_extract(), argz_next(),
 
63
                                   argz_add() */
 
64
#include <sys/epoll.h>          /* epoll_create1(), EPOLL_CLOEXEC,
 
65
                                   epoll_ctl(), EPOLL_CTL_ADD,
 
66
                                   struct epoll_event, EPOLLIN,
 
67
                                   EPOLLRDHUP, EPOLLOUT,
 
68
                                   epoll_pwait() */
 
69
#include <time.h>               /* struct timespec, clock_gettime(),
 
70
                                   CLOCK_MONOTONIC */
 
71
#include <argp.h>               /* struct argp_option, OPTION_HIDDEN,
 
72
                                   OPTION_ALIAS, struct argp_state,
 
73
                                   ARGP_ERR_UNKNOWN, ARGP_KEY_ARGS,
 
74
                                   struct argp, argp_parse(),
 
75
                                   ARGP_NO_EXIT */
 
76
#include <stdint.h>             /* SIZE_MAX */
 
77
#include <unistd.h>             /* uid_t, gid_t, close(), pipe2(),
 
78
                                   fork(), _exit(), dup2(),
 
79
                                   STDOUT_FILENO, setresgid(),
 
80
                                   setresuid(), execv(), ssize_t,
 
81
                                   read(), dup3(), getuid(), dup(),
 
82
                                   STDERR_FILENO, pause(), write(),
 
83
                                   rmdir(), unlink(), getpid() */
 
84
#include <sys/mman.h>           /* munlock(), mlock() */
 
85
#include <fcntl.h>              /* O_CLOEXEC, O_NONBLOCK, fcntl(),
 
86
                                   F_GETFD, F_GETFL, FD_CLOEXEC,
 
87
                                   open(), O_WRONLY, O_NOCTTY,
 
88
                                   O_RDONLY, O_NOFOLLOW */
 
89
#include <sys/wait.h>           /* waitpid(), WNOHANG, WIFEXITED(),
 
90
                                   WEXITSTATUS() */
 
91
#include <limits.h>             /* PIPE_BUF, NAME_MAX, INT_MAX */
 
92
#include <sys/inotify.h>        /* inotify_init1(), IN_NONBLOCK,
 
93
                                   IN_CLOEXEC, inotify_add_watch(),
 
94
                                   IN_CLOSE_WRITE, IN_MOVED_TO,
 
95
                                   IN_MOVED_FROM, IN_DELETE,
 
96
                                   IN_EXCL_UNLINK, IN_ONLYDIR,
 
97
                                   struct inotify_event */
 
98
#include <fnmatch.h>            /* fnmatch(), FNM_FILE_NAME */
 
99
#include <stdio.h>              /* asprintf(), FILE, stderr, fopen(),
 
100
                                   fclose(), getline(), sscanf(),
 
101
                                   feof(), ferror(), rename(),
 
102
                                   fdopen(), fprintf(), fscanf() */
 
103
#include <glib.h>    /* GKeyFile, g_key_file_free(), g_key_file_new(),
 
104
                        GError, g_key_file_load_from_file(),
 
105
                        G_KEY_FILE_NONE, TRUE, G_FILE_ERROR_NOENT,
 
106
                        g_key_file_get_string(), guint64,
 
107
                        g_key_file_get_uint64(),
 
108
                        G_KEY_FILE_ERROR_KEY_NOT_FOUND, gconstpointer,
 
109
                        g_assert_true(), g_assert_nonnull(),
 
110
                        g_assert_null(), g_assert_false(),
 
111
                        g_assert_cmpint(), g_assert_cmpuint(),
 
112
                        g_test_skip(), g_assert_cmpstr(),
 
113
                        g_test_init(), g_test_add(), g_test_run(),
 
114
                        GOptionContext, g_option_context_new(),
 
115
                        g_option_context_set_help_enabled(), FALSE,
 
116
                        g_option_context_set_ignore_unknown_options(),
 
117
                        gboolean, GOptionEntry, G_OPTION_ARG_NONE,
 
118
                        g_option_context_add_main_entries(),
 
119
                        g_option_context_parse(),
 
120
                        g_option_context_free(), g_error() */
 
121
#include <sys/un.h>             /* struct sockaddr_un, SUN_LEN */
 
122
#include <sys/socket.h>         /* AF_LOCAL, socket(), PF_LOCAL,
 
123
                                   SOCK_DGRAM, SOCK_NONBLOCK,
 
124
                                   SOCK_CLOEXEC, connect(),
 
125
                                   struct sockaddr, socklen_t,
 
126
                                   shutdown(), SHUT_RD, send(),
 
127
                                   MSG_NOSIGNAL, bind(), recv(),
 
128
                                   socketpair() */
 
129
#include <glob.h>               /* globfree(), glob_t, glob(),
 
130
                                   GLOB_ERR, GLOB_NOSORT, GLOB_MARK,
 
131
                                   GLOB_ABORTED, GLOB_NOMATCH,
 
132
                                   GLOB_NOSPACE */
 
133
 
 
134
/* End of includes */
 
135
 
 
136
/* Start of declarations of private types and functions */
 
137
 
 
138
/* microseconds of CLOCK_MONOTONIC absolute time; 0 means unset */
 
139
typedef uintmax_t mono_microsecs;
 
140
 
 
141
/* "task_queue" - A queue of tasks to be run */
 
142
typedef struct {
 
143
  struct task_struct *tasks;    /* Tasks in this queue */
 
144
  size_t length;                /* Number of tasks */
 
145
  /* Memory allocated for "tasks", in bytes */
 
146
  size_t allocated;             
 
147
  /* Time when this queue should be run, at the latest */
 
148
  mono_microsecs next_run;
 
149
} __attribute__((designated_init)) task_queue;
 
150
 
 
151
/* "task_func" - A function type for task functions
 
152
 
 
153
   I.e. functions for the code which runs when a task is run, all have
 
154
   this type */
 
155
typedef void (task_func) (const struct task_struct,
 
156
                          task_queue *const)
 
157
  __attribute__((nonnull));
 
158
 
 
159
/* "buffer" - A data buffer for a growing array of bytes
 
160
 
 
161
   Used for the "password" variable */
 
162
typedef struct {
 
163
  char *data;
 
164
  size_t length;
 
165
  size_t allocated;
 
166
} __attribute__((designated_init)) buffer;
 
167
 
 
168
/* "string_set" - A set type which can contain strings
 
169
 
 
170
   Used by the "cancelled_filenames" variable */
 
171
typedef struct {
 
172
  char *argz;                   /* Do not access these except in */
 
173
  size_t argz_len;              /* the string_set_* functions */
 
174
} __attribute__((designated_init)) string_set;
 
175
 
 
176
/* "task_context" - local variables for tasks
 
177
 
 
178
   This data structure distinguishes between different tasks which are
 
179
   using the same function.  This data structure is passed to every
 
180
   task function when each task is run.
 
181
 
 
182
   Note that not every task uses every struct member. */
 
183
typedef struct task_struct {
 
184
  task_func *const func;         /* The function run by this task */
 
185
  char *const question_filename; /* The question file */
 
186
  const pid_t pid;               /* Mandos client process ID */
 
187
  const int epoll_fd;            /* The epoll set file descriptor */
 
188
  bool *const quit_now;          /* Set to true on fatal errors */
 
189
  const int fd;                  /* General purpose file descriptor */
 
190
  bool *const mandos_client_exited; /* Set true when client exits */
 
191
  buffer *const password;           /* As read from client process */
 
192
  bool *const password_is_read;     /* "password" is done growing */
 
193
  char *filename;                   /* General purpose file name */
 
194
  /* A set of strings of all the file names of questions which have
 
195
     been cancelled for any reason; tasks pertaining to these question
 
196
     files should not be run */
 
197
  string_set *const cancelled_filenames;
 
198
  const mono_microsecs notafter; /* "NotAfter" from question file */
 
199
  /* Updated before each queue run; is compared with queue.next_run */
 
200
  const mono_microsecs *const current_time;
 
201
} __attribute__((designated_init)) task_context;
 
202
 
 
203
/* Declare all our functions here so we can define them in any order
 
204
   below.  Note: test functions are *not* declared here, they are
 
205
   declared in the test section. */
 
206
__attribute__((warn_unused_result))
 
207
static bool should_only_run_tests(int *, char **[]);
 
208
__attribute__((warn_unused_result, cold))
 
209
static bool run_tests(int, char *[]);
 
210
static void handle_sigchld(__attribute__((unused)) int sig){}
 
211
__attribute__((warn_unused_result, malloc))
 
212
task_queue *create_queue(void);
 
213
__attribute__((nonnull, warn_unused_result))
 
214
bool add_to_queue(task_queue *const, const task_context);
 
215
__attribute__((nonnull))
 
216
void cleanup_task(const task_context *const);
 
217
__attribute__((nonnull))
 
218
void cleanup_queue(task_queue *const *const);
 
219
__attribute__((pure, nonnull, warn_unused_result))
 
220
bool queue_has_question(const task_queue *const);
 
221
__attribute__((nonnull))
 
222
void cleanup_close(const int *const);
 
223
__attribute__((nonnull))
 
224
void cleanup_string(char *const *const);
 
225
__attribute__((nonnull))
 
226
void cleanup_buffer(buffer *const);
 
227
__attribute__((pure, nonnull, warn_unused_result))
 
228
bool string_set_contains(const string_set, const char *const);
 
229
__attribute__((nonnull, warn_unused_result))
 
230
bool string_set_add(string_set *const, const char *const);
 
231
__attribute__((nonnull))
 
232
void string_set_clear(string_set *);
 
233
void string_set_swap(string_set *const, string_set *const);
 
234
__attribute__((nonnull, warn_unused_result))
 
235
bool start_mandos_client(task_queue *const, const int, bool *const,
 
236
                         bool *const, buffer *const, bool *const,
 
237
                         const struct sigaction *const,
 
238
                         const sigset_t, const char *const,
 
239
                         const uid_t, const gid_t,
 
240
                         const char *const *const);
 
241
__attribute__((nonnull))
 
242
task_func wait_for_mandos_client_exit;
 
243
__attribute__((nonnull))
 
244
task_func read_mandos_client_output;
 
245
__attribute__((warn_unused_result))
 
246
bool add_inotify_dir_watch(task_queue *const, const int, bool *const,
 
247
                           buffer *const, const char *const,
 
248
                           string_set *, const mono_microsecs *const,
 
249
                           bool *const, bool *const);
 
250
__attribute__((nonnull))
 
251
task_func read_inotify_event;
 
252
__attribute__((nonnull))
 
253
task_func open_and_parse_question;
 
254
__attribute__((nonnull))
 
255
task_func cancel_old_question;
 
256
__attribute__((nonnull))
 
257
task_func connect_question_socket;
 
258
__attribute__((nonnull))
 
259
task_func send_password_to_socket;
 
260
__attribute__((warn_unused_result))
 
261
bool add_existing_questions(task_queue *const, const int,
 
262
                            buffer *const, string_set *,
 
263
                            const mono_microsecs *const,
 
264
                            bool *const, bool *const,
 
265
                            const char *const);
 
266
__attribute__((nonnull, warn_unused_result))
 
267
bool wait_for_event(const int, const mono_microsecs,
 
268
                    const mono_microsecs);
 
269
bool run_queue(task_queue **const, string_set *const, bool *const);
 
270
bool clear_all_fds_from_epoll_set(const int);
 
271
mono_microsecs get_current_time(void);
 
272
__attribute__((nonnull, warn_unused_result))
 
273
bool setup_signal_handler(struct sigaction *const);
 
274
__attribute__((nonnull))
 
275
bool restore_signal_handler(const struct sigaction *const);
 
276
__attribute__((nonnull, warn_unused_result))
 
277
bool block_sigchld(sigset_t *const);
 
278
__attribute__((nonnull))
 
279
bool restore_sigmask(const sigset_t *const);
 
280
__attribute__((nonnull))
 
281
bool parse_arguments(int, char *[], const bool, char **, char **,
 
282
                     uid_t *const , gid_t *const, char **, size_t *);
 
283
 
 
284
/* End of declarations of private types and functions */
 
285
 
 
286
/* Start of "main" section; this section LACKS TESTS!
 
287
 
 
288
   Code here should be as simple as possible. */
 
289
 
 
290
/* These are required to be global by Argp */
 
291
const char *argp_program_version = "password-agent " VERSION;
 
292
const char *argp_program_bug_address = "<mandos@recompile.se>";
 
293
 
 
294
int main(int argc, char *argv[]){
 
295
 
 
296
  /* If the --test option is passed, skip all normal operations and
 
297
     instead only run the run_tests() function, which also does all
 
298
     its own option parsing, so we don't have to do anything here. */
 
299
  if(should_only_run_tests(&argc, &argv)){
 
300
    if(run_tests(argc, argv)){
 
301
      return EXIT_SUCCESS;      /* All tests successful */
 
302
    }
 
303
    return EXIT_FAILURE;        /* Some test(s) failed */
 
304
  }
 
305
 
 
306
  __attribute__((cleanup(cleanup_string)))
 
307
    char *agent_directory = NULL;
 
308
 
 
309
  __attribute__((cleanup(cleanup_string)))
 
310
    char *helper_directory = NULL;
 
311
 
 
312
  uid_t user = 0;
 
313
  gid_t group = 0;
 
314
 
 
315
  __attribute__((cleanup(cleanup_string)))
 
316
    char *mandos_argz = NULL;
 
317
  size_t mandos_argz_length = 0;
 
318
 
 
319
  if(not parse_arguments(argc, argv, true, &agent_directory,
 
320
                         &helper_directory, &user, &group,
 
321
                         &mandos_argz, &mandos_argz_length)){
 
322
    /* This should never happen, since "true" is passed as the third
 
323
       argument to parse_arguments() above, which should make
 
324
       argp_parse() call exit() if any parsing error occurs. */
 
325
    error(EX_USAGE, errno, "Failed to parse arguments");
 
326
  }
 
327
 
 
328
  const char default_agent_directory[] = "/run/systemd/ask-password";
 
329
  const char default_helper_directory[]
 
330
    = "/lib/mandos/plugin-helpers";
 
331
  const char *const default_argv[]
 
332
    = {"/lib/mandos/plugins.d/mandos-client", NULL };
 
333
 
 
334
  /* Set variables to default values if unset */
 
335
  if(agent_directory == NULL){
 
336
    agent_directory = strdup(default_agent_directory);
 
337
    if(agent_directory == NULL){
 
338
      error(EX_OSERR, errno, "Failed strdup()");
 
339
    }
 
340
  }
 
341
  if(helper_directory == NULL){
 
342
    helper_directory = strdup(default_helper_directory);
 
343
    if(helper_directory == NULL){
 
344
      error(EX_OSERR, errno, "Failed strdup()");
 
345
    }
 
346
  }
 
347
  if(user == 0){
 
348
    user = 65534;               /* nobody */
 
349
  }
 
350
  if(group == 0){
 
351
    group = 65534;              /* nogroup */
 
352
  }
 
353
  /* If parse_opt did not create an argz vector, create one with
 
354
     default values */
 
355
  if(mandos_argz == NULL){
 
356
#ifdef __GNUC__
 
357
#pragma GCC diagnostic push
 
358
    /* argz_create() takes a non-const argv for some unknown reason -
 
359
       argz_create() isn't modifying the strings, just copying them.
 
360
       Therefore, this cast to non-const should be safe. */
 
361
#pragma GCC diagnostic ignored "-Wcast-qual"
 
362
#endif
 
363
    errno = argz_create((char *const *)default_argv, &mandos_argz,
 
364
                        &mandos_argz_length);
 
365
#ifdef __GNUC__
 
366
#pragma GCC diagnostic pop
 
367
#endif
 
368
    if(errno != 0){
 
369
      error(EX_OSERR, errno, "Failed argz_create()");
 
370
    }
 
371
  }
 
372
  /* Use argz vector to create a normal argv, usable by execv() */
 
373
 
 
374
  char **mandos_argv = malloc((argz_count(mandos_argz,
 
375
                                          mandos_argz_length)
 
376
                               + 1) * sizeof(char *));
 
377
  if(mandos_argv == NULL){
 
378
    error_t saved_errno = errno;
 
379
    free(mandos_argz);
 
380
    error(EX_OSERR, saved_errno, "Failed malloc()");
 
381
  }
 
382
  argz_extract(mandos_argz, mandos_argz_length, mandos_argv);
 
383
 
 
384
  sigset_t orig_sigmask;
 
385
  if(not block_sigchld(&orig_sigmask)){
 
386
    return EX_OSERR;
 
387
  }
 
388
 
 
389
  struct sigaction old_sigchld_action;
 
390
  if(not setup_signal_handler(&old_sigchld_action)){
 
391
    return EX_OSERR;
 
392
  }
 
393
 
 
394
  mono_microsecs current_time = 0;
 
395
 
 
396
  bool mandos_client_exited = false;
 
397
  bool quit_now = false;
 
398
  __attribute__((cleanup(cleanup_close)))
 
399
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
400
  if(epoll_fd < 0){
 
401
    error(EX_OSERR, errno, "Failed to create epoll set fd");
 
402
  }
 
403
  __attribute__((cleanup(cleanup_queue)))
 
404
    task_queue *queue = create_queue();
 
405
  if(queue == NULL){
 
406
    error(EX_OSERR, errno, "Failed to create task queue");
 
407
  }
 
408
 
 
409
  __attribute__((cleanup(cleanup_buffer)))
 
410
    buffer password = {};
 
411
  bool password_is_read = false;
 
412
 
 
413
  __attribute__((cleanup(string_set_clear)))
 
414
    string_set cancelled_filenames = {};
 
415
 
 
416
  /* Add tasks to queue */
 
417
  if(not start_mandos_client(queue, epoll_fd, &mandos_client_exited,
 
418
                             &quit_now, &password, &password_is_read,
 
419
                             &old_sigchld_action, orig_sigmask,
 
420
                             helper_directory, user, group,
 
421
                             (const char *const *)mandos_argv)){
 
422
    return EX_OSERR;            /* Error has already been printed */
 
423
  }
 
424
  /* These variables were only for start_mandos_client() and are not
 
425
     needed anymore */
 
426
  free(mandos_argv);
 
427
  free(mandos_argz);
 
428
  mandos_argz = NULL;
 
429
  if(not add_inotify_dir_watch(queue, epoll_fd, &quit_now, &password,
 
430
                               agent_directory, &cancelled_filenames,
 
431
                               &current_time, &mandos_client_exited,
 
432
                               &password_is_read)){
 
433
    switch(errno){              /* Error has already been printed */
 
434
    case EACCES:
 
435
    case ENAMETOOLONG:
 
436
    case ENOENT:
 
437
    case ENOTDIR:
 
438
      return EX_OSFILE;
 
439
    default:
 
440
      return EX_OSERR;
 
441
    }
 
442
  }
 
443
  if(not add_existing_questions(queue, epoll_fd, &password,
 
444
                                &cancelled_filenames, &current_time,
 
445
                                &mandos_client_exited,
 
446
                                &password_is_read, agent_directory)){
 
447
    return EXIT_FAILURE;        /* Error has already been printed */
 
448
  }
 
449
 
 
450
  /* Run queue */
 
451
  do {
 
452
    current_time = get_current_time();
 
453
    if(not wait_for_event(epoll_fd, queue->next_run, current_time)){
 
454
      const error_t saved_errno = errno;
 
455
      error(EXIT_FAILURE, saved_errno, "Failure while waiting for"
 
456
            " events");
 
457
    }
 
458
 
 
459
    current_time = get_current_time();
 
460
    if(not run_queue(&queue, &cancelled_filenames, &quit_now)){
 
461
      const error_t saved_errno = errno;
 
462
      error(EXIT_FAILURE, saved_errno, "Failure while running queue");
 
463
    }
 
464
 
 
465
    /*  When no tasks about questions are left in the queue, break out
 
466
        of the loop (and implicitly exit the program) */
 
467
  } while(queue_has_question(queue));
 
468
 
 
469
  restore_signal_handler(&old_sigchld_action);
 
470
  restore_sigmask(&orig_sigmask);
 
471
 
 
472
  return EXIT_SUCCESS;
 
473
}
 
474
 
 
475
__attribute__((warn_unused_result))
 
476
mono_microsecs get_current_time(void){
 
477
  struct timespec currtime;
 
478
  if(clock_gettime(CLOCK_MONOTONIC, &currtime) != 0){
 
479
    error(0, errno, "Failed to get current time");
 
480
    return 0;
 
481
  }
 
482
  return ((mono_microsecs)currtime.tv_sec * 1000000) /* seconds */
 
483
    + ((mono_microsecs)currtime.tv_nsec / 1000);     /* nanoseconds */
 
484
}
 
485
 
 
486
/* End of "main" section */
 
487
 
 
488
/* Start of regular code section; ALL this code has tests */
 
489
 
 
490
__attribute__((nonnull))
 
491
bool parse_arguments(int argc, char *argv[], const bool exit_failure,
 
492
                     char **agent_directory, char **helper_directory,
 
493
                     uid_t *const user, gid_t *const group,
 
494
                     char **mandos_argz, size_t *mandos_argz_length){
 
495
 
 
496
  const struct argp_option options[] = {
 
497
    { .name="agent-directory",.key='d', .arg="DIRECTORY",
 
498
      .doc="Systemd password agent directory" },
 
499
    { .name="helper-directory",.key=128, .arg="DIRECTORY",
 
500
      .doc="Mandos Client password helper directory" },
 
501
    { .name="plugin-helper-dir", .key=129, /* From plugin-runner */
 
502
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
503
    { .name="user", .key='u', .arg="USERID",
 
504
      .doc="User ID the Mandos Client will use as its unprivileged"
 
505
      " user" },
 
506
    { .name="userid", .key=130, /* From plugin--runner */
 
507
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
508
    { .name="group", .key='g', .arg="GROUPID",
 
509
      .doc="Group ID the Mandos Client will use as its unprivileged"
 
510
      " group" },
 
511
    { .name="groupid", .key=131, /* From plugin--runner */
 
512
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
513
    { .name="test", .key=255, /* See should_only_run_tests() */
 
514
      .doc="Skip normal operation, and only run self-tests.  See"
 
515
      " --test --help.", .group=10, },
 
516
    { NULL },
 
517
  };
 
518
 
 
519
  __attribute__((nonnull(3)))
 
520
    error_t parse_opt(int key, char *arg, struct argp_state *state){
 
521
    errno = 0;
 
522
    switch(key){
 
523
    case 'd':                   /* --agent-directory */
 
524
      *agent_directory = strdup(arg);
 
525
      break;
 
526
    case 128:                   /* --helper-directory */
 
527
    case 129:                   /* --plugin-helper-dir */
 
528
      *helper_directory = strdup(arg);
 
529
      break;
 
530
    case 'u':                   /* --user */
 
531
    case 130:                   /* --userid */
 
532
      {
 
533
        char *tmp;
 
534
        uintmax_t tmp_id = 0;
 
535
        errno = 0;
 
536
        tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
 
537
        if(errno != 0 or tmp == arg or *tmp != '\0'
 
538
           or tmp_id != (uid_t)tmp_id or (uid_t)tmp_id == 0){
 
539
          return ARGP_ERR_UNKNOWN;
 
540
        }
 
541
        *user = (uid_t)tmp_id;
 
542
        errno = 0;
 
543
        break;
 
544
      }
 
545
    case 'g':                   /* --group */
 
546
    case 131:                   /* --groupid */
 
547
      {
 
548
        char *tmp;
 
549
        uintmax_t tmp_id = 0;
 
550
        errno = 0;
 
551
        tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
 
552
        if(errno != 0 or tmp == arg or *tmp != '\0'
 
553
           or tmp_id != (gid_t)tmp_id or (gid_t)tmp_id == 0){
 
554
          return ARGP_ERR_UNKNOWN;
 
555
        }
 
556
        *group = (gid_t)tmp_id;
 
557
        errno = 0;
 
558
        break;
 
559
      }
 
560
    case ARGP_KEY_ARGS:
 
561
      /* Copy arguments into argz vector */
 
562
      return argz_create(state->argv + state->next, mandos_argz,
 
563
                         mandos_argz_length);
 
564
    default:
 
565
      return ARGP_ERR_UNKNOWN;
 
566
    }
 
567
    return errno;
 
568
  }
 
569
 
 
570
  const struct argp argp = {
 
571
    .options=options,
 
572
    .parser=parse_opt,
 
573
    .args_doc="[MANDOS_CLIENT [OPTION...]]\n--test",
 
574
    .doc = "Mandos password agent -- runs Mandos client as a"
 
575
    " systemd password agent",
 
576
  };
 
577
 
 
578
  errno = argp_parse(&argp, argc, argv,
 
579
                     exit_failure ? 0 : ARGP_NO_EXIT, NULL, NULL);
 
580
 
 
581
  return errno == 0;
 
582
}
 
583
 
 
584
__attribute__((nonnull, warn_unused_result))
 
585
bool block_sigchld(sigset_t *const orig_sigmask){
 
586
  sigset_t sigchld_sigmask;
 
587
  if(sigemptyset(&sigchld_sigmask) < 0){
 
588
    error(0, errno, "Failed to empty signal set");
 
589
    return false;
 
590
  }
 
591
  if(sigaddset(&sigchld_sigmask, SIGCHLD) < 0){
 
592
    error(0, errno, "Failed to add SIGCHLD to signal set");
 
593
    return false;
 
594
  }
 
595
  if(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask, orig_sigmask) != 0){
 
596
    error(0, errno, "Failed to block SIGCHLD signal");
 
597
    return false;
 
598
  }
 
599
  return true;
 
600
}
 
601
 
 
602
__attribute__((nonnull, warn_unused_result, const))
 
603
bool restore_sigmask(const sigset_t *const orig_sigmask){
 
604
  if(pthread_sigmask(SIG_SETMASK, orig_sigmask, NULL) != 0){
 
605
    error(0, errno, "Failed to restore blocked signals");
 
606
    return false;
 
607
  }
 
608
  return true;
 
609
}
 
610
 
 
611
__attribute__((nonnull, warn_unused_result))
 
612
bool setup_signal_handler(struct sigaction *const old_sigchld_action){
 
613
  struct sigaction sigchld_action = {
 
614
    .sa_handler=handle_sigchld,
 
615
    .sa_flags=SA_RESTART | SA_NOCLDSTOP,
 
616
  };
 
617
  /* Set all signals in "sa_mask" struct member; this makes all
 
618
     signals automatically blocked during signal handler */
 
619
  if(sigfillset(&sigchld_action.sa_mask) != 0){
 
620
    error(0, errno, "Failed to do sigfillset()");
 
621
    return false;
 
622
  }
 
623
  if(sigaction(SIGCHLD, &sigchld_action, old_sigchld_action) != 0){
 
624
    error(0, errno, "Failed to set SIGCHLD signal handler");
 
625
    return false;
 
626
  }
 
627
  return true;
 
628
}
 
629
 
 
630
__attribute__((nonnull, warn_unused_result))
 
631
bool restore_signal_handler(const struct sigaction *const
 
632
                            old_sigchld_action){
 
633
  if(sigaction(SIGCHLD, old_sigchld_action, NULL) != 0){
 
634
    error(0, errno, "Failed to restore signal handler");
 
635
    return false;
 
636
  }
 
637
  return true;
 
638
}
 
639
 
 
640
__attribute__((warn_unused_result, malloc))
 
641
task_queue *create_queue(void){
 
642
  task_queue *queue = malloc(sizeof(task_queue));
 
643
  if(queue){
 
644
    queue->tasks = NULL;
 
645
    queue->length = 0;
 
646
    queue->allocated = 0;
 
647
    queue->next_run = 0;
 
648
  }
 
649
  return queue;
 
650
}
 
651
 
 
652
__attribute__((nonnull, warn_unused_result))
 
653
bool add_to_queue(task_queue *const queue, const task_context task){
 
654
  if((queue->length + 1) > (SIZE_MAX / sizeof(task_context))){
 
655
    /* overflow */
 
656
    error(0, ENOMEM, "Failed to allocate %" PRIuMAX
 
657
          " tasks for queue->tasks", (uintmax_t)(queue->length + 1));
 
658
    errno = ENOMEM;
 
659
    return false;
 
660
  }
 
661
  const size_t needed_size = sizeof(task_context)*(queue->length + 1);
 
662
  if(needed_size > (queue->allocated)){
 
663
    task_context *const new_tasks = realloc(queue->tasks,
 
664
                                            needed_size);
 
665
    if(new_tasks == NULL){
 
666
      error(0, errno, "Failed to allocate %" PRIuMAX
 
667
            " bytes for queue->tasks", (uintmax_t)needed_size);
 
668
      return false;
 
669
    }
 
670
    queue->tasks = new_tasks;
 
671
    queue->allocated = needed_size;
 
672
  }
 
673
  /* Using memcpy here is necessary because doing */
 
674
  /* queue->tasks[queue->length++] = task; */
 
675
  /* would violate const-ness of task members */
 
676
  memcpy(&(queue->tasks[queue->length++]), &task,
 
677
         sizeof(task_context));
 
678
  return true;
 
679
}
 
680
 
 
681
__attribute__((nonnull))
 
682
void cleanup_task(const task_context *const task){
 
683
  const error_t saved_errno = errno;
 
684
  /* free and close all task data */
 
685
  free(task->question_filename);
 
686
  if(task->filename != task->question_filename){
 
687
    free(task->filename);
 
688
  }
 
689
  if(task->pid > 0){
 
690
    kill(task->pid, SIGTERM);
 
691
  }
 
692
  if(task->fd > 0){
 
693
    close(task->fd);
 
694
  }
 
695
  errno = saved_errno;
 
696
}
 
697
 
 
698
__attribute__((nonnull))
 
699
void free_queue(task_queue *const queue){
 
700
  free(queue->tasks);
 
701
  free(queue);
 
702
}
 
703
 
 
704
__attribute__((nonnull))
 
705
void cleanup_queue(task_queue *const *const queue){
 
706
  if(*queue == NULL){
 
707
    return;
 
708
  }
 
709
  for(size_t i = 0; i < (*queue)->length; i++){
 
710
    const task_context *const task = ((*queue)->tasks)+i;
 
711
    cleanup_task(task);
 
712
  }
 
713
  free_queue(*queue);
 
714
}
 
715
 
 
716
__attribute__((pure, nonnull, warn_unused_result))
 
717
bool queue_has_question(const task_queue *const queue){
 
718
  for(size_t i=0; i < queue->length; i++){
 
719
    if(queue->tasks[i].question_filename != NULL){
 
720
      return true;
 
721
    }
 
722
  }
 
723
  return false;
 
724
}
 
725
 
 
726
__attribute__((nonnull))
 
727
void cleanup_close(const int *const fd){
 
728
  const error_t saved_errno = errno;
 
729
  close(*fd);
 
730
  errno = saved_errno;
 
731
}
 
732
 
 
733
__attribute__((nonnull))
 
734
void cleanup_string(char *const *const ptr){
 
735
  free(*ptr);
 
736
}
 
737
 
 
738
__attribute__((nonnull))
 
739
void cleanup_buffer(buffer *buf){
 
740
  if(buf->allocated > 0){
 
741
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
742
    explicit_bzero(buf->data, buf->allocated);
 
743
#else
 
744
    memset(buf->data, '\0', buf->allocated);
 
745
#endif
 
746
  }
 
747
  if(buf->data != NULL){
 
748
    if(munlock(buf->data, buf->allocated) != 0){
 
749
      error(0, errno, "Failed to unlock memory of old buffer");
 
750
    }
 
751
    free(buf->data);
 
752
    buf->data = NULL;
 
753
  }
 
754
  buf->length = 0;
 
755
  buf->allocated = 0;
 
756
}
 
757
 
 
758
__attribute__((pure, nonnull, warn_unused_result))
 
759
bool string_set_contains(const string_set set, const char *const str){
 
760
  for(const char *s = set.argz; s != NULL and set.argz_len > 0;
 
761
      s = argz_next(set.argz, set.argz_len, s)){
 
762
    if(strcmp(s, str) == 0){
 
763
      return true;
 
764
    }
 
765
  }
 
766
  return false;
 
767
}
 
768
 
 
769
__attribute__((nonnull, warn_unused_result))
 
770
bool string_set_add(string_set *const set, const char *const str){
 
771
  if(string_set_contains(*set, str)){
 
772
    return true;
 
773
  }
 
774
  error_t error = argz_add(&set->argz, &set->argz_len, str);
 
775
  if(error == 0){
 
776
    return true;
 
777
  }
 
778
  errno = error;
 
779
  return false;
 
780
}
 
781
 
 
782
__attribute__((nonnull))
 
783
void string_set_clear(string_set *set){
 
784
  free(set->argz);
 
785
  set->argz = NULL;
 
786
  set->argz_len = 0;
 
787
}
 
788
 
 
789
__attribute__((nonnull))
 
790
void string_set_swap(string_set *const set1, string_set *const set2){
 
791
  /* Swap contents of two string sets */
 
792
  {
 
793
    char *const tmp_argz = set1->argz;
 
794
    set1->argz = set2->argz;
 
795
    set2->argz = tmp_argz;
 
796
  }
 
797
  {
 
798
    const size_t tmp_argz_len = set1->argz_len;
 
799
    set1->argz_len = set2->argz_len;
 
800
    set2->argz_len = tmp_argz_len;
 
801
  }
 
802
}
 
803
 
 
804
__attribute__((nonnull, warn_unused_result))
 
805
bool start_mandos_client(task_queue *const queue,
 
806
                         const int epoll_fd,
 
807
                         bool *const mandos_client_exited,
 
808
                         bool *const quit_now, buffer *const password,
 
809
                         bool *const password_is_read,
 
810
                         const struct sigaction *const
 
811
                         old_sigchld_action, const sigset_t sigmask,
 
812
                         const char *const helper_directory,
 
813
                         const uid_t user, const gid_t group,
 
814
                         const char *const *const argv){
 
815
  int pipefds[2];
 
816
  if(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK) != 0){
 
817
    error(0, errno, "Failed to pipe2(..., O_CLOEXEC | O_NONBLOCK)");
 
818
    return false;
 
819
  }
 
820
 
 
821
  const pid_t pid = fork();
 
822
  if(pid == 0){
 
823
    if(not restore_signal_handler(old_sigchld_action)){
 
824
      _exit(EXIT_FAILURE);
 
825
    }
 
826
    if(not restore_sigmask(&sigmask)){
 
827
      _exit(EXIT_FAILURE);
 
828
    }
 
829
    if(close(pipefds[0]) != 0){
 
830
      error(0, errno, "Failed to close() parent pipe fd");
 
831
      _exit(EXIT_FAILURE);
 
832
    }
 
833
    if(dup2(pipefds[1], STDOUT_FILENO) == -1){
 
834
      error(0, errno, "Failed to dup2() pipe fd to stdout");
 
835
      _exit(EXIT_FAILURE);
 
836
    }
 
837
    if(close(pipefds[1]) != 0){
 
838
      error(0, errno, "Failed to close() old child pipe fd");
 
839
      _exit(EXIT_FAILURE);
 
840
    }
 
841
    if(setenv("MANDOSPLUGINHELPERDIR", helper_directory, 1) != 0){
 
842
      error(0, errno, "Failed to setenv(\"MANDOSPLUGINHELPERDIR\","
 
843
            " \"%s\", 1)", helper_directory);
 
844
      _exit(EXIT_FAILURE);
 
845
    }
 
846
    if(group != 0 and setresgid(group, 0, 0) == -1){
 
847
      error(0, errno, "Failed to setresgid(-1, %" PRIuMAX ", %"
 
848
            PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
 
849
      _exit(EXIT_FAILURE);
 
850
    }
 
851
    if(user != 0 and setresuid(user, 0, 0) == -1){
 
852
      error(0, errno, "Failed to setresuid(-1, %" PRIuMAX ", %"
 
853
            PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
 
854
      _exit(EXIT_FAILURE);
 
855
    }
 
856
#ifdef __GNUC__
 
857
#pragma GCC diagnostic push
 
858
    /* For historical reasons, the "argv" argument to execv() is not
 
859
       const, but it is safe to override this. */
 
860
#pragma GCC diagnostic ignored "-Wcast-qual"
 
861
#endif
 
862
    execv(argv[0], (char **)argv);
 
863
#ifdef __GNUC__
 
864
#pragma GCC diagnostic pop
 
865
#endif
 
866
    error(0, errno, "execv(\"%s\", ...) failed", argv[0]);
 
867
    _exit(EXIT_FAILURE);
 
868
  }
 
869
  close(pipefds[1]);
 
870
 
 
871
  if(pid == -1){
 
872
    error(0, errno, "Failed to fork()");
 
873
    close(pipefds[0]);
 
874
    return false;
 
875
  }
 
876
 
 
877
  if(not add_to_queue(queue, (task_context){
 
878
        .func=wait_for_mandos_client_exit,
 
879
        .pid=pid,
 
880
        .mandos_client_exited=mandos_client_exited,
 
881
        .quit_now=quit_now,
 
882
      })){
 
883
    error(0, errno, "Failed to add wait_for_mandos_client to queue");
 
884
    close(pipefds[0]);
 
885
    return false;
 
886
  }
 
887
 
 
888
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, pipefds[0],
 
889
                            &(struct epoll_event)
 
890
                            { .events=EPOLLIN | EPOLLRDHUP });
 
891
  if(ret != 0 and errno != EEXIST){
 
892
    error(0, errno, "Failed to add file descriptor to epoll set");
 
893
    close(pipefds[0]);
 
894
    return false;
 
895
  }
 
896
 
 
897
  return add_to_queue(queue, (task_context){
 
898
      .func=read_mandos_client_output,
 
899
      .epoll_fd=epoll_fd,
 
900
      .fd=pipefds[0],
 
901
      .quit_now=quit_now,
 
902
      .password=password,
 
903
      .password_is_read=password_is_read,
 
904
    });
 
905
}
 
906
 
 
907
__attribute__((nonnull))
 
908
void wait_for_mandos_client_exit(const task_context task,
 
909
                                 task_queue *const queue){
 
910
  const pid_t pid = task.pid;
 
911
  bool *const mandos_client_exited = task.mandos_client_exited;
 
912
  bool *const quit_now = task.quit_now;
 
913
 
 
914
  int status;
 
915
  switch(waitpid(pid, &status, WNOHANG)){
 
916
  case 0:                       /* Not exited yet */
 
917
    if(not add_to_queue(queue, task)){
 
918
      error(0, errno, "Failed to add myself to queue");
 
919
      *quit_now = true;
 
920
    }
 
921
    break;
 
922
  case -1:                      /* Error */
 
923
    error(0, errno, "waitpid(%" PRIdMAX ") failed", (intmax_t)pid);
 
924
    if(errno != ECHILD){
 
925
      kill(pid, SIGTERM);
 
926
    }
 
927
    *quit_now = true;
 
928
    break;
 
929
  default:                      /* Has exited */
 
930
    *mandos_client_exited = true;
 
931
    if((not WIFEXITED(status))
 
932
       or (WEXITSTATUS(status) != EXIT_SUCCESS)){
 
933
      error(0, 0, "Mandos client failed or was killed");
 
934
      *quit_now = true;
 
935
    }
 
936
  }
 
937
}
 
938
 
 
939
__attribute__((nonnull))
 
940
void read_mandos_client_output(const task_context task,
 
941
                               task_queue *const queue){
 
942
  buffer *const password = task.password;
 
943
  bool *const quit_now = task.quit_now;
 
944
  bool *const password_is_read = task.password_is_read;
 
945
  const int fd = task.fd;
 
946
  const int epoll_fd = task.epoll_fd;
 
947
 
 
948
  const size_t new_potential_size = (password->length + PIPE_BUF);
 
949
  if(password->allocated < new_potential_size){
 
950
    char *const new_buffer = calloc(new_potential_size, 1);
 
951
    if(new_buffer == NULL){
 
952
      error(0, errno, "Failed to allocate %" PRIuMAX
 
953
            " bytes for password", (uintmax_t)new_potential_size);
 
954
      *quit_now = true;
 
955
      close(fd);
 
956
      return;
 
957
    }
 
958
    if(mlock(new_buffer, new_potential_size) != 0){
 
959
      /* Warn but do not treat as fatal error */
 
960
      if(errno != EPERM and errno != ENOMEM){
 
961
        error(0, errno, "Failed to lock memory for password");
 
962
      }
 
963
    }
 
964
    if(password->length > 0){
 
965
      memcpy(new_buffer, password->data, password->length);
 
966
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
967
      explicit_bzero(password->data, password->allocated);
 
968
#else
 
969
      memset(password->data, '\0', password->allocated);
 
970
#endif
 
971
    }
 
972
    if(password->data != NULL){
 
973
      if(munlock(password->data, password->allocated) != 0){
 
974
        error(0, errno, "Failed to unlock memory of old buffer");
 
975
      }
 
976
      free(password->data);
 
977
    }
 
978
    password->data = new_buffer;
 
979
    password->allocated = new_potential_size;
 
980
  }
 
981
 
 
982
  const ssize_t read_length = read(fd, password->data
 
983
                                   + password->length, PIPE_BUF);
 
984
 
 
985
  if(read_length == 0){ /* EOF */
 
986
    *password_is_read = true;
 
987
    close(fd);
 
988
    return;
 
989
  }
 
990
  if(read_length < 0 and errno != EAGAIN){ /* Actual error */
 
991
    error(0, errno, "Failed to read password from Mandos client");
 
992
    *quit_now = true;
 
993
    close(fd);
 
994
    return;
 
995
  }
 
996
  if(read_length > 0){          /* Data has been read */
 
997
    password->length += (size_t)read_length;
 
998
  }
 
999
 
 
1000
  /* Either data was read, or EAGAIN was indicated, meaning no data
 
1001
     available yet */
 
1002
 
 
1003
  /* Re-add the fd to the epoll set */
 
1004
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1005
                            &(struct epoll_event)
 
1006
                            { .events=EPOLLIN | EPOLLRDHUP });
 
1007
  if(ret != 0 and errno != EEXIST){
 
1008
    error(0, errno, "Failed to re-add file descriptor to epoll set");
 
1009
    *quit_now = true;
 
1010
    close(fd);
 
1011
    return;
 
1012
  }
 
1013
 
 
1014
  /* Re-add myself to the queue */
 
1015
  if(not add_to_queue(queue, task)){
 
1016
    error(0, errno, "Failed to add myself to queue");
 
1017
    *quit_now = true;
 
1018
    close(fd);
 
1019
  }
 
1020
}
 
1021
 
 
1022
__attribute__((nonnull, warn_unused_result))
 
1023
bool add_inotify_dir_watch(task_queue *const queue,
 
1024
                           const int epoll_fd, bool *const quit_now,
 
1025
                           buffer *const password,
 
1026
                           const char *const dir,
 
1027
                           string_set *cancelled_filenames,
 
1028
                           const mono_microsecs *const current_time,
 
1029
                           bool *const mandos_client_exited,
 
1030
                           bool *const password_is_read){
 
1031
  const int fd = inotify_init1(IN_NONBLOCK | IN_CLOEXEC);
 
1032
  if(fd == -1){
 
1033
    error(0, errno, "Failed to create inotify instance");
 
1034
    return false;
 
1035
  }
 
1036
 
 
1037
  if(inotify_add_watch(fd, dir, IN_CLOSE_WRITE | IN_MOVED_TO
 
1038
                       | IN_MOVED_FROM| IN_DELETE | IN_EXCL_UNLINK
 
1039
                       | IN_ONLYDIR)
 
1040
     == -1){
 
1041
    error(0, errno, "Failed to create inotify watch on %s", dir);
 
1042
    return false;
 
1043
  }
 
1044
 
 
1045
  /* Add the inotify fd to the epoll set */
 
1046
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1047
                            &(struct epoll_event)
 
1048
                            { .events=EPOLLIN | EPOLLRDHUP });
 
1049
  if(ret != 0 and errno != EEXIST){
 
1050
    error(0, errno, "Failed to add file descriptor to epoll set");
 
1051
    close(fd);
 
1052
    return false;
 
1053
  }
 
1054
 
 
1055
  const task_context read_inotify_event_task = {
 
1056
    .func=read_inotify_event,
 
1057
    .epoll_fd=epoll_fd,
 
1058
    .quit_now=quit_now,
 
1059
    .password=password,
 
1060
    .fd=fd,
 
1061
    .filename=strdup(dir),
 
1062
    .cancelled_filenames=cancelled_filenames,
 
1063
    .current_time=current_time,
 
1064
    .mandos_client_exited=mandos_client_exited,
 
1065
    .password_is_read=password_is_read,
 
1066
  };
 
1067
  if(read_inotify_event_task.filename == NULL){
 
1068
    error(0, errno, "Failed to strdup(\"%s\")", dir);
 
1069
    close(fd);
 
1070
    return false;
 
1071
  }
 
1072
 
 
1073
  return add_to_queue(queue, read_inotify_event_task);
 
1074
}
 
1075
 
 
1076
__attribute__((nonnull))
 
1077
void read_inotify_event(const task_context task,
 
1078
                        task_queue *const queue){
 
1079
  const int fd = task.fd;
 
1080
  const int epoll_fd = task.epoll_fd;
 
1081
  char *const filename = task.filename;
 
1082
  bool *quit_now = task.quit_now;
 
1083
  buffer *const password = task.password;
 
1084
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1085
  const mono_microsecs *const current_time = task.current_time;
 
1086
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1087
  bool *const password_is_read = task.password_is_read;
 
1088
 
 
1089
  /* "sufficient to read at least one event." - inotify(7) */
 
1090
  const size_t ievent_size = (sizeof(struct inotify_event)
 
1091
                              + NAME_MAX + 1);
 
1092
  struct {
 
1093
    struct inotify_event event;
 
1094
    char name_buffer[NAME_MAX + 1];
 
1095
  } ievent_buffer;
 
1096
  struct inotify_event *const ievent = &ievent_buffer.event;
 
1097
 
 
1098
  const ssize_t read_length = read(fd, ievent, ievent_size);
 
1099
  if(read_length == 0){ /* EOF */
 
1100
    error(0, 0, "Got EOF from inotify fd for directory %s", filename);
 
1101
    *quit_now = true;
 
1102
    cleanup_task(&task);
 
1103
    return;
 
1104
  }
 
1105
  if(read_length < 0 and errno != EAGAIN){ /* Actual error */
 
1106
    error(0, errno, "Failed to read from inotify fd for directory %s",
 
1107
          filename);
 
1108
    *quit_now = true;
 
1109
    cleanup_task(&task);
 
1110
    return;
 
1111
  }
 
1112
  if(read_length > 0            /* Data has been read */
 
1113
     and fnmatch("ask.*", ievent->name, FNM_FILE_NAME) == 0){
 
1114
    char *question_filename = NULL;
 
1115
    const ssize_t question_filename_length
 
1116
      = asprintf(&question_filename, "%s/%s", filename, ievent->name);
 
1117
    if(question_filename_length < 0){
 
1118
      error(0, errno, "Failed to create file name from directory name"
 
1119
            " %s and file name %s", filename, ievent->name);
 
1120
    } else {
 
1121
      if(ievent->mask & (IN_CLOSE_WRITE | IN_MOVED_TO)){
 
1122
        if(not add_to_queue(queue, (task_context){
 
1123
              .func=open_and_parse_question,
 
1124
              .epoll_fd=epoll_fd,
 
1125
              .question_filename=question_filename,
 
1126
              .filename=question_filename,
 
1127
              .password=password,
 
1128
              .cancelled_filenames=cancelled_filenames,
 
1129
              .current_time=current_time,
 
1130
              .mandos_client_exited=mandos_client_exited,
 
1131
              .password_is_read=password_is_read,
 
1132
            })){
 
1133
          error(0, errno, "Failed to add open_and_parse_question task"
 
1134
                " for file name %s to queue", filename);
 
1135
        } else {
 
1136
          /* Force the added task (open_and_parse_question) to run
 
1137
             immediately */
 
1138
          queue->next_run = 1;
 
1139
        }
 
1140
      } else if(ievent->mask & (IN_MOVED_FROM | IN_DELETE)){
 
1141
        if(not string_set_add(cancelled_filenames,
 
1142
                              question_filename)){
 
1143
          error(0, errno, "Could not add question %s to"
 
1144
                " cancelled_questions", question_filename);
 
1145
          *quit_now = true;
 
1146
          free(question_filename);
 
1147
          cleanup_task(&task);
 
1148
          return;
 
1149
        }
 
1150
        free(question_filename);
 
1151
      }
 
1152
    }
 
1153
  }
 
1154
 
 
1155
  /* Either data was read, or EAGAIN was indicated, meaning no data
 
1156
     available yet */
 
1157
 
 
1158
  /* Re-add myself to the queue */
 
1159
  if(not add_to_queue(queue, task)){
 
1160
    error(0, errno, "Failed to re-add read_inotify_event(%s) to"
 
1161
          " queue", filename);
 
1162
    *quit_now = true;
 
1163
    cleanup_task(&task);
 
1164
    return;
 
1165
  }
 
1166
 
 
1167
  /* Re-add the fd to the epoll set */
 
1168
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1169
                            &(struct epoll_event)
 
1170
                            { .events=EPOLLIN | EPOLLRDHUP });
 
1171
  if(ret != 0 and errno != EEXIST){
 
1172
    error(0, errno, "Failed to re-add inotify file descriptor %d for"
 
1173
          " directory %s to epoll set", fd, filename);
 
1174
    /* Force the added task (read_inotify_event) to run again, at most
 
1175
       one second from now */
 
1176
    if((queue->next_run == 0)
 
1177
       or (queue->next_run > (*current_time + 1000000))){
 
1178
      queue->next_run = *current_time + 1000000;
 
1179
    }
 
1180
  }
 
1181
}
 
1182
 
 
1183
__attribute__((nonnull))
 
1184
void open_and_parse_question(const task_context task,
 
1185
                             task_queue *const queue){
 
1186
  __attribute__((cleanup(cleanup_string)))
 
1187
    char *question_filename = task.question_filename;
 
1188
  const int epoll_fd = task.epoll_fd;
 
1189
  buffer *const password = task.password;
 
1190
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1191
  const mono_microsecs *const current_time = task.current_time;
 
1192
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1193
  bool *const password_is_read = task.password_is_read;
 
1194
 
 
1195
  /* We use the GLib "Key-value file parser" functions to parse the
 
1196
     question file.  See <https://www.freedesktop.org/wiki/Software
 
1197
     /systemd/PasswordAgents/> for specification of contents */
 
1198
  __attribute__((nonnull))
 
1199
    void cleanup_g_key_file(GKeyFile **key_file){
 
1200
    if(*key_file != NULL){
 
1201
      g_key_file_free(*key_file);
 
1202
    }
 
1203
  }
 
1204
 
 
1205
  __attribute__((cleanup(cleanup_g_key_file)))
 
1206
    GKeyFile *key_file = g_key_file_new();
 
1207
  if(key_file == NULL){
 
1208
    error(0, errno, "Failed g_key_file_new() for \"%s\"",
 
1209
          question_filename);
 
1210
    return;
 
1211
  }
 
1212
  GError *glib_error = NULL;
 
1213
  if(g_key_file_load_from_file(key_file, question_filename,
 
1214
                               G_KEY_FILE_NONE, &glib_error) != TRUE){
 
1215
    /* If a file was removed, we should ignore it, so */
 
1216
    /* only show error message if file actually existed */
 
1217
    if(glib_error->code != G_FILE_ERROR_NOENT){
 
1218
      error(0, 0, "Failed to load question data from file \"%s\": %s",
 
1219
            question_filename, glib_error->message);
 
1220
    }
 
1221
    return;
 
1222
  }
 
1223
 
 
1224
  __attribute__((cleanup(cleanup_string)))
 
1225
    char *socket_name = g_key_file_get_string(key_file, "Ask",
 
1226
                                              "Socket",
 
1227
                                              &glib_error);
 
1228
  if(socket_name == NULL){
 
1229
    error(0, 0, "Question file \"%s\" did not contain \"Socket\": %s",
 
1230
          question_filename, glib_error->message);
 
1231
    return;
 
1232
  }
 
1233
 
 
1234
  if(strlen(socket_name) == 0){
 
1235
    error(0, 0, "Question file \"%s\" had empty \"Socket\" value",
 
1236
          question_filename);
 
1237
    return;
 
1238
  }
 
1239
 
 
1240
  const guint64 pid = g_key_file_get_uint64(key_file, "Ask", "PID",
 
1241
                                            &glib_error);
 
1242
  if(glib_error != NULL){
 
1243
    error(0, 0, "Question file \"%s\" contained bad \"PID\": %s",
 
1244
          question_filename, glib_error->message);
 
1245
    return;
 
1246
  }
 
1247
 
 
1248
  if((pid != (guint64)((pid_t)pid))
 
1249
     or (kill((pid_t)pid, 0) != 0)){
 
1250
    error(0, 0, "PID %" PRIuMAX " in question file \"%s\" is bad or"
 
1251
          " does not exist", (uintmax_t)pid, question_filename);
 
1252
    return;
 
1253
  }
 
1254
 
 
1255
  guint64 notafter = g_key_file_get_uint64(key_file, "Ask",
 
1256
                                           "NotAfter", &glib_error);
 
1257
  if(glib_error != NULL){
 
1258
    if(glib_error->code != G_KEY_FILE_ERROR_KEY_NOT_FOUND){
 
1259
      error(0, 0, "Question file \"%s\" contained bad \"NotAfter\":"
 
1260
            " %s", question_filename, glib_error->message);
 
1261
    }
 
1262
    notafter = 0;
 
1263
  }
 
1264
  if(notafter != 0){
 
1265
    if(queue->next_run == 0 or (queue->next_run > notafter)){
 
1266
      queue->next_run = notafter;
 
1267
    }
 
1268
    if(*current_time >= notafter){
 
1269
      return;
 
1270
    }
 
1271
  }
 
1272
 
 
1273
  const task_context connect_question_socket_task = {
 
1274
    .func=connect_question_socket,
 
1275
    .question_filename=strdup(question_filename),
 
1276
    .epoll_fd=epoll_fd,
 
1277
    .password=password,
 
1278
    .filename=strdup(socket_name),
 
1279
    .cancelled_filenames=task.cancelled_filenames,
 
1280
    .mandos_client_exited=mandos_client_exited,
 
1281
    .password_is_read=password_is_read,
 
1282
    .current_time=current_time,
 
1283
  };
 
1284
  if(connect_question_socket_task.question_filename == NULL
 
1285
     or connect_question_socket_task.filename == NULL
 
1286
     or not add_to_queue(queue, connect_question_socket_task)){
 
1287
    error(0, errno, "Failed to add connect_question_socket for socket"
 
1288
          " %s (from \"%s\") to queue", socket_name,
 
1289
          question_filename);
 
1290
    cleanup_task(&connect_question_socket_task);
 
1291
    return;
 
1292
  }
 
1293
  /* Force the added task (connect_question_socket) to run
 
1294
     immediately */
 
1295
  queue->next_run = 1;
 
1296
 
 
1297
  if(notafter > 0){
 
1298
    char *const dup_filename = strdup(question_filename);
 
1299
    const task_context cancel_old_question_task = {
 
1300
      .func=cancel_old_question,
 
1301
      .question_filename=dup_filename,
 
1302
      .notafter=notafter,
 
1303
      .filename=dup_filename,
 
1304
      .cancelled_filenames=cancelled_filenames,
 
1305
      .current_time=current_time,
 
1306
    };
 
1307
    if(cancel_old_question_task.question_filename == NULL
 
1308
       or not add_to_queue(queue, cancel_old_question_task)){
 
1309
      error(0, errno, "Failed to add cancel_old_question for file "
 
1310
            "\"%s\" to queue", question_filename);
 
1311
      cleanup_task(&cancel_old_question_task);
 
1312
      return;
 
1313
    }
 
1314
  }
 
1315
}
 
1316
 
 
1317
__attribute__((nonnull))
 
1318
void cancel_old_question(const task_context task,
 
1319
                         task_queue *const queue){
 
1320
  char *const question_filename = task.question_filename;
 
1321
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1322
  const mono_microsecs notafter = task.notafter;
 
1323
  const mono_microsecs *const current_time = task.current_time;
 
1324
 
 
1325
  if(*current_time >= notafter){
 
1326
    if(not string_set_add(cancelled_filenames, question_filename)){
 
1327
      error(0, errno, "Failed to cancel question for file %s",
 
1328
            question_filename);
 
1329
    }
 
1330
    cleanup_task(&task);
 
1331
    return;
 
1332
  }
 
1333
 
 
1334
  if(not add_to_queue(queue, task)){
 
1335
    error(0, errno, "Failed to add cancel_old_question for file "
 
1336
          "%s to queue", question_filename);
 
1337
    cleanup_task(&task);
 
1338
    return;
 
1339
  }
 
1340
 
 
1341
  if((queue->next_run == 0) or (queue->next_run > notafter)){
 
1342
    queue->next_run = notafter;
 
1343
  }
 
1344
}
 
1345
 
 
1346
__attribute__((nonnull))
 
1347
void connect_question_socket(const task_context task,
 
1348
                             task_queue *const queue){
 
1349
  char *const question_filename = task.question_filename;
 
1350
  char *const filename = task.filename;
 
1351
  const int epoll_fd = task.epoll_fd;
 
1352
  buffer *const password = task.password;
 
1353
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1354
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1355
  bool *const password_is_read = task.password_is_read;
 
1356
  const mono_microsecs *const current_time = task.current_time;
 
1357
 
 
1358
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
1359
 
 
1360
  if(sizeof(sock_name.sun_path) <= strlen(filename)){
 
1361
    error(0, 0, "Socket filename is larger than"
 
1362
          " sizeof(sockaddr_un.sun_path); %" PRIuMAX ": \"%s\"",
 
1363
          (uintmax_t)sizeof(sock_name.sun_path), filename);
 
1364
    if(not string_set_add(cancelled_filenames, question_filename)){
 
1365
      error(0, errno, "Failed to cancel question for file %s",
 
1366
            question_filename);
 
1367
    }
 
1368
    cleanup_task(&task);
 
1369
    return;
 
1370
  }
 
1371
 
 
1372
  const int fd = socket(PF_LOCAL, SOCK_DGRAM
 
1373
                        | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
1374
  if(fd < 0){
 
1375
    error(0, errno,
 
1376
          "Failed to create socket(PF_LOCAL, SOCK_DGRAM, 0)");
 
1377
    if(not add_to_queue(queue, task)){
 
1378
      error(0, errno, "Failed to add connect_question_socket for file"
 
1379
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1380
            filename);
 
1381
      cleanup_task(&task);
 
1382
    } else {
 
1383
      /* Force the added task (connect_question_socket) to run
 
1384
         immediately */
 
1385
      queue->next_run = 1;
 
1386
    }
 
1387
    return;
 
1388
  }
 
1389
 
 
1390
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
1391
  if(connect(fd, (struct sockaddr *)&sock_name,
 
1392
             (socklen_t)SUN_LEN(&sock_name)) != 0){
 
1393
    error(0, errno, "Failed to connect socket to \"%s\"", filename);
 
1394
    if(not add_to_queue(queue, task)){
 
1395
      error(0, errno, "Failed to add connect_question_socket for file"
 
1396
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1397
            filename);
 
1398
      cleanup_task(&task);
 
1399
    } else {
 
1400
      /* Force the added task (connect_question_socket) to run again,
 
1401
         at most one second from now */
 
1402
      if((queue->next_run == 0)
 
1403
         or (queue->next_run > (*current_time + 1000000))){
 
1404
        queue->next_run = *current_time + 1000000;
 
1405
      }
 
1406
    }
 
1407
    return;
 
1408
  }
 
1409
 
 
1410
  /* Not necessary, but we can try, and merely warn on failure */
 
1411
  if(shutdown(fd, SHUT_RD) != 0){
 
1412
    error(0, errno, "Failed to shutdown reading from socket \"%s\"",
 
1413
          filename);
 
1414
  }
 
1415
 
 
1416
  /* Add the fd to the epoll set */
 
1417
  if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1418
               &(struct epoll_event){ .events=EPOLLOUT })
 
1419
     != 0){
 
1420
    error(0, errno, "Failed to add inotify file descriptor %d for"
 
1421
          " socket %s to epoll set", fd, filename);
 
1422
    if(not add_to_queue(queue, task)){
 
1423
      error(0, errno, "Failed to add connect_question_socket for file"
 
1424
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1425
            filename);
 
1426
      cleanup_task(&task);
 
1427
    } else {
 
1428
      /* Force the added task (connect_question_socket) to run again,
 
1429
         at most one second from now */
 
1430
      if((queue->next_run == 0)
 
1431
         or (queue->next_run > (*current_time + 1000000))){
 
1432
        queue->next_run = *current_time + 1000000;
 
1433
      }
 
1434
    }
 
1435
    return;
 
1436
  }
 
1437
 
 
1438
  /* add task send_password_to_socket to queue */
 
1439
  const task_context send_password_to_socket_task = {
 
1440
    .func=send_password_to_socket,
 
1441
    .question_filename=question_filename,
 
1442
    .filename=filename,
 
1443
    .epoll_fd=epoll_fd,
 
1444
    .fd=fd,
 
1445
    .password=password,
 
1446
    .cancelled_filenames=cancelled_filenames,
 
1447
    .mandos_client_exited=mandos_client_exited,
 
1448
    .password_is_read=password_is_read,
 
1449
    .current_time=current_time,
 
1450
  };
 
1451
 
 
1452
  if(not add_to_queue(queue, send_password_to_socket_task)){
 
1453
    error(0, errno, "Failed to add send_password_to_socket for"
 
1454
          " file \"%s\" and socket \"%s\" to queue",
 
1455
          question_filename, filename);
 
1456
    cleanup_task(&send_password_to_socket_task);
 
1457
  }
 
1458
}
 
1459
 
 
1460
__attribute__((nonnull))
 
1461
void send_password_to_socket(const task_context task,
 
1462
                             task_queue *const queue){
 
1463
  char *const question_filename=task.question_filename;
 
1464
  char *const filename=task.filename;
 
1465
  const int epoll_fd=task.epoll_fd;
 
1466
  const int fd=task.fd;
 
1467
  buffer *const password=task.password;
 
1468
  string_set *const cancelled_filenames=task.cancelled_filenames;
 
1469
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1470
  bool *const password_is_read = task.password_is_read;
 
1471
  const mono_microsecs *const current_time = task.current_time;
 
1472
 
 
1473
  if(*mandos_client_exited and *password_is_read){
 
1474
 
 
1475
    const size_t send_buffer_length = password->length + 2;
 
1476
    char *send_buffer = malloc(send_buffer_length);
 
1477
    if(send_buffer == NULL){
 
1478
      error(0, errno, "Failed to allocate send_buffer");
 
1479
    } else {
 
1480
      if(mlock(send_buffer, send_buffer_length) != 0){
 
1481
        /* Warn but do not treat as fatal error */
 
1482
        if(errno != EPERM and errno != ENOMEM){
 
1483
          error(0, errno, "Failed to lock memory for password"
 
1484
                " buffer");
 
1485
        }
 
1486
      }
 
1487
      /* “[…] send a single datagram to the socket consisting of the
 
1488
         password string either prefixed with "+" or with "-"
 
1489
         depending on whether the password entry was successful or
 
1490
         not. You may but don't have to include a final NUL byte in
 
1491
         your message.
 
1492
 
 
1493
         — <https://www.freedesktop.org/wiki/Software/systemd/
 
1494
         PasswordAgents/> (Wed 08 Oct 2014 02:14:28 AM UTC)
 
1495
      */
 
1496
      send_buffer[0] = '+';     /* Prefix with "+" */
 
1497
      /* Always add an extra NUL */
 
1498
      send_buffer[password->length + 1] = '\0';
 
1499
      if(password->length > 0){
 
1500
        memcpy(send_buffer + 1, password->data, password->length);
 
1501
      }
 
1502
      errno = 0;
 
1503
      ssize_t ssret = send(fd, send_buffer, send_buffer_length,
 
1504
                           MSG_NOSIGNAL);
 
1505
      const error_t saved_errno = errno;
 
1506
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
1507
      explicit_bzero(send_buffer, send_buffer_length);
 
1508
#else
 
1509
      memset(send_buffer, '\0', send_buffer_length);
 
1510
#endif
 
1511
      if(munlock(send_buffer, send_buffer_length) != 0){
 
1512
        error(0, errno, "Failed to unlock memory of send buffer");
 
1513
      }
 
1514
      free(send_buffer);
 
1515
      if(ssret < 0 or ssret < (ssize_t)send_buffer_length){
 
1516
        switch(saved_errno){
 
1517
        case EINTR:
 
1518
        case ENOBUFS:
 
1519
        case ENOMEM:
 
1520
        case EADDRINUSE:
 
1521
        case ECONNREFUSED:
 
1522
        case ECONNRESET:
 
1523
        case ENOENT:
 
1524
        case ETOOMANYREFS:
 
1525
        case EAGAIN:
 
1526
          /* Retry, below */
 
1527
          break;
 
1528
        case EMSGSIZE:
 
1529
          error(0, 0, "Password of size %" PRIuMAX " is too big",
 
1530
                (uintmax_t)password->length);
 
1531
#if __GNUC__ < 7
 
1532
          /* FALLTHROUGH */
 
1533
#else
 
1534
          __attribute__((fallthrough));
 
1535
#endif
 
1536
        case 0:
 
1537
          if(ssret >= 0 and ssret < (ssize_t)send_buffer_length){
 
1538
            error(0, 0, "Password only partially sent to socket");
 
1539
          }
 
1540
#if __GNUC__ < 7
 
1541
          /* FALLTHROUGH */
 
1542
#else
 
1543
          __attribute__((fallthrough));
 
1544
#endif
 
1545
        default:
 
1546
          error(0, saved_errno, "Failed to send() to socket %s",
 
1547
                filename);
 
1548
          if(not string_set_add(cancelled_filenames,
 
1549
                                question_filename)){
 
1550
            error(0, errno, "Failed to cancel question for file %s",
 
1551
                  question_filename);
 
1552
          }
 
1553
          cleanup_task(&task);
 
1554
          return;
 
1555
        }
 
1556
      } else {
 
1557
        /* Success */
 
1558
        cleanup_task(&task);
 
1559
        return;
 
1560
      }
 
1561
    }
 
1562
  }
 
1563
 
 
1564
  /* We failed or are not ready yet; retry later */
 
1565
 
 
1566
  if(not add_to_queue(queue, task)){
 
1567
    error(0, errno, "Failed to add send_password_to_socket for"
 
1568
          " file %s and socket %s to queue", question_filename,
 
1569
          filename);
 
1570
    cleanup_task(&task);
 
1571
  }
 
1572
 
 
1573
  /* Add the fd to the epoll set */
 
1574
  if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1575
               &(struct epoll_event){ .events=EPOLLOUT })
 
1576
     != 0){
 
1577
    error(0, errno, "Failed to add socket file descriptor %d for"
 
1578
          " socket %s to epoll set", fd, filename);
 
1579
    /* Force the added task (send_password_to_socket) to run again, at
 
1580
       most one second from now */
 
1581
    if((queue->next_run == 0)
 
1582
       or (queue->next_run > (*current_time + 1000000))){
 
1583
      queue->next_run = *current_time + 1000000;
 
1584
    }
 
1585
  }
 
1586
}
 
1587
 
 
1588
__attribute__((warn_unused_result))
 
1589
bool add_existing_questions(task_queue *const queue,
 
1590
                            const int epoll_fd,
 
1591
                            buffer *const password,
 
1592
                            string_set *cancelled_filenames,
 
1593
                            const mono_microsecs *const current_time,
 
1594
                            bool *const mandos_client_exited,
 
1595
                            bool *const password_is_read,
 
1596
                            const char *const dirname){
 
1597
  __attribute__((cleanup(cleanup_string)))
 
1598
    char *dir_pattern = NULL;
 
1599
  const int ret = asprintf(&dir_pattern, "%s/ask.*", dirname);
 
1600
  if(ret < 0 or dir_pattern == NULL){
 
1601
    error(0, errno, "Could not create glob pattern for directory %s",
 
1602
          dirname);
 
1603
    return false;
 
1604
  }
 
1605
  __attribute__((cleanup(globfree)))
 
1606
    glob_t question_filenames = {};
 
1607
  switch(glob(dir_pattern, GLOB_ERR | GLOB_NOSORT | GLOB_MARK,
 
1608
              NULL, &question_filenames)){
 
1609
  case GLOB_ABORTED:
 
1610
  default:
 
1611
    error(0, errno, "Failed to open directory %s", dirname);
 
1612
    return false;
 
1613
  case GLOB_NOMATCH:
 
1614
    error(0, errno, "There are no question files in %s", dirname);
 
1615
    return false;
 
1616
  case GLOB_NOSPACE:
 
1617
    error(0, errno, "Could not allocate memory for question file"
 
1618
          " names in %s", dirname);
 
1619
#if __GNUC__ < 7
 
1620
    /* FALLTHROUGH */
 
1621
#else
 
1622
    __attribute__((fallthrough));
 
1623
#endif
 
1624
  case 0:
 
1625
    for(size_t i = 0; i < question_filenames.gl_pathc; i++){
 
1626
      char *const question_filename = strdup(question_filenames
 
1627
                                             .gl_pathv[i]);
 
1628
      const task_context task = {
 
1629
        .func=open_and_parse_question,
 
1630
        .epoll_fd=epoll_fd,
 
1631
        .question_filename=question_filename,
 
1632
        .filename=question_filename,
 
1633
        .password=password,
 
1634
        .cancelled_filenames=cancelled_filenames,
 
1635
        .current_time=current_time,
 
1636
        .mandos_client_exited=mandos_client_exited,
 
1637
        .password_is_read=password_is_read,
 
1638
      };
 
1639
 
 
1640
      if(question_filename == NULL
 
1641
         or not add_to_queue(queue, task)){
 
1642
        error(0, errno, "Failed to add open_and_parse_question for"
 
1643
              " file %s to queue",
 
1644
              question_filenames.gl_pathv[i]);
 
1645
        free(question_filename);
 
1646
      } else {
 
1647
        queue->next_run = 1;
 
1648
      }
 
1649
    }
 
1650
    return true;
 
1651
  }
 
1652
}
 
1653
 
 
1654
__attribute__((nonnull, warn_unused_result))
 
1655
bool wait_for_event(const int epoll_fd,
 
1656
                    const mono_microsecs queue_next_run,
 
1657
                    const mono_microsecs current_time){
 
1658
  __attribute__((const))
 
1659
    int milliseconds_to_wait(const mono_microsecs currtime,
 
1660
                             const mono_microsecs nextrun){
 
1661
    if(currtime >= nextrun){
 
1662
      return 0;
 
1663
    }
 
1664
    const uintmax_t wait_time_ms = (nextrun - currtime) / 1000;
 
1665
    if(wait_time_ms > (uintmax_t)INT_MAX){
 
1666
      return INT_MAX;
 
1667
    }
 
1668
    return (int)wait_time_ms;
 
1669
  }
 
1670
 
 
1671
  const int wait_time_ms = milliseconds_to_wait(current_time,
 
1672
                                                queue_next_run);
 
1673
 
 
1674
  /* Prepare unblocking of SIGCHLD during epoll_pwait */
 
1675
  sigset_t temporary_unblocked_sigmask;
 
1676
  /* Get current signal mask */
 
1677
  if(pthread_sigmask(-1, NULL, &temporary_unblocked_sigmask) != 0){
 
1678
    return false;
 
1679
  }
 
1680
  /* Remove SIGCHLD from the signal mask */
 
1681
  if(sigdelset(&temporary_unblocked_sigmask, SIGCHLD) != 0){
 
1682
    return false;
 
1683
  }
 
1684
  struct epoll_event events[8]; /* Ignored */
 
1685
  int ret = epoll_pwait(epoll_fd, events,
 
1686
                        sizeof(events) / sizeof(struct epoll_event),
 
1687
                        queue_next_run == 0 ? -1 : (int)wait_time_ms,
 
1688
                        &temporary_unblocked_sigmask);
 
1689
  if(ret < 0 and errno != EINTR){
 
1690
    error(0, errno, "Failed epoll_pwait(epfd=%d, ..., timeout=%d,"
 
1691
          " ...", epoll_fd,
 
1692
          queue_next_run == 0 ? -1 : (int)wait_time_ms);
 
1693
    return false;
 
1694
  }
 
1695
  return clear_all_fds_from_epoll_set(epoll_fd);
 
1696
}
 
1697
 
 
1698
bool clear_all_fds_from_epoll_set(const int epoll_fd){
 
1699
  /* Create a new empty epoll set */
 
1700
  __attribute__((cleanup(cleanup_close)))
 
1701
    const int new_epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
1702
  if(new_epoll_fd < 0){
 
1703
    return false;
 
1704
  }
 
1705
  /* dup3() the new epoll set fd over the old one, replacing it */
 
1706
  if(dup3(new_epoll_fd, epoll_fd, O_CLOEXEC) < 0){
 
1707
    return false;
 
1708
  }
 
1709
  return true;
 
1710
}
 
1711
 
 
1712
__attribute__((nonnull, warn_unused_result))
 
1713
bool run_queue(task_queue **const queue,
 
1714
               string_set *const cancelled_filenames,
 
1715
               bool *const quit_now){
 
1716
 
 
1717
  task_queue *new_queue = create_queue();
 
1718
  if(new_queue == NULL){
 
1719
    return false;
 
1720
  }
 
1721
 
 
1722
  __attribute__((cleanup(string_set_clear)))
 
1723
    string_set old_cancelled_filenames = {};
 
1724
  string_set_swap(cancelled_filenames, &old_cancelled_filenames);
 
1725
 
 
1726
  /* Declare i outside the for loop, since we might need i after the
 
1727
     loop in case we aborted in the middle */
 
1728
  size_t i;
 
1729
  for(i=0; i < (*queue)->length and not *quit_now; i++){
 
1730
    task_context *const task = &((*queue)->tasks[i]);
 
1731
    const char *const question_filename = task->question_filename;
 
1732
    /* Skip any task referencing a cancelled question filename */
 
1733
    if(question_filename != NULL
 
1734
       and string_set_contains(old_cancelled_filenames,
 
1735
                               question_filename)){
 
1736
      cleanup_task(task);
 
1737
      continue;
 
1738
    }
 
1739
    task->func(*task, new_queue);
 
1740
  }
 
1741
 
 
1742
  if(*quit_now){
 
1743
    /* we might be in the middle of the queue, so clean up any
 
1744
       remaining tasks in the current queue */
 
1745
    for(; i < (*queue)->length; i++){
 
1746
      cleanup_task(&((*queue)->tasks[i]));
 
1747
    }
 
1748
    free_queue(*queue);
 
1749
    *queue = new_queue;
 
1750
    new_queue = NULL;
 
1751
    return false;
 
1752
  }
 
1753
  free_queue(*queue);
 
1754
  *queue = new_queue;
 
1755
  new_queue = NULL;
 
1756
 
 
1757
  return true;
 
1758
}
 
1759
 
 
1760
/* End of regular code section */
 
1761
 
 
1762
/* Start of tests section; here are the tests for the above code */
 
1763
 
 
1764
/* This "fixture" data structure is used by the test setup and
 
1765
   teardown functions */
 
1766
typedef struct {
 
1767
  struct sigaction orig_sigaction;
 
1768
  sigset_t orig_sigmask;
 
1769
} test_fixture;
 
1770
 
 
1771
static void test_setup(test_fixture *fixture,
 
1772
                       __attribute__((unused))
 
1773
                       gconstpointer user_data){
 
1774
  g_assert_true(setup_signal_handler(&fixture->orig_sigaction));
 
1775
  g_assert_true(block_sigchld(&fixture->orig_sigmask));
 
1776
}
 
1777
 
 
1778
static void test_teardown(test_fixture *fixture,
 
1779
                          __attribute__((unused))
 
1780
                          gconstpointer user_data){
 
1781
  g_assert_true(restore_signal_handler(&fixture->orig_sigaction));
 
1782
  g_assert_true(restore_sigmask(&fixture->orig_sigmask));
 
1783
}
 
1784
 
 
1785
/* Utility function used by tests to search queue for matching task */
 
1786
__attribute__((pure, nonnull, warn_unused_result))
 
1787
static task_context *find_matching_task(const task_queue *const queue,
 
1788
                                        const task_context task){
 
1789
  /* The argument "task" structure is a pattern to match; 0 in any
 
1790
     member means any value matches, otherwise the value must match.
 
1791
     The filename strings are compared by strcmp(), not by pointer. */
 
1792
  for(size_t i = 0; i < queue->length; i++){
 
1793
    task_context *const current_task = queue->tasks+i;
 
1794
    /* Check all members of task_context, if set to a non-zero value.
 
1795
       If a member does not match, continue to next task in queue */
 
1796
 
 
1797
    /* task_func *const func */
 
1798
    if(task.func != NULL and current_task->func != task.func){
 
1799
      continue;
 
1800
    }
 
1801
    /* char *const question_filename; */
 
1802
    if(task.question_filename != NULL
 
1803
       and (current_task->question_filename == NULL
 
1804
            or strcmp(current_task->question_filename,
 
1805
                      task.question_filename) != 0)){
 
1806
      continue;
 
1807
    }
 
1808
    /* const pid_t pid; */
 
1809
    if(task.pid != 0 and current_task->pid != task.pid){
 
1810
      continue;
 
1811
    }
 
1812
    /* const int epoll_fd; */
 
1813
    if(task.epoll_fd != 0
 
1814
       and current_task->epoll_fd != task.epoll_fd){
 
1815
      continue;
 
1816
    }
 
1817
    /* bool *const quit_now; */
 
1818
    if(task.quit_now != NULL
 
1819
       and current_task->quit_now != task.quit_now){
 
1820
      continue;
 
1821
    }
 
1822
    /* const int fd; */
 
1823
    if(task.fd != 0 and current_task->fd != task.fd){
 
1824
      continue;
 
1825
    }
 
1826
    /* bool *const mandos_client_exited; */
 
1827
    if(task.mandos_client_exited != NULL
 
1828
       and current_task->mandos_client_exited
 
1829
       != task.mandos_client_exited){
 
1830
      continue;
 
1831
    }
 
1832
    /* buffer *const password; */
 
1833
    if(task.password != NULL
 
1834
       and current_task->password != task.password){
 
1835
      continue;
 
1836
    }
 
1837
    /* bool *const password_is_read; */
 
1838
    if(task.password_is_read != NULL
 
1839
       and current_task->password_is_read != task.password_is_read){
 
1840
      continue;
 
1841
    }
 
1842
    /* char *filename; */
 
1843
    if(task.filename != NULL
 
1844
       and (current_task->filename == NULL
 
1845
            or strcmp(current_task->filename, task.filename) != 0)){
 
1846
      continue;
 
1847
    }
 
1848
    /* string_set *const cancelled_filenames; */
 
1849
    if(task.cancelled_filenames != NULL
 
1850
       and current_task->cancelled_filenames
 
1851
       != task.cancelled_filenames){
 
1852
      continue;
 
1853
    }
 
1854
    /* const mono_microsecs notafter; */
 
1855
    if(task.notafter != 0
 
1856
       and current_task->notafter != task.notafter){
 
1857
      continue;
 
1858
    }
 
1859
    /* const mono_microsecs *const current_time; */
 
1860
    if(task.current_time != NULL
 
1861
       and current_task->current_time != task.current_time){
 
1862
      continue;
 
1863
    }
 
1864
    /* Current task matches all members; return it */
 
1865
    return current_task;
 
1866
  }
 
1867
  /* No task in queue matches passed pattern task */
 
1868
  return NULL;
 
1869
}
 
1870
 
 
1871
static void test_create_queue(__attribute__((unused))
 
1872
                              test_fixture *fixture,
 
1873
                              __attribute__((unused))
 
1874
                              gconstpointer user_data){
 
1875
  __attribute__((cleanup(cleanup_queue)))
 
1876
    task_queue *const queue = create_queue();
 
1877
  g_assert_nonnull(queue);
 
1878
  g_assert_null(queue->tasks);
 
1879
  g_assert_true(queue->length == 0);
 
1880
  g_assert_true(queue->next_run == 0);
 
1881
}
 
1882
 
 
1883
static task_func dummy_func;
 
1884
 
 
1885
static void test_add_to_queue(__attribute__((unused))
 
1886
                              test_fixture *fixture,
 
1887
                              __attribute__((unused))
 
1888
                              gconstpointer user_data){
 
1889
  __attribute__((cleanup(cleanup_queue)))
 
1890
    task_queue *queue = create_queue();
 
1891
  g_assert_nonnull(queue);
 
1892
 
 
1893
  g_assert_true(add_to_queue(queue,
 
1894
                             (task_context){ .func=dummy_func }));
 
1895
  g_assert_true(queue->length == 1);
 
1896
  g_assert_nonnull(queue->tasks);
 
1897
  g_assert_true(queue->tasks[0].func == dummy_func);
 
1898
}
 
1899
 
 
1900
static void test_add_to_queue_overflow(__attribute__((unused))
 
1901
                                       test_fixture *fixture,
 
1902
                                       __attribute__((unused))
 
1903
                                       gconstpointer user_data){
 
1904
  __attribute__((cleanup(cleanup_queue)))
 
1905
    task_queue *queue = create_queue();
 
1906
  g_assert_nonnull(queue);
 
1907
  g_assert_true(queue->length == 0);
 
1908
  queue->length = SIZE_MAX / sizeof(task_context); /* fake max size */
 
1909
 
 
1910
  FILE *real_stderr = stderr;
 
1911
  FILE *devnull = fopen("/dev/null", "we");
 
1912
  g_assert_nonnull(devnull);
 
1913
  stderr = devnull;
 
1914
  const bool ret = add_to_queue(queue,
 
1915
                                (task_context){ .func=dummy_func });
 
1916
  g_assert_true(errno == ENOMEM);
 
1917
  g_assert_false(ret);
 
1918
  stderr = real_stderr;
 
1919
  g_assert_cmpint(fclose(devnull), ==, 0);
 
1920
  queue->length = 0;            /* Restore real size */
 
1921
}
 
1922
 
 
1923
static void dummy_func(__attribute__((unused))
 
1924
                       const task_context task,
 
1925
                       __attribute__((unused))
 
1926
                       task_queue *const queue){
 
1927
}
 
1928
 
 
1929
static void test_queue_has_question_empty(__attribute__((unused))
 
1930
                                          test_fixture *fixture,
 
1931
                                          __attribute__((unused))
 
1932
                                          gconstpointer user_data){
 
1933
  __attribute__((cleanup(cleanup_queue)))
 
1934
    task_queue *queue = create_queue();
 
1935
  g_assert_nonnull(queue);
 
1936
  g_assert_false(queue_has_question(queue));
 
1937
}
 
1938
 
 
1939
static void test_queue_has_question_false(__attribute__((unused))
 
1940
                                          test_fixture *fixture,
 
1941
                                          __attribute__((unused))
 
1942
                                          gconstpointer user_data){
 
1943
  __attribute__((cleanup(cleanup_queue)))
 
1944
    task_queue *queue = create_queue();
 
1945
  g_assert_nonnull(queue);
 
1946
  g_assert_true(add_to_queue(queue,
 
1947
                             (task_context){ .func=dummy_func }));
 
1948
  g_assert_false(queue_has_question(queue));
 
1949
}
 
1950
 
 
1951
static void test_queue_has_question_true(__attribute__((unused))
 
1952
                                         test_fixture *fixture,
 
1953
                                         __attribute__((unused))
 
1954
                                         gconstpointer user_data){
 
1955
  __attribute__((cleanup(cleanup_queue)))
 
1956
    task_queue *queue = create_queue();
 
1957
  g_assert_nonnull(queue);
 
1958
  char *const question_filename
 
1959
    = strdup("/nonexistent/question_filename");
 
1960
  g_assert_nonnull(question_filename);
 
1961
  task_context task = {
 
1962
    .func=dummy_func,
 
1963
    .question_filename=question_filename,
 
1964
  };
 
1965
  g_assert_true(add_to_queue(queue, task));
 
1966
  g_assert_true(queue_has_question(queue));
 
1967
}
 
1968
 
 
1969
static void test_queue_has_question_false2(__attribute__((unused))
 
1970
                                           test_fixture *fixture,
 
1971
                                           __attribute__((unused))
 
1972
                                           gconstpointer user_data){
 
1973
  __attribute__((cleanup(cleanup_queue)))
 
1974
    task_queue *queue = create_queue();
 
1975
  g_assert_nonnull(queue);
 
1976
  task_context task = { .func=dummy_func };
 
1977
  g_assert_true(add_to_queue(queue, task));
 
1978
  g_assert_true(add_to_queue(queue, task));
 
1979
  g_assert_cmpint((int)queue->length, ==, 2);
 
1980
  g_assert_false(queue_has_question(queue));
 
1981
}
 
1982
 
 
1983
static void test_queue_has_question_true2(__attribute__((unused))
 
1984
                                          test_fixture *fixture,
 
1985
                                          __attribute__((unused))
 
1986
                                          gconstpointer user_data){
 
1987
  __attribute__((cleanup(cleanup_queue)))
 
1988
    task_queue *queue = create_queue();
 
1989
  g_assert_nonnull(queue);
 
1990
  task_context task1 = { .func=dummy_func };
 
1991
  g_assert_true(add_to_queue(queue, task1));
 
1992
  char *const question_filename
 
1993
    = strdup("/nonexistent/question_filename");
 
1994
  g_assert_nonnull(question_filename);
 
1995
  task_context task2 = {
 
1996
    .func=dummy_func,
 
1997
    .question_filename=question_filename,
 
1998
  };
 
1999
  g_assert_true(add_to_queue(queue, task2));
 
2000
  g_assert_cmpint((int)queue->length, ==, 2);
 
2001
  g_assert_true(queue_has_question(queue));
 
2002
}
 
2003
 
 
2004
static void test_cleanup_buffer(__attribute__((unused))
 
2005
                                test_fixture *fixture,
 
2006
                                __attribute__((unused))
 
2007
                                gconstpointer user_data){
 
2008
  buffer buf = {};
 
2009
 
 
2010
  const size_t buffersize = 10;
 
2011
 
 
2012
  buf.data = malloc(buffersize);
 
2013
  g_assert_nonnull(buf.data);
 
2014
  if(mlock(buf.data, buffersize) != 0){
 
2015
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
2016
  }
 
2017
 
 
2018
  cleanup_buffer(&buf);
 
2019
  g_assert_null(buf.data);
 
2020
}
 
2021
 
 
2022
static
 
2023
void test_string_set_new_set_contains_nothing(__attribute__((unused))
 
2024
                                              test_fixture *fixture,
 
2025
                                              __attribute__((unused))
 
2026
                                              gconstpointer
 
2027
                                              user_data){
 
2028
  __attribute__((cleanup(string_set_clear)))
 
2029
    string_set set = {};
 
2030
  g_assert_false(string_set_contains(set, "")); /* Empty string */
 
2031
  g_assert_false(string_set_contains(set, "test_string"));
 
2032
}
 
2033
 
 
2034
static void
 
2035
test_string_set_with_added_string_contains_it(__attribute__((unused))
 
2036
                                              test_fixture *fixture,
 
2037
                                              __attribute__((unused))
 
2038
                                              gconstpointer
 
2039
                                              user_data){
 
2040
  __attribute__((cleanup(string_set_clear)))
 
2041
    string_set set = {};
 
2042
  g_assert_true(string_set_add(&set, "test_string"));
 
2043
  g_assert_true(string_set_contains(set, "test_string"));
 
2044
}
 
2045
 
 
2046
static void
 
2047
test_string_set_cleared_does_not_contain_str(__attribute__((unused))
 
2048
                                             test_fixture *fixture,
 
2049
                                             __attribute__((unused))
 
2050
                                             gconstpointer user_data){
 
2051
  __attribute__((cleanup(string_set_clear)))
 
2052
    string_set set = {};
 
2053
  g_assert_true(string_set_add(&set, "test_string"));
 
2054
  string_set_clear(&set);
 
2055
  g_assert_false(string_set_contains(set, "test_string"));
 
2056
}
 
2057
 
 
2058
static
 
2059
void test_string_set_swap_one_with_empty(__attribute__((unused))
 
2060
                                         test_fixture *fixture,
 
2061
                                         __attribute__((unused))
 
2062
                                         gconstpointer user_data){
 
2063
  __attribute__((cleanup(string_set_clear)))
 
2064
    string_set set1 = {};
 
2065
  __attribute__((cleanup(string_set_clear)))
 
2066
    string_set set2 = {};
 
2067
  g_assert_true(string_set_add(&set1, "test_string1"));
 
2068
  string_set_swap(&set1, &set2);
 
2069
  g_assert_false(string_set_contains(set1, "test_string1"));
 
2070
  g_assert_true(string_set_contains(set2, "test_string1"));
 
2071
}
 
2072
 
 
2073
static
 
2074
void test_string_set_swap_empty_with_one(__attribute__((unused))
 
2075
                                         test_fixture *fixture,
 
2076
                                         __attribute__((unused))
 
2077
                                         gconstpointer user_data){
 
2078
  __attribute__((cleanup(string_set_clear)))
 
2079
    string_set set1 = {};
 
2080
  __attribute__((cleanup(string_set_clear)))
 
2081
    string_set set2 = {};
 
2082
  g_assert_true(string_set_add(&set2, "test_string2"));
 
2083
  string_set_swap(&set1, &set2);
 
2084
  g_assert_true(string_set_contains(set1, "test_string2"));
 
2085
  g_assert_false(string_set_contains(set2, "test_string2"));
 
2086
}
 
2087
 
 
2088
static void test_string_set_swap_one_with_one(__attribute__((unused))
 
2089
                                              test_fixture *fixture,
 
2090
                                              __attribute__((unused))
 
2091
                                              gconstpointer
 
2092
                                              user_data){
 
2093
  __attribute__((cleanup(string_set_clear)))
 
2094
    string_set set1 = {};
 
2095
  __attribute__((cleanup(string_set_clear)))
 
2096
    string_set set2 = {};
 
2097
  g_assert_true(string_set_add(&set1, "test_string1"));
 
2098
  g_assert_true(string_set_add(&set2, "test_string2"));
 
2099
  string_set_swap(&set1, &set2);
 
2100
  g_assert_false(string_set_contains(set1, "test_string1"));
 
2101
  g_assert_true(string_set_contains(set1, "test_string2"));
 
2102
  g_assert_false(string_set_contains(set2, "test_string2"));
 
2103
  g_assert_true(string_set_contains(set2, "test_string1"));
 
2104
}
 
2105
 
 
2106
static bool fd_has_cloexec_and_nonblock(const int);
 
2107
 
 
2108
static bool epoll_set_contains(int, int, uint32_t);
 
2109
 
 
2110
static void test_start_mandos_client(test_fixture *fixture,
 
2111
                                     __attribute__((unused))
 
2112
                                     gconstpointer user_data){
 
2113
 
 
2114
  bool mandos_client_exited = false;
 
2115
  bool quit_now = false;
 
2116
  __attribute__((cleanup(cleanup_close)))
 
2117
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2118
  g_assert_cmpint(epoll_fd, >=, 0);
 
2119
  __attribute__((cleanup(cleanup_queue)))
 
2120
    task_queue *queue = create_queue();
 
2121
  g_assert_nonnull(queue);
 
2122
  buffer password = {};
 
2123
  bool password_is_read = false;
 
2124
  const char helper_directory[] = "/nonexistent";
 
2125
  const char *const argv[] = { "/bin/true", NULL };
 
2126
 
 
2127
  g_assert_true(start_mandos_client(queue, epoll_fd,
 
2128
                                    &mandos_client_exited, &quit_now,
 
2129
                                    &password, &password_is_read,
 
2130
                                    &fixture->orig_sigaction,
 
2131
                                    fixture->orig_sigmask,
 
2132
                                    helper_directory, 0, 0, argv));
 
2133
 
 
2134
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
2135
 
 
2136
  const task_context *const added_wait_task
 
2137
    = find_matching_task(queue, (task_context){
 
2138
        .func=wait_for_mandos_client_exit,
 
2139
        .mandos_client_exited=&mandos_client_exited,
 
2140
        .quit_now=&quit_now,
 
2141
      });
 
2142
  g_assert_nonnull(added_wait_task);
 
2143
  g_assert_cmpint(added_wait_task->pid, >, 0);
 
2144
  g_assert_cmpint(kill(added_wait_task->pid, SIGKILL), ==, 0);
 
2145
  waitpid(added_wait_task->pid, NULL, 0);
 
2146
 
 
2147
  const task_context *const added_read_task
 
2148
    = find_matching_task(queue, (task_context){
 
2149
        .func=read_mandos_client_output,
 
2150
        .epoll_fd=epoll_fd,
 
2151
        .password=&password,
 
2152
        .password_is_read=&password_is_read,
 
2153
        .quit_now=&quit_now,
 
2154
      });
 
2155
  g_assert_nonnull(added_read_task);
 
2156
  g_assert_cmpint(added_read_task->fd, >, 2);
 
2157
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
2158
  g_assert_true(epoll_set_contains(epoll_fd, added_read_task->fd,
 
2159
                                   EPOLLIN | EPOLLRDHUP));
 
2160
}
 
2161
 
 
2162
static bool fd_has_cloexec_and_nonblock(const int fd){
 
2163
  const int socket_fd_flags = fcntl(fd, F_GETFD, 0);
 
2164
  const int socket_file_flags = fcntl(fd, F_GETFL, 0);
 
2165
  return ((socket_fd_flags >= 0)
 
2166
          and (socket_fd_flags & FD_CLOEXEC)
 
2167
          and (socket_file_flags >= 0)
 
2168
          and (socket_file_flags & O_NONBLOCK));
 
2169
}
 
2170
 
 
2171
__attribute__((const))
 
2172
bool is_privileged(void){
 
2173
  uid_t user = getuid() + 1;
 
2174
  if(user == 0){                /* Overflow check */
 
2175
    user++;
 
2176
  }
 
2177
  gid_t group = getuid() + 1;
 
2178
  if(group == 0){               /* Overflow check */
 
2179
    group++;
 
2180
  }
 
2181
  const pid_t pid = fork();
 
2182
  if(pid == 0){                 /* Child */
 
2183
    if(setresgid((uid_t)-1, group, group) == -1){
 
2184
      if(errno != EPERM){
 
2185
        error(EXIT_FAILURE, errno, "Failed to setresgid(-1, %" PRIuMAX
 
2186
              ", %" PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
 
2187
      }
 
2188
      exit(EXIT_FAILURE);
 
2189
    }
 
2190
    if(setresuid((uid_t)-1, user, user) == -1){
 
2191
      if(errno != EPERM){
 
2192
        error(EXIT_FAILURE, errno, "Failed to setresuid(-1, %" PRIuMAX
 
2193
              ", %" PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
 
2194
      }
 
2195
      exit(EXIT_FAILURE);
 
2196
    }
 
2197
    exit(EXIT_SUCCESS);
 
2198
  }
 
2199
  if(pid == -1){
 
2200
    error(EXIT_FAILURE, errno, "Failed to fork()");
 
2201
  }
 
2202
 
 
2203
  int status;
 
2204
  waitpid(pid, &status, 0);
 
2205
  if(WIFEXITED(status) and (WEXITSTATUS(status) == EXIT_SUCCESS)){
 
2206
    return true;
 
2207
  }
 
2208
  return false;
 
2209
}
 
2210
 
 
2211
static bool epoll_set_contains(int epoll_fd, int fd, uint32_t events){
 
2212
  /* Only scan for events in this eventmask */
 
2213
  const uint32_t eventmask = EPOLLIN | EPOLLOUT | EPOLLRDHUP;
 
2214
  __attribute__((cleanup(cleanup_string)))
 
2215
    char *fdinfo_name = NULL;
 
2216
  int ret = asprintf(&fdinfo_name, "/proc/self/fdinfo/%d", epoll_fd);
 
2217
  g_assert_cmpint(ret, >, 0);
 
2218
  g_assert_nonnull(fdinfo_name);
 
2219
 
 
2220
  FILE *fdinfo = fopen(fdinfo_name, "r");
 
2221
  g_assert_nonnull(fdinfo);
 
2222
  uint32_t reported_events;
 
2223
  buffer line = {};
 
2224
  int found_fd = -1;
 
2225
 
 
2226
  do {
 
2227
    if(getline(&line.data, &line.allocated, fdinfo) < 0){
 
2228
      break;
 
2229
    }
 
2230
    /* See proc(5) for format of /proc/PID/fdinfo/FD for epoll fd's */
 
2231
    if(sscanf(line.data, "tfd: %d events: %" SCNx32 " ",
 
2232
              &found_fd, &reported_events) == 2){
 
2233
      if(found_fd == fd){
 
2234
        break;
 
2235
      }
 
2236
    }
 
2237
  } while(not feof(fdinfo) and not ferror(fdinfo));
 
2238
  g_assert_cmpint(fclose(fdinfo), ==, 0);
 
2239
  free(line.data);
 
2240
  if(found_fd != fd){
 
2241
    return false;
 
2242
  }
 
2243
 
 
2244
  if(events == 0){
 
2245
    /* Don't check events if none are given */
 
2246
    return true;
 
2247
  }
 
2248
  return (reported_events & eventmask) == (events & eventmask);
 
2249
}
 
2250
 
 
2251
static void test_start_mandos_client_execv(test_fixture *fixture,
 
2252
                                           __attribute__((unused))
 
2253
                                           gconstpointer user_data){
 
2254
  bool mandos_client_exited = false;
 
2255
  bool quit_now = false;
 
2256
  __attribute__((cleanup(cleanup_close)))
 
2257
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2258
  g_assert_cmpint(epoll_fd, >=, 0);
 
2259
  __attribute__((cleanup(cleanup_queue)))
 
2260
    task_queue *queue = create_queue();
 
2261
  g_assert_nonnull(queue);
 
2262
  __attribute__((cleanup(cleanup_buffer)))
 
2263
    buffer password = {};
 
2264
  const char helper_directory[] = "/nonexistent";
 
2265
  /* Can't execv("/", ...), so this should fail */
 
2266
  const char *const argv[] = { "/", NULL };
 
2267
 
 
2268
  {
 
2269
    __attribute__((cleanup(cleanup_close)))
 
2270
      const int devnull_fd = open("/dev/null",
 
2271
                                  O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2272
    g_assert_cmpint(devnull_fd, >=, 0);
 
2273
    __attribute__((cleanup(cleanup_close)))
 
2274
      const int real_stderr_fd = dup(STDERR_FILENO);
 
2275
    g_assert_cmpint(real_stderr_fd, >=, 0);
 
2276
    dup2(devnull_fd, STDERR_FILENO);
 
2277
 
 
2278
    const bool success = start_mandos_client(queue, epoll_fd,
 
2279
                                             &mandos_client_exited,
 
2280
                                             &quit_now,
 
2281
                                             &password,
 
2282
                                             (bool[]){false},
 
2283
                                             &fixture->orig_sigaction,
 
2284
                                             fixture->orig_sigmask,
 
2285
                                             helper_directory, 0, 0,
 
2286
                                             argv);
 
2287
    dup2(real_stderr_fd, STDERR_FILENO);
 
2288
    g_assert_true(success);
 
2289
  }
 
2290
  g_assert_cmpuint((unsigned int)queue->length, ==, 2);
 
2291
 
 
2292
  struct timespec starttime, currtime;
 
2293
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2294
  do {
 
2295
    queue->next_run = 0;
 
2296
    string_set cancelled_filenames = {};
 
2297
 
 
2298
    {
 
2299
      __attribute__((cleanup(cleanup_close)))
 
2300
        const int devnull_fd = open("/dev/null",
 
2301
                                    O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2302
      g_assert_cmpint(devnull_fd, >=, 0);
 
2303
      __attribute__((cleanup(cleanup_close)))
 
2304
        const int real_stderr_fd = dup(STDERR_FILENO);
 
2305
      g_assert_cmpint(real_stderr_fd, >=, 0);
 
2306
      g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2307
      dup2(devnull_fd, STDERR_FILENO);
 
2308
      const bool success = run_queue(&queue, &cancelled_filenames,
 
2309
                                     &quit_now);
 
2310
      dup2(real_stderr_fd, STDERR_FILENO);
 
2311
      if(not success){
 
2312
        break;
 
2313
      }
 
2314
    }
 
2315
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2316
  } while(((queue->length) > 0)
 
2317
          and (not quit_now)
 
2318
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2319
 
 
2320
  g_assert_true(quit_now);
 
2321
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2322
  g_assert_true(mandos_client_exited);
 
2323
}
 
2324
 
 
2325
static void test_start_mandos_client_suid_euid(test_fixture *fixture,
 
2326
                                               __attribute__((unused))
 
2327
                                               gconstpointer
 
2328
                                               user_data){
 
2329
  if(not is_privileged()){
 
2330
    g_test_skip("Not privileged");
 
2331
    return;
 
2332
  }
 
2333
 
 
2334
  bool mandos_client_exited = false;
 
2335
  bool quit_now = false;
 
2336
  __attribute__((cleanup(cleanup_close)))
 
2337
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2338
  g_assert_cmpint(epoll_fd, >=, 0);
 
2339
  __attribute__((cleanup(cleanup_queue)))
 
2340
    task_queue *queue = create_queue();
 
2341
  g_assert_nonnull(queue);
 
2342
  __attribute__((cleanup(cleanup_buffer)))
 
2343
    buffer password = {};
 
2344
  bool password_is_read = false;
 
2345
  const char helper_directory[] = "/nonexistent";
 
2346
  const char *const argv[] = { "/usr/bin/id", "--user", NULL };
 
2347
  uid_t user = 1000;
 
2348
  gid_t group = 1001;
 
2349
 
 
2350
  const bool success = start_mandos_client(queue, epoll_fd,
 
2351
                                           &mandos_client_exited,
 
2352
                                           &quit_now, &password,
 
2353
                                           &password_is_read,
 
2354
                                           &fixture->orig_sigaction,
 
2355
                                           fixture->orig_sigmask,
 
2356
                                           helper_directory, user,
 
2357
                                           group, argv);
 
2358
  g_assert_true(success);
 
2359
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2360
 
 
2361
  struct timespec starttime, currtime;
 
2362
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2363
  do {
 
2364
    queue->next_run = 0;
 
2365
    string_set cancelled_filenames = {};
 
2366
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2367
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2368
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2369
  } while(((queue->length) > 0)
 
2370
          and (not quit_now)
 
2371
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2372
 
 
2373
  g_assert_false(quit_now);
 
2374
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2375
  g_assert_true(mandos_client_exited);
 
2376
 
 
2377
  g_assert_true(password_is_read);
 
2378
  g_assert_nonnull(password.data);
 
2379
 
 
2380
  uintmax_t id;
 
2381
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2382
                  ==, 1);
 
2383
  g_assert_true((uid_t)id == id);
 
2384
 
 
2385
  g_assert_cmpuint((unsigned int)id, ==, 0);
 
2386
}
 
2387
 
 
2388
static void test_start_mandos_client_suid_egid(test_fixture *fixture,
 
2389
                                               __attribute__((unused))
 
2390
                                               gconstpointer
 
2391
                                               user_data){
 
2392
  if(not is_privileged()){
 
2393
    g_test_skip("Not privileged");
 
2394
    return;
 
2395
  }
 
2396
 
 
2397
  bool mandos_client_exited = false;
 
2398
  bool quit_now = false;
 
2399
  __attribute__((cleanup(cleanup_close)))
 
2400
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2401
  g_assert_cmpint(epoll_fd, >=, 0);
 
2402
  __attribute__((cleanup(cleanup_queue)))
 
2403
    task_queue *queue = create_queue();
 
2404
  g_assert_nonnull(queue);
 
2405
  __attribute__((cleanup(cleanup_buffer)))
 
2406
    buffer password = {};
 
2407
  bool password_is_read = false;
 
2408
  const char helper_directory[] = "/nonexistent";
 
2409
  const char *const argv[] = { "/usr/bin/id", "--group", NULL };
 
2410
  uid_t user = 1000;
 
2411
  gid_t group = 1001;
 
2412
 
 
2413
  const bool success = start_mandos_client(queue, epoll_fd,
 
2414
                                           &mandos_client_exited,
 
2415
                                           &quit_now, &password,
 
2416
                                           &password_is_read,
 
2417
                                           &fixture->orig_sigaction,
 
2418
                                           fixture->orig_sigmask,
 
2419
                                           helper_directory, user,
 
2420
                                           group, argv);
 
2421
  g_assert_true(success);
 
2422
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2423
 
 
2424
  struct timespec starttime, currtime;
 
2425
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2426
  do {
 
2427
    queue->next_run = 0;
 
2428
    string_set cancelled_filenames = {};
 
2429
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2430
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2431
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2432
  } while(((queue->length) > 0)
 
2433
          and (not quit_now)
 
2434
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2435
 
 
2436
  g_assert_false(quit_now);
 
2437
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2438
  g_assert_true(mandos_client_exited);
 
2439
 
 
2440
  g_assert_true(password_is_read);
 
2441
  g_assert_nonnull(password.data);
 
2442
 
 
2443
  uintmax_t id;
 
2444
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2445
                  ==, 1);
 
2446
  g_assert_true((gid_t)id == id);
 
2447
 
 
2448
  g_assert_cmpuint((unsigned int)id, ==, 0);
 
2449
}
 
2450
 
 
2451
static void test_start_mandos_client_suid_ruid(test_fixture *fixture,
 
2452
                                               __attribute__((unused))
 
2453
                                               gconstpointer
 
2454
                                               user_data){
 
2455
  if(not is_privileged()){
 
2456
    g_test_skip("Not privileged");
 
2457
    return;
 
2458
  }
 
2459
 
 
2460
  bool mandos_client_exited = false;
 
2461
  bool quit_now = false;
 
2462
  __attribute__((cleanup(cleanup_close)))
 
2463
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2464
  g_assert_cmpint(epoll_fd, >=, 0);
 
2465
  __attribute__((cleanup(cleanup_queue)))
 
2466
    task_queue *queue = create_queue();
 
2467
  g_assert_nonnull(queue);
 
2468
  __attribute__((cleanup(cleanup_buffer)))
 
2469
    buffer password = {};
 
2470
  bool password_is_read = false;
 
2471
  const char helper_directory[] = "/nonexistent";
 
2472
  const char *const argv[] = { "/usr/bin/id", "--user", "--real",
 
2473
    NULL };
 
2474
  uid_t user = 1000;
 
2475
  gid_t group = 1001;
 
2476
 
 
2477
  const bool success = start_mandos_client(queue, epoll_fd,
 
2478
                                           &mandos_client_exited,
 
2479
                                           &quit_now, &password,
 
2480
                                           &password_is_read,
 
2481
                                           &fixture->orig_sigaction,
 
2482
                                           fixture->orig_sigmask,
 
2483
                                           helper_directory, user,
 
2484
                                           group, argv);
 
2485
  g_assert_true(success);
 
2486
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2487
 
 
2488
  struct timespec starttime, currtime;
 
2489
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2490
  do {
 
2491
    queue->next_run = 0;
 
2492
    string_set cancelled_filenames = {};
 
2493
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2494
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2495
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2496
  } while(((queue->length) > 0)
 
2497
          and (not quit_now)
 
2498
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2499
 
 
2500
  g_assert_false(quit_now);
 
2501
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2502
  g_assert_true(mandos_client_exited);
 
2503
 
 
2504
  g_assert_true(password_is_read);
 
2505
  g_assert_nonnull(password.data);
 
2506
 
 
2507
  uintmax_t id;
 
2508
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2509
                  ==, 1);
 
2510
  g_assert_true((uid_t)id == id);
 
2511
 
 
2512
  g_assert_cmpuint((unsigned int)id, ==, user);
 
2513
}
 
2514
 
 
2515
static void test_start_mandos_client_suid_rgid(test_fixture *fixture,
 
2516
                                               __attribute__((unused))
 
2517
                                               gconstpointer
 
2518
                                               user_data){
 
2519
  if(not is_privileged()){
 
2520
    g_test_skip("Not privileged");
 
2521
    return;
 
2522
  }
 
2523
 
 
2524
  bool mandos_client_exited = false;
 
2525
  bool quit_now = false;
 
2526
  __attribute__((cleanup(cleanup_close)))
 
2527
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2528
  g_assert_cmpint(epoll_fd, >=, 0);
 
2529
  __attribute__((cleanup(cleanup_queue)))
 
2530
    task_queue *queue = create_queue();
 
2531
  g_assert_nonnull(queue);
 
2532
  __attribute__((cleanup(cleanup_buffer)))
 
2533
    buffer password = {};
 
2534
  bool password_is_read = false;
 
2535
  const char helper_directory[] = "/nonexistent";
 
2536
  const char *const argv[] = { "/usr/bin/id", "--group", "--real",
 
2537
    NULL };
 
2538
  uid_t user = 1000;
 
2539
  gid_t group = 1001;
 
2540
 
 
2541
  const bool success = start_mandos_client(queue, epoll_fd,
 
2542
                                           &mandos_client_exited,
 
2543
                                           &quit_now, &password,
 
2544
                                           &password_is_read,
 
2545
                                           &fixture->orig_sigaction,
 
2546
                                           fixture->orig_sigmask,
 
2547
                                           helper_directory, user,
 
2548
                                           group, argv);
 
2549
  g_assert_true(success);
 
2550
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2551
 
 
2552
  struct timespec starttime, currtime;
 
2553
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2554
  do {
 
2555
    queue->next_run = 0;
 
2556
    string_set cancelled_filenames = {};
 
2557
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2558
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2559
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2560
  } while(((queue->length) > 0)
 
2561
          and (not quit_now)
 
2562
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2563
 
 
2564
  g_assert_false(quit_now);
 
2565
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2566
  g_assert_true(mandos_client_exited);
 
2567
 
 
2568
  g_assert_true(password_is_read);
 
2569
  g_assert_nonnull(password.data);
 
2570
 
 
2571
  uintmax_t id;
 
2572
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2573
                  ==, 1);
 
2574
  g_assert_true((gid_t)id == id);
 
2575
 
 
2576
  g_assert_cmpuint((unsigned int)id, ==, group);
 
2577
}
 
2578
 
 
2579
static void test_start_mandos_client_read(test_fixture *fixture,
 
2580
                                          __attribute__((unused))
 
2581
                                          gconstpointer user_data){
 
2582
  bool mandos_client_exited = false;
 
2583
  bool quit_now = false;
 
2584
  __attribute__((cleanup(cleanup_close)))
 
2585
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2586
  g_assert_cmpint(epoll_fd, >=, 0);
 
2587
  __attribute__((cleanup(cleanup_queue)))
 
2588
    task_queue *queue = create_queue();
 
2589
  g_assert_nonnull(queue);
 
2590
  __attribute__((cleanup(cleanup_buffer)))
 
2591
    buffer password = {};
 
2592
  bool password_is_read = false;
 
2593
  const char dummy_test_password[] = "dummy test password";
 
2594
  const char helper_directory[] = "/nonexistent";
 
2595
  const char *const argv[] = { "/bin/echo", "-n", dummy_test_password,
 
2596
    NULL };
 
2597
 
 
2598
  const bool success = start_mandos_client(queue, epoll_fd,
 
2599
                                           &mandos_client_exited,
 
2600
                                           &quit_now, &password,
 
2601
                                           &password_is_read,
 
2602
                                           &fixture->orig_sigaction,
 
2603
                                           fixture->orig_sigmask,
 
2604
                                           helper_directory, 0, 0,
 
2605
                                           argv);
 
2606
  g_assert_true(success);
 
2607
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2608
 
 
2609
  struct timespec starttime, currtime;
 
2610
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2611
  do {
 
2612
    queue->next_run = 0;
 
2613
    string_set cancelled_filenames = {};
 
2614
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2615
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2616
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2617
  } while(((queue->length) > 0)
 
2618
          and (not quit_now)
 
2619
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2620
 
 
2621
  g_assert_false(quit_now);
 
2622
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2623
  g_assert_true(mandos_client_exited);
 
2624
 
 
2625
  g_assert_true(password_is_read);
 
2626
  g_assert_cmpint((int)password.length, ==,
 
2627
                  sizeof(dummy_test_password)-1);
 
2628
  g_assert_nonnull(password.data);
 
2629
  g_assert_cmpint(memcmp(dummy_test_password, password.data,
 
2630
                         sizeof(dummy_test_password)-1), ==, 0);
 
2631
}
 
2632
 
 
2633
static
 
2634
void test_start_mandos_client_helper_directory(test_fixture *fixture,
 
2635
                                               __attribute__((unused))
 
2636
                                               gconstpointer
 
2637
                                               user_data){
 
2638
  bool mandos_client_exited = false;
 
2639
  bool quit_now = false;
 
2640
  __attribute__((cleanup(cleanup_close)))
 
2641
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2642
  g_assert_cmpint(epoll_fd, >=, 0);
 
2643
  __attribute__((cleanup(cleanup_queue)))
 
2644
    task_queue *queue = create_queue();
 
2645
  g_assert_nonnull(queue);
 
2646
  __attribute__((cleanup(cleanup_buffer)))
 
2647
    buffer password = {};
 
2648
  bool password_is_read = false;
 
2649
  const char helper_directory[] = "/nonexistent";
 
2650
  const char *const argv[] = { "/bin/sh", "-c",
 
2651
    "echo -n ${MANDOSPLUGINHELPERDIR}", NULL };
 
2652
 
 
2653
  const bool success = start_mandos_client(queue, epoll_fd,
 
2654
                                           &mandos_client_exited,
 
2655
                                           &quit_now, &password,
 
2656
                                           &password_is_read,
 
2657
                                           &fixture->orig_sigaction,
 
2658
                                           fixture->orig_sigmask,
 
2659
                                           helper_directory, 0, 0,
 
2660
                                           argv);
 
2661
  g_assert_true(success);
 
2662
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2663
 
 
2664
  struct timespec starttime, currtime;
 
2665
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2666
  do {
 
2667
    queue->next_run = 0;
 
2668
    string_set cancelled_filenames = {};
 
2669
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2670
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2671
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2672
  } while(((queue->length) > 0)
 
2673
          and (not quit_now)
 
2674
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2675
 
 
2676
  g_assert_false(quit_now);
 
2677
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2678
  g_assert_true(mandos_client_exited);
 
2679
 
 
2680
  g_assert_true(password_is_read);
 
2681
  g_assert_cmpint((int)password.length, ==,
 
2682
                  sizeof(helper_directory)-1);
 
2683
  g_assert_nonnull(password.data);
 
2684
  g_assert_cmpint(memcmp(helper_directory, password.data,
 
2685
                         sizeof(helper_directory)-1), ==, 0);
 
2686
}
 
2687
 
 
2688
__attribute__((nonnull, warn_unused_result))
 
2689
static bool proc_status_sigblk_to_sigset(const char *const,
 
2690
                                         sigset_t *const);
 
2691
 
 
2692
static void test_start_mandos_client_sigmask(test_fixture *fixture,
 
2693
                                             __attribute__((unused))
 
2694
                                             gconstpointer user_data){
 
2695
  bool mandos_client_exited = false;
 
2696
  bool quit_now = false;
 
2697
  __attribute__((cleanup(cleanup_close)))
 
2698
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2699
  g_assert_cmpint(epoll_fd, >=, 0);
 
2700
  __attribute__((cleanup(cleanup_queue)))
 
2701
    task_queue *queue = create_queue();
 
2702
  g_assert_nonnull(queue);
 
2703
  __attribute__((cleanup(cleanup_buffer)))
 
2704
    buffer password = {};
 
2705
  bool password_is_read = false;
 
2706
  const char helper_directory[] = "/nonexistent";
 
2707
  /* see proc(5) for format of /proc/self/status */
 
2708
  const char *const argv[] = { "/usr/bin/awk",
 
2709
    "$1==\"SigBlk:\"{ print $2 }", "/proc/self/status", NULL };
 
2710
 
 
2711
  g_assert_true(start_mandos_client(queue, epoll_fd,
 
2712
                                    &mandos_client_exited, &quit_now,
 
2713
                                    &password, &password_is_read,
 
2714
                                    &fixture->orig_sigaction,
 
2715
                                    fixture->orig_sigmask,
 
2716
                                    helper_directory, 0, 0, argv));
 
2717
 
 
2718
  struct timespec starttime, currtime;
 
2719
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2720
  do {
 
2721
    queue->next_run = 0;
 
2722
    string_set cancelled_filenames = {};
 
2723
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2724
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2725
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2726
  } while((not (mandos_client_exited and password_is_read))
 
2727
          and (not quit_now)
 
2728
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2729
  g_assert_true(mandos_client_exited);
 
2730
  g_assert_true(password_is_read);
 
2731
 
 
2732
  sigset_t parsed_sigmask;
 
2733
  g_assert_true(proc_status_sigblk_to_sigset(password.data,
 
2734
                                             &parsed_sigmask));
 
2735
 
 
2736
  for(int signum = 1; signum < NSIG; signum++){
 
2737
    const bool has_signal = sigismember(&parsed_sigmask, signum);
 
2738
    if(sigismember(&fixture->orig_sigmask, signum)){
 
2739
      g_assert_true(has_signal);
 
2740
    } else {
 
2741
      g_assert_false(has_signal);
 
2742
    }
 
2743
  }
 
2744
}
 
2745
 
 
2746
__attribute__((nonnull, warn_unused_result))
 
2747
static bool proc_status_sigblk_to_sigset(const char *const sigblk,
 
2748
                                         sigset_t *const sigmask){
 
2749
  /* parse /proc/PID/status SigBlk value and convert to a sigset_t */
 
2750
  uintmax_t scanned_sigmask;
 
2751
  if(sscanf(sigblk, "%" SCNxMAX " ", &scanned_sigmask) != 1){
 
2752
    return false;
 
2753
  }
 
2754
  if(sigemptyset(sigmask) != 0){
 
2755
    return false;
 
2756
  }
 
2757
  for(int signum = 1; signum < NSIG; signum++){
 
2758
    if(scanned_sigmask & ((uintmax_t)1 << (signum-1))){
 
2759
      if(sigaddset(sigmask, signum) != 0){
 
2760
        return false;
 
2761
      }
 
2762
    }
 
2763
  }
 
2764
  return true;
 
2765
}
 
2766
 
 
2767
static void run_task_with_stderr_to_dev_null(const task_context task,
 
2768
                                             task_queue *const queue);
 
2769
 
 
2770
static
 
2771
void test_wait_for_mandos_client_exit_badpid(__attribute__((unused))
 
2772
                                             test_fixture *fixture,
 
2773
                                             __attribute__((unused))
 
2774
                                             gconstpointer user_data){
 
2775
 
 
2776
  bool mandos_client_exited = false;
 
2777
  bool quit_now = false;
 
2778
 
 
2779
  __attribute__((cleanup(cleanup_queue)))
 
2780
    task_queue *queue = create_queue();
 
2781
  g_assert_nonnull(queue);
 
2782
  const task_context task = {
 
2783
    .func=wait_for_mandos_client_exit,
 
2784
    .pid=1,
 
2785
    .mandos_client_exited=&mandos_client_exited,
 
2786
    .quit_now=&quit_now,
 
2787
  };
 
2788
  run_task_with_stderr_to_dev_null(task, queue);
 
2789
 
 
2790
  g_assert_false(mandos_client_exited);
 
2791
  g_assert_true(quit_now);
 
2792
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2793
}
 
2794
 
 
2795
static void run_task_with_stderr_to_dev_null(const task_context task,
 
2796
                                             task_queue *const queue){
 
2797
  FILE *real_stderr = stderr;
 
2798
  FILE *devnull = fopen("/dev/null", "we");
 
2799
  g_assert_nonnull(devnull);
 
2800
 
 
2801
  stderr = devnull;
 
2802
  task.func(task, queue);
 
2803
  stderr = real_stderr;
 
2804
 
 
2805
  g_assert_cmpint(fclose(devnull), ==, 0);
 
2806
}
 
2807
 
 
2808
static
 
2809
void test_wait_for_mandos_client_exit_noexit(test_fixture *fixture,
 
2810
                                             __attribute__((unused))
 
2811
                                             gconstpointer user_data){
 
2812
  bool mandos_client_exited = false;
 
2813
  bool quit_now = false;
 
2814
 
 
2815
  pid_t create_eternal_process(void){
 
2816
    const pid_t pid = fork();
 
2817
    if(pid == 0){               /* Child */
 
2818
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2819
        _exit(EXIT_FAILURE);
 
2820
      }
 
2821
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2822
        _exit(EXIT_FAILURE);
 
2823
      }
 
2824
      while(true){
 
2825
        pause();
 
2826
      }
 
2827
    }
 
2828
    return pid;
 
2829
  }
 
2830
  pid_t pid = create_eternal_process();
 
2831
  g_assert_true(pid != -1);
 
2832
 
 
2833
  __attribute__((cleanup(cleanup_queue)))
 
2834
    task_queue *queue = create_queue();
 
2835
  g_assert_nonnull(queue);
 
2836
  const task_context task = {
 
2837
    .func=wait_for_mandos_client_exit,
 
2838
    .pid=pid,
 
2839
    .mandos_client_exited=&mandos_client_exited,
 
2840
    .quit_now=&quit_now,
 
2841
  };
 
2842
  task.func(task, queue);
 
2843
 
 
2844
  g_assert_false(mandos_client_exited);
 
2845
  g_assert_false(quit_now);
 
2846
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
2847
 
 
2848
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
2849
        .func=wait_for_mandos_client_exit,
 
2850
        .pid=task.pid,
 
2851
        .mandos_client_exited=&mandos_client_exited,
 
2852
        .quit_now=&quit_now,
 
2853
      }));
 
2854
}
 
2855
 
 
2856
static
 
2857
void test_wait_for_mandos_client_exit_success(test_fixture *fixture,
 
2858
                                              __attribute__((unused))
 
2859
                                              gconstpointer
 
2860
                                              user_data){
 
2861
  bool mandos_client_exited = false;
 
2862
  bool quit_now = false;
 
2863
 
 
2864
  pid_t create_successful_process(void){
 
2865
    const pid_t pid = fork();
 
2866
    if(pid == 0){               /* Child */
 
2867
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2868
        _exit(EXIT_FAILURE);
 
2869
      }
 
2870
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2871
        _exit(EXIT_FAILURE);
 
2872
      }
 
2873
      exit(EXIT_SUCCESS);
 
2874
    }
 
2875
    return pid;
 
2876
  }
 
2877
  const pid_t pid = create_successful_process();
 
2878
  g_assert_true(pid != -1);
 
2879
 
 
2880
  __attribute__((cleanup(cleanup_queue)))
 
2881
    task_queue *queue = create_queue();
 
2882
  g_assert_nonnull(queue);
 
2883
  const task_context initial_task = {
 
2884
    .func=wait_for_mandos_client_exit,
 
2885
    .pid=pid,
 
2886
    .mandos_client_exited=&mandos_client_exited,
 
2887
    .quit_now=&quit_now,
 
2888
  };
 
2889
  g_assert_true(add_to_queue(queue, initial_task));
 
2890
 
 
2891
  struct timespec starttime, currtime;
 
2892
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2893
  __attribute__((cleanup(cleanup_close)))
 
2894
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2895
  do {
 
2896
    queue->next_run = 0;
 
2897
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2898
    g_assert_true(run_queue(&queue, (string_set[]){{}}, &quit_now));
 
2899
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2900
  } while((not mandos_client_exited)
 
2901
          and (not quit_now)
 
2902
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2903
 
 
2904
  g_assert_true(mandos_client_exited);
 
2905
  g_assert_false(quit_now);
 
2906
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2907
}
 
2908
 
 
2909
static
 
2910
void test_wait_for_mandos_client_exit_failure(test_fixture *fixture,
 
2911
                                              __attribute__((unused))
 
2912
                                              gconstpointer
 
2913
                                              user_data){
 
2914
  bool mandos_client_exited = false;
 
2915
  bool quit_now = false;
 
2916
 
 
2917
  pid_t create_failing_process(void){
 
2918
    const pid_t pid = fork();
 
2919
    if(pid == 0){               /* Child */
 
2920
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2921
        _exit(EXIT_FAILURE);
 
2922
      }
 
2923
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2924
        _exit(EXIT_FAILURE);
 
2925
      }
 
2926
      exit(EXIT_FAILURE);
 
2927
    }
 
2928
    return pid;
 
2929
  }
 
2930
  const pid_t pid = create_failing_process();
 
2931
  g_assert_true(pid != -1);
 
2932
 
 
2933
  __attribute__((cleanup(string_set_clear)))
 
2934
    string_set cancelled_filenames = {};
 
2935
  __attribute__((cleanup(cleanup_close)))
 
2936
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2937
  g_assert_cmpint(epoll_fd, >=, 0);
 
2938
  __attribute__((cleanup(cleanup_queue)))
 
2939
    task_queue *queue = create_queue();
 
2940
  g_assert_nonnull(queue);
 
2941
  g_assert_true(add_to_queue(queue, (task_context){
 
2942
        .func=wait_for_mandos_client_exit,
 
2943
        .pid=pid,
 
2944
        .mandos_client_exited=&mandos_client_exited,
 
2945
        .quit_now=&quit_now,
 
2946
      }));
 
2947
 
 
2948
  g_assert_true(sigismember(&fixture->orig_sigmask, SIGCHLD) == 0);
 
2949
 
 
2950
  __attribute__((cleanup(cleanup_close)))
 
2951
    const int devnull_fd = open("/dev/null",
 
2952
                                O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2953
  g_assert_cmpint(devnull_fd, >=, 0);
 
2954
  __attribute__((cleanup(cleanup_close)))
 
2955
    const int real_stderr_fd = dup(STDERR_FILENO);
 
2956
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
2957
 
 
2958
  struct timespec starttime, currtime;
 
2959
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2960
  do {
 
2961
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2962
    dup2(devnull_fd, STDERR_FILENO);
 
2963
    const bool success = run_queue(&queue, &cancelled_filenames,
 
2964
                                   &quit_now);
 
2965
    dup2(real_stderr_fd, STDERR_FILENO);
 
2966
    if(not success){
 
2967
      break;
 
2968
    }
 
2969
 
 
2970
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2971
  } while((not mandos_client_exited)
 
2972
          and (not quit_now)
 
2973
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2974
 
 
2975
  g_assert_true(quit_now);
 
2976
  g_assert_true(mandos_client_exited);
 
2977
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2978
}
 
2979
 
 
2980
static
 
2981
void test_wait_for_mandos_client_exit_killed(test_fixture *fixture,
 
2982
                                             __attribute__((unused))
 
2983
                                             gconstpointer user_data){
 
2984
  bool mandos_client_exited = false;
 
2985
  bool quit_now = false;
 
2986
 
 
2987
  pid_t create_killed_process(void){
 
2988
    const pid_t pid = fork();
 
2989
    if(pid == 0){               /* Child */
 
2990
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2991
        _exit(EXIT_FAILURE);
 
2992
      }
 
2993
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2994
        _exit(EXIT_FAILURE);
 
2995
      }
 
2996
      while(true){
 
2997
        pause();
 
2998
      }
 
2999
    }
 
3000
    kill(pid, SIGKILL);
 
3001
    return pid;
 
3002
  }
 
3003
  const pid_t pid = create_killed_process();
 
3004
  g_assert_true(pid != -1);
 
3005
 
 
3006
  __attribute__((cleanup(string_set_clear)))
 
3007
    string_set cancelled_filenames = {};
 
3008
  __attribute__((cleanup(cleanup_close)))
 
3009
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3010
  g_assert_cmpint(epoll_fd, >=, 0);
 
3011
  __attribute__((cleanup(cleanup_queue)))
 
3012
    task_queue *queue = create_queue();
 
3013
  g_assert_nonnull(queue);
 
3014
  g_assert_true(add_to_queue(queue, (task_context){
 
3015
        .func=wait_for_mandos_client_exit,
 
3016
        .pid=pid,
 
3017
        .mandos_client_exited=&mandos_client_exited,
 
3018
        .quit_now=&quit_now,
 
3019
      }));
 
3020
 
 
3021
  __attribute__((cleanup(cleanup_close)))
 
3022
    const int devnull_fd = open("/dev/null",
 
3023
                                O_WRONLY | O_CLOEXEC, O_NOCTTY);
 
3024
  g_assert_cmpint(devnull_fd, >=, 0);
 
3025
  __attribute__((cleanup(cleanup_close)))
 
3026
    const int real_stderr_fd = dup(STDERR_FILENO);
 
3027
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
3028
 
 
3029
  struct timespec starttime, currtime;
 
3030
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
3031
  do {
 
3032
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
3033
    dup2(devnull_fd, STDERR_FILENO);
 
3034
    const bool success = run_queue(&queue, &cancelled_filenames,
 
3035
                                   &quit_now);
 
3036
    dup2(real_stderr_fd, STDERR_FILENO);
 
3037
    if(not success){
 
3038
      break;
 
3039
    }
 
3040
 
 
3041
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
3042
  } while((not mandos_client_exited)
 
3043
          and (not quit_now)
 
3044
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
3045
 
 
3046
  g_assert_true(mandos_client_exited);
 
3047
  g_assert_true(quit_now);
 
3048
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3049
}
 
3050
 
 
3051
static bool epoll_set_does_not_contain(int, int);
 
3052
 
 
3053
static
 
3054
void test_read_mandos_client_output_readerror(__attribute__((unused))
 
3055
                                              test_fixture *fixture,
 
3056
                                              __attribute__((unused))
 
3057
                                              gconstpointer
 
3058
                                              user_data){
 
3059
  __attribute__((cleanup(cleanup_close)))
 
3060
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3061
  g_assert_cmpint(epoll_fd, >=, 0);
 
3062
 
 
3063
  __attribute__((cleanup(cleanup_buffer)))
 
3064
    buffer password = {};
 
3065
 
 
3066
  /* Reading /proc/self/mem from offset 0 will always give EIO */
 
3067
  const int fd = open("/proc/self/mem",
 
3068
                      O_RDONLY | O_CLOEXEC | O_NOCTTY);
 
3069
 
 
3070
  bool password_is_read = false;
 
3071
  bool quit_now = false;
 
3072
  __attribute__((cleanup(cleanup_queue)))
 
3073
    task_queue *queue = create_queue();
 
3074
  g_assert_nonnull(queue);
 
3075
 
 
3076
  task_context task = {
 
3077
    .func=read_mandos_client_output,
 
3078
    .epoll_fd=epoll_fd,
 
3079
    .fd=fd,
 
3080
    .password=&password,
 
3081
    .password_is_read=&password_is_read,
 
3082
    .quit_now=&quit_now,
 
3083
  };
 
3084
  run_task_with_stderr_to_dev_null(task, queue);
 
3085
  g_assert_false(password_is_read);
 
3086
  g_assert_cmpint((int)password.length, ==, 0);
 
3087
  g_assert_true(quit_now);
 
3088
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3089
 
 
3090
  g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
 
3091
 
 
3092
  g_assert_cmpint(close(fd), ==, -1);
 
3093
}
 
3094
 
 
3095
static bool epoll_set_does_not_contain(int epoll_fd, int fd){
 
3096
  return not epoll_set_contains(epoll_fd, fd, 0);
 
3097
}
 
3098
 
 
3099
static
 
3100
void test_read_mandos_client_output_nodata(__attribute__((unused))
 
3101
                                           test_fixture *fixture,
 
3102
                                           __attribute__((unused))
 
3103
                                           gconstpointer user_data){
 
3104
  __attribute__((cleanup(cleanup_close)))
 
3105
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3106
  g_assert_cmpint(epoll_fd, >=, 0);
 
3107
 
 
3108
  int pipefds[2];
 
3109
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3110
 
 
3111
  __attribute__((cleanup(cleanup_buffer)))
 
3112
    buffer password = {};
 
3113
 
 
3114
  bool password_is_read = false;
 
3115
  bool quit_now = false;
 
3116
  __attribute__((cleanup(cleanup_queue)))
 
3117
    task_queue *queue = create_queue();
 
3118
  g_assert_nonnull(queue);
 
3119
 
 
3120
  task_context task = {
 
3121
    .func=read_mandos_client_output,
 
3122
    .epoll_fd=epoll_fd,
 
3123
    .fd=pipefds[0],
 
3124
    .password=&password,
 
3125
    .password_is_read=&password_is_read,
 
3126
    .quit_now=&quit_now,
 
3127
  };
 
3128
  task.func(task, queue);
 
3129
  g_assert_false(password_is_read);
 
3130
  g_assert_cmpint((int)password.length, ==, 0);
 
3131
  g_assert_false(quit_now);
 
3132
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3133
 
 
3134
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3135
        .func=read_mandos_client_output,
 
3136
        .epoll_fd=epoll_fd,
 
3137
        .fd=pipefds[0],
 
3138
        .password=&password,
 
3139
        .password_is_read=&password_is_read,
 
3140
        .quit_now=&quit_now,
 
3141
      }));
 
3142
 
 
3143
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3144
                                   EPOLLIN | EPOLLRDHUP));
 
3145
 
 
3146
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3147
}
 
3148
 
 
3149
static void test_read_mandos_client_output_eof(__attribute__((unused))
 
3150
                                               test_fixture *fixture,
 
3151
                                               __attribute__((unused))
 
3152
                                               gconstpointer
 
3153
                                               user_data){
 
3154
  __attribute__((cleanup(cleanup_close)))
 
3155
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3156
  g_assert_cmpint(epoll_fd, >=, 0);
 
3157
 
 
3158
  int pipefds[2];
 
3159
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3160
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3161
 
 
3162
  __attribute__((cleanup(cleanup_buffer)))
 
3163
    buffer password = {};
 
3164
 
 
3165
  bool password_is_read = false;
 
3166
  bool quit_now = false;
 
3167
  __attribute__((cleanup(cleanup_queue)))
 
3168
    task_queue *queue = create_queue();
 
3169
  g_assert_nonnull(queue);
 
3170
 
 
3171
  task_context task = {
 
3172
    .func=read_mandos_client_output,
 
3173
    .epoll_fd=epoll_fd,
 
3174
    .fd=pipefds[0],
 
3175
    .password=&password,
 
3176
    .password_is_read=&password_is_read,
 
3177
    .quit_now=&quit_now,
 
3178
  };
 
3179
  task.func(task, queue);
 
3180
  g_assert_true(password_is_read);
 
3181
  g_assert_cmpint((int)password.length, ==, 0);
 
3182
  g_assert_false(quit_now);
 
3183
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3184
 
 
3185
  g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
 
3186
 
 
3187
  g_assert_cmpint(close(pipefds[0]), ==, -1);
 
3188
}
 
3189
 
 
3190
static
 
3191
void test_read_mandos_client_output_once(__attribute__((unused))
 
3192
                                         test_fixture *fixture,
 
3193
                                         __attribute__((unused))
 
3194
                                         gconstpointer user_data){
 
3195
  __attribute__((cleanup(cleanup_close)))
 
3196
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3197
  g_assert_cmpint(epoll_fd, >=, 0);
 
3198
 
 
3199
  int pipefds[2];
 
3200
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3201
 
 
3202
  const char dummy_test_password[] = "dummy test password";
 
3203
  /* Start with a pre-allocated buffer */
 
3204
  __attribute__((cleanup(cleanup_buffer)))
 
3205
    buffer password = {
 
3206
    .data=malloc(sizeof(dummy_test_password)),
 
3207
    .length=0,
 
3208
    .allocated=sizeof(dummy_test_password),
 
3209
  };
 
3210
  g_assert_nonnull(password.data);
 
3211
  if(mlock(password.data, password.allocated) != 0){
 
3212
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
3213
  }
 
3214
 
 
3215
  bool password_is_read = false;
 
3216
  bool quit_now = false;
 
3217
  __attribute__((cleanup(cleanup_queue)))
 
3218
    task_queue *queue = create_queue();
 
3219
  g_assert_nonnull(queue);
 
3220
 
 
3221
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3222
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3223
                             sizeof(dummy_test_password)),
 
3224
                  ==, (int)sizeof(dummy_test_password));
 
3225
 
 
3226
  task_context task = {
 
3227
    .func=read_mandos_client_output,
 
3228
    .epoll_fd=epoll_fd,
 
3229
    .fd=pipefds[0],
 
3230
    .password=&password,
 
3231
    .password_is_read=&password_is_read,
 
3232
    .quit_now=&quit_now,
 
3233
  };
 
3234
  task.func(task, queue);
 
3235
 
 
3236
  g_assert_false(password_is_read);
 
3237
  g_assert_cmpint((int)password.length, ==,
 
3238
                  (int)sizeof(dummy_test_password));
 
3239
  g_assert_nonnull(password.data);
 
3240
  g_assert_cmpint(memcmp(password.data, dummy_test_password,
 
3241
                         sizeof(dummy_test_password)), ==, 0);
 
3242
 
 
3243
  g_assert_false(quit_now);
 
3244
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3245
 
 
3246
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3247
        .func=read_mandos_client_output,
 
3248
        .epoll_fd=epoll_fd,
 
3249
        .fd=pipefds[0],
 
3250
        .password=&password,
 
3251
        .password_is_read=&password_is_read,
 
3252
        .quit_now=&quit_now,
 
3253
      }));
 
3254
 
 
3255
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3256
                                   EPOLLIN | EPOLLRDHUP));
 
3257
 
 
3258
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3259
}
 
3260
 
 
3261
static
 
3262
void test_read_mandos_client_output_malloc(__attribute__((unused))
 
3263
                                           test_fixture *fixture,
 
3264
                                           __attribute__((unused))
 
3265
                                           gconstpointer user_data){
 
3266
  __attribute__((cleanup(cleanup_close)))
 
3267
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3268
  g_assert_cmpint(epoll_fd, >=, 0);
 
3269
 
 
3270
  int pipefds[2];
 
3271
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3272
 
 
3273
  const char dummy_test_password[] = "dummy test password";
 
3274
  /* Start with an empty buffer */
 
3275
  __attribute__((cleanup(cleanup_buffer)))
 
3276
    buffer password = {};
 
3277
 
 
3278
  bool password_is_read = false;
 
3279
  bool quit_now = false;
 
3280
  __attribute__((cleanup(cleanup_queue)))
 
3281
    task_queue *queue = create_queue();
 
3282
  g_assert_nonnull(queue);
 
3283
 
 
3284
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3285
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3286
                             sizeof(dummy_test_password)),
 
3287
                  ==, (int)sizeof(dummy_test_password));
 
3288
 
 
3289
  task_context task = {
 
3290
    .func=read_mandos_client_output,
 
3291
    .epoll_fd=epoll_fd,
 
3292
    .fd=pipefds[0],
 
3293
    .password=&password,
 
3294
    .password_is_read=&password_is_read,
 
3295
    .quit_now=&quit_now,
 
3296
  };
 
3297
  task.func(task, queue);
 
3298
 
 
3299
  g_assert_false(password_is_read);
 
3300
  g_assert_cmpint((int)password.length, ==,
 
3301
                  (int)sizeof(dummy_test_password));
 
3302
  g_assert_nonnull(password.data);
 
3303
  g_assert_cmpint(memcmp(password.data, dummy_test_password,
 
3304
                         sizeof(dummy_test_password)), ==, 0);
 
3305
 
 
3306
  g_assert_false(quit_now);
 
3307
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3308
 
 
3309
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3310
        .func=read_mandos_client_output,
 
3311
        .epoll_fd=epoll_fd,
 
3312
        .fd=pipefds[0],
 
3313
        .password=&password,
 
3314
        .password_is_read=&password_is_read,
 
3315
        .quit_now=&quit_now,
 
3316
      }));
 
3317
 
 
3318
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3319
                                   EPOLLIN | EPOLLRDHUP));
 
3320
 
 
3321
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3322
}
 
3323
 
 
3324
static
 
3325
void test_read_mandos_client_output_append(__attribute__((unused))
 
3326
                                           test_fixture *fixture,
 
3327
                                           __attribute__((unused))
 
3328
                                           gconstpointer user_data){
 
3329
  __attribute__((cleanup(cleanup_close)))
 
3330
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3331
  g_assert_cmpint(epoll_fd, >=, 0);
 
3332
 
 
3333
  int pipefds[2];
 
3334
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3335
 
 
3336
  const char dummy_test_password[] = "dummy test password";
 
3337
  __attribute__((cleanup(cleanup_buffer)))
 
3338
    buffer password = {
 
3339
    .data=malloc(PIPE_BUF),
 
3340
    .length=PIPE_BUF,
 
3341
    .allocated=PIPE_BUF,
 
3342
  };
 
3343
  g_assert_nonnull(password.data);
 
3344
  if(mlock(password.data, password.allocated) != 0){
 
3345
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
3346
  }
 
3347
 
 
3348
  memset(password.data, 'x', PIPE_BUF);
 
3349
  char password_expected[PIPE_BUF];
 
3350
  memcpy(password_expected, password.data, PIPE_BUF);
 
3351
 
 
3352
  bool password_is_read = false;
 
3353
  bool quit_now = false;
 
3354
  __attribute__((cleanup(cleanup_queue)))
 
3355
    task_queue *queue = create_queue();
 
3356
  g_assert_nonnull(queue);
 
3357
 
 
3358
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3359
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3360
                             sizeof(dummy_test_password)),
 
3361
                  ==, (int)sizeof(dummy_test_password));
 
3362
 
 
3363
  task_context task = {
 
3364
    .func=read_mandos_client_output,
 
3365
    .epoll_fd=epoll_fd,
 
3366
    .fd=pipefds[0],
 
3367
    .password=&password,
 
3368
    .password_is_read=&password_is_read,
 
3369
    .quit_now=&quit_now,
 
3370
  };
 
3371
  task.func(task, queue);
 
3372
 
 
3373
  g_assert_false(password_is_read);
 
3374
  g_assert_cmpint((int)password.length, ==,
 
3375
                  PIPE_BUF + sizeof(dummy_test_password));
 
3376
  g_assert_nonnull(password.data);
 
3377
  g_assert_cmpint(memcmp(password_expected, password.data, PIPE_BUF),
 
3378
                  ==, 0);
 
3379
  g_assert_cmpint(memcmp(password.data + PIPE_BUF,
 
3380
                         dummy_test_password,
 
3381
                         sizeof(dummy_test_password)), ==, 0);
 
3382
  g_assert_false(quit_now);
 
3383
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3384
 
 
3385
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3386
        .func=read_mandos_client_output,
 
3387
        .epoll_fd=epoll_fd,
 
3388
        .fd=pipefds[0],
 
3389
        .password=&password,
 
3390
        .password_is_read=&password_is_read,
 
3391
        .quit_now=&quit_now,
 
3392
      }));
 
3393
 
 
3394
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3395
                                   EPOLLIN | EPOLLRDHUP));
 
3396
}
 
3397
 
 
3398
static char *make_temporary_directory(void);
 
3399
 
 
3400
static void test_add_inotify_dir_watch(__attribute__((unused))
 
3401
                                       test_fixture *fixture,
 
3402
                                       __attribute__((unused))
 
3403
                                       gconstpointer user_data){
 
3404
  __attribute__((cleanup(cleanup_close)))
 
3405
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3406
  g_assert_cmpint(epoll_fd, >=, 0);
 
3407
  __attribute__((cleanup(cleanup_queue)))
 
3408
    task_queue *queue = create_queue();
 
3409
  g_assert_nonnull(queue);
 
3410
  __attribute__((cleanup(string_set_clear)))
 
3411
    string_set cancelled_filenames = {};
 
3412
  const mono_microsecs current_time = 0;
 
3413
 
 
3414
  bool quit_now = false;
 
3415
  buffer password = {};
 
3416
  bool mandos_client_exited = false;
 
3417
  bool password_is_read = false;
 
3418
 
 
3419
  __attribute__((cleanup(cleanup_string)))
 
3420
    char *tempdir = make_temporary_directory();
 
3421
  g_assert_nonnull(tempdir);
 
3422
 
 
3423
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3424
                                      &password, tempdir,
 
3425
                                      &cancelled_filenames,
 
3426
                                      &current_time,
 
3427
                                      &mandos_client_exited,
 
3428
                                      &password_is_read));
 
3429
 
 
3430
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3431
 
 
3432
  const task_context *const added_read_task
 
3433
    = find_matching_task(queue, (task_context){
 
3434
        .func=read_inotify_event,
 
3435
        .epoll_fd=epoll_fd,
 
3436
        .quit_now=&quit_now,
 
3437
        .password=&password,
 
3438
        .filename=tempdir,
 
3439
        .cancelled_filenames=&cancelled_filenames,
 
3440
        .current_time=&current_time,
 
3441
        .mandos_client_exited=&mandos_client_exited,
 
3442
        .password_is_read=&password_is_read,
 
3443
      });
 
3444
  g_assert_nonnull(added_read_task);
 
3445
 
 
3446
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3447
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3448
  g_assert_true(epoll_set_contains(added_read_task->epoll_fd,
 
3449
                                   added_read_task->fd,
 
3450
                                   EPOLLIN | EPOLLRDHUP));
 
3451
 
 
3452
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3453
}
 
3454
 
 
3455
static char *make_temporary_directory(void){
 
3456
  char *name = strdup("/tmp/mandosXXXXXX");
 
3457
  g_assert_nonnull(name);
 
3458
  char *result = mkdtemp(name);
 
3459
  if(result == NULL){
 
3460
    free(name);
 
3461
  }
 
3462
  return result;
 
3463
}
 
3464
 
 
3465
static void test_add_inotify_dir_watch_fail(__attribute__((unused))
 
3466
                                            test_fixture *fixture,
 
3467
                                            __attribute__((unused))
 
3468
                                            gconstpointer user_data){
 
3469
  __attribute__((cleanup(cleanup_close)))
 
3470
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3471
  g_assert_cmpint(epoll_fd, >=, 0);
 
3472
  __attribute__((cleanup(cleanup_queue)))
 
3473
    task_queue *queue = create_queue();
 
3474
  g_assert_nonnull(queue);
 
3475
  __attribute__((cleanup(string_set_clear)))
 
3476
    string_set cancelled_filenames = {};
 
3477
  const mono_microsecs current_time = 0;
 
3478
 
 
3479
  bool quit_now = false;
 
3480
  buffer password = {};
 
3481
  bool mandos_client_exited = false;
 
3482
  bool password_is_read = false;
 
3483
 
 
3484
  const char nonexistent_dir[] = "/nonexistent";
 
3485
 
 
3486
  FILE *real_stderr = stderr;
 
3487
  FILE *devnull = fopen("/dev/null", "we");
 
3488
  g_assert_nonnull(devnull);
 
3489
  stderr = devnull;
 
3490
  g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3491
                                       &password, nonexistent_dir,
 
3492
                                       &cancelled_filenames,
 
3493
                                       &current_time,
 
3494
                                       &mandos_client_exited,
 
3495
                                       &password_is_read));
 
3496
  stderr = real_stderr;
 
3497
  g_assert_cmpint(fclose(devnull), ==, 0);
 
3498
 
 
3499
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3500
}
 
3501
 
 
3502
static void test_add_inotify_dir_watch_nondir(__attribute__((unused))
 
3503
                                              test_fixture *fixture,
 
3504
                                            __attribute__((unused))
 
3505
                                              gconstpointer
 
3506
                                              user_data){
 
3507
  __attribute__((cleanup(cleanup_close)))
 
3508
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3509
  g_assert_cmpint(epoll_fd, >=, 0);
 
3510
  __attribute__((cleanup(cleanup_queue)))
 
3511
    task_queue *queue = create_queue();
 
3512
  g_assert_nonnull(queue);
 
3513
  __attribute__((cleanup(string_set_clear)))
 
3514
    string_set cancelled_filenames = {};
 
3515
  const mono_microsecs current_time = 0;
 
3516
 
 
3517
  bool quit_now = false;
 
3518
  buffer password = {};
 
3519
  bool mandos_client_exited = false;
 
3520
  bool password_is_read = false;
 
3521
 
 
3522
  const char not_a_directory[] = "/dev/tty";
 
3523
 
 
3524
  FILE *real_stderr = stderr;
 
3525
  FILE *devnull = fopen("/dev/null", "we");
 
3526
  g_assert_nonnull(devnull);
 
3527
  stderr = devnull;
 
3528
  g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3529
                                       &password, not_a_directory,
 
3530
                                       &cancelled_filenames,
 
3531
                                       &current_time,
 
3532
                                       &mandos_client_exited,
 
3533
                                       &password_is_read));
 
3534
  stderr = real_stderr;
 
3535
  g_assert_cmpint(fclose(devnull), ==, 0);
 
3536
 
 
3537
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3538
}
 
3539
 
 
3540
static void test_add_inotify_dir_watch_EAGAIN(__attribute__((unused))
 
3541
                                              test_fixture *fixture,
 
3542
                                              __attribute__((unused))
 
3543
                                              gconstpointer
 
3544
                                              user_data){
 
3545
  __attribute__((cleanup(cleanup_close)))
 
3546
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3547
  g_assert_cmpint(epoll_fd, >=, 0);
 
3548
  __attribute__((cleanup(cleanup_queue)))
 
3549
    task_queue *queue = create_queue();
 
3550
  g_assert_nonnull(queue);
 
3551
  __attribute__((cleanup(string_set_clear)))
 
3552
    string_set cancelled_filenames = {};
 
3553
  const mono_microsecs current_time = 0;
 
3554
 
 
3555
  bool quit_now = false;
 
3556
  buffer password = {};
 
3557
  bool mandos_client_exited = false;
 
3558
  bool password_is_read = false;
 
3559
 
 
3560
  __attribute__((cleanup(cleanup_string)))
 
3561
    char *tempdir = make_temporary_directory();
 
3562
  g_assert_nonnull(tempdir);
 
3563
 
 
3564
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3565
                                      &password, tempdir,
 
3566
                                      &cancelled_filenames,
 
3567
                                      &current_time,
 
3568
                                      &mandos_client_exited,
 
3569
                                      &password_is_read));
 
3570
 
 
3571
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3572
 
 
3573
  const task_context *const added_read_task
 
3574
    = find_matching_task(queue,
 
3575
                         (task_context){ .func=read_inotify_event });
 
3576
  g_assert_nonnull(added_read_task);
 
3577
 
 
3578
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3579
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3580
 
 
3581
  /* "sufficient to read at least one event." - inotify(7) */
 
3582
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3583
                              + NAME_MAX + 1);
 
3584
  struct inotify_event *ievent = malloc(ievent_size);
 
3585
  g_assert_nonnull(ievent);
 
3586
 
 
3587
  g_assert_cmpint(read(added_read_task->fd, ievent, ievent_size), ==,
 
3588
                  -1);
 
3589
  g_assert_cmpint(errno, ==, EAGAIN);
 
3590
 
 
3591
  free(ievent);
 
3592
 
 
3593
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3594
}
 
3595
 
 
3596
static char *make_temporary_file_in_directory(const char
 
3597
                                              *const dir);
 
3598
 
 
3599
static
 
3600
void test_add_inotify_dir_watch_IN_CLOSE_WRITE(__attribute__((unused))
 
3601
                                               test_fixture *fixture,
 
3602
                                               __attribute__((unused))
 
3603
                                               gconstpointer
 
3604
                                               user_data){
 
3605
  __attribute__((cleanup(cleanup_close)))
 
3606
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3607
  g_assert_cmpint(epoll_fd, >=, 0);
 
3608
  __attribute__((cleanup(cleanup_queue)))
 
3609
    task_queue *queue = create_queue();
 
3610
  g_assert_nonnull(queue);
 
3611
  __attribute__((cleanup(string_set_clear)))
 
3612
    string_set cancelled_filenames = {};
 
3613
  const mono_microsecs current_time = 0;
 
3614
 
 
3615
  bool quit_now = false;
 
3616
  buffer password = {};
 
3617
  bool mandos_client_exited = false;
 
3618
  bool password_is_read = false;
 
3619
 
 
3620
  __attribute__((cleanup(cleanup_string)))
 
3621
    char *tempdir = make_temporary_directory();
 
3622
  g_assert_nonnull(tempdir);
 
3623
 
 
3624
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3625
                                      &password, tempdir,
 
3626
                                      &cancelled_filenames,
 
3627
                                      &current_time,
 
3628
                                      &mandos_client_exited,
 
3629
                                      &password_is_read));
 
3630
 
 
3631
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3632
 
 
3633
  const task_context *const added_read_task
 
3634
    = find_matching_task(queue,
 
3635
                         (task_context){ .func=read_inotify_event });
 
3636
  g_assert_nonnull(added_read_task);
 
3637
 
 
3638
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3639
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3640
 
 
3641
  __attribute__((cleanup(cleanup_string)))
 
3642
    char *filename = make_temporary_file_in_directory(tempdir);
 
3643
  g_assert_nonnull(filename);
 
3644
 
 
3645
  /* "sufficient to read at least one event." - inotify(7) */
 
3646
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3647
                              + NAME_MAX + 1);
 
3648
  struct inotify_event *ievent = malloc(ievent_size);
 
3649
  g_assert_nonnull(ievent);
 
3650
 
 
3651
  ssize_t read_size = 0;
 
3652
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3653
 
 
3654
  g_assert_cmpint((int)read_size, >, 0);
 
3655
  g_assert_true(ievent->mask & IN_CLOSE_WRITE);
 
3656
  g_assert_cmpstr(ievent->name, ==, basename(filename));
 
3657
 
 
3658
  free(ievent);
 
3659
 
 
3660
  g_assert_cmpint(unlink(filename), ==, 0);
 
3661
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3662
}
 
3663
 
 
3664
static char *make_temporary_prefixed_file_in_directory(const char
 
3665
                                                       *const prefix,
 
3666
                                                       const char
 
3667
                                                       *const dir){
 
3668
  char *filename = NULL;
 
3669
  g_assert_cmpint(asprintf(&filename, "%s/%sXXXXXX", dir, prefix),
 
3670
                  >, 0);
 
3671
  g_assert_nonnull(filename);
 
3672
  const int fd = mkostemp(filename, O_CLOEXEC);
 
3673
  g_assert_cmpint(fd, >=, 0);
 
3674
  g_assert_cmpint(close(fd), ==, 0);
 
3675
  return filename;
 
3676
}
 
3677
 
 
3678
static char *make_temporary_file_in_directory(const char
 
3679
                                              *const dir){
 
3680
  return make_temporary_prefixed_file_in_directory("temp", dir);
 
3681
}
 
3682
 
 
3683
static
 
3684
void test_add_inotify_dir_watch_IN_MOVED_TO(__attribute__((unused))
 
3685
                                            test_fixture *fixture,
 
3686
                                            __attribute__((unused))
 
3687
                                            gconstpointer user_data){
 
3688
  __attribute__((cleanup(cleanup_close)))
 
3689
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3690
  g_assert_cmpint(epoll_fd, >=, 0);
 
3691
  __attribute__((cleanup(cleanup_queue)))
 
3692
    task_queue *queue = create_queue();
 
3693
  g_assert_nonnull(queue);
 
3694
  __attribute__((cleanup(string_set_clear)))
 
3695
    string_set cancelled_filenames = {};
 
3696
  const mono_microsecs current_time = 0;
 
3697
 
 
3698
  bool quit_now = false;
 
3699
  buffer password = {};
 
3700
  bool mandos_client_exited = false;
 
3701
  bool password_is_read = false;
 
3702
 
 
3703
  __attribute__((cleanup(cleanup_string)))
 
3704
    char *watchdir = make_temporary_directory();
 
3705
  g_assert_nonnull(watchdir);
 
3706
 
 
3707
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3708
                                      &password, watchdir,
 
3709
                                      &cancelled_filenames,
 
3710
                                      &current_time,
 
3711
                                      &mandos_client_exited,
 
3712
                                      &password_is_read));
 
3713
 
 
3714
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3715
 
 
3716
  const task_context *const added_read_task
 
3717
    = find_matching_task(queue,
 
3718
                         (task_context){ .func=read_inotify_event });
 
3719
  g_assert_nonnull(added_read_task);
 
3720
 
 
3721
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3722
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3723
 
 
3724
  char *sourcedir = make_temporary_directory();
 
3725
  g_assert_nonnull(sourcedir);
 
3726
 
 
3727
  __attribute__((cleanup(cleanup_string)))
 
3728
    char *filename = make_temporary_file_in_directory(sourcedir);
 
3729
  g_assert_nonnull(filename);
 
3730
 
 
3731
  __attribute__((cleanup(cleanup_string)))
 
3732
    char *targetfilename = NULL;
 
3733
  g_assert_cmpint(asprintf(&targetfilename, "%s/%s", watchdir,
 
3734
                           basename(filename)), >, 0);
 
3735
  g_assert_nonnull(targetfilename);
 
3736
 
 
3737
  g_assert_cmpint(rename(filename, targetfilename), ==, 0);
 
3738
  g_assert_cmpint(rmdir(sourcedir), ==, 0);
 
3739
  free(sourcedir);
 
3740
 
 
3741
  /* "sufficient to read at least one event." - inotify(7) */
 
3742
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3743
                              + NAME_MAX + 1);
 
3744
  struct inotify_event *ievent = malloc(ievent_size);
 
3745
  g_assert_nonnull(ievent);
 
3746
 
 
3747
  ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
 
3748
 
 
3749
  g_assert_cmpint((int)read_size, >, 0);
 
3750
  g_assert_true(ievent->mask & IN_MOVED_TO);
 
3751
  g_assert_cmpstr(ievent->name, ==, basename(targetfilename));
 
3752
 
 
3753
  free(ievent);
 
3754
 
 
3755
  g_assert_cmpint(unlink(targetfilename), ==, 0);
 
3756
  g_assert_cmpint(rmdir(watchdir), ==, 0);
 
3757
}
 
3758
 
 
3759
static
 
3760
void test_add_inotify_dir_watch_IN_MOVED_FROM(__attribute__((unused))
 
3761
                                              test_fixture *fixture,
 
3762
                                              __attribute__((unused))
 
3763
                                              gconstpointer
 
3764
                                              user_data){
 
3765
  __attribute__((cleanup(cleanup_close)))
 
3766
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3767
  g_assert_cmpint(epoll_fd, >=, 0);
 
3768
  __attribute__((cleanup(cleanup_queue)))
 
3769
    task_queue *queue = create_queue();
 
3770
  g_assert_nonnull(queue);
 
3771
  __attribute__((cleanup(string_set_clear)))
 
3772
    string_set cancelled_filenames = {};
 
3773
  const mono_microsecs current_time = 0;
 
3774
 
 
3775
  bool quit_now = false;
 
3776
  buffer password = {};
 
3777
  bool mandos_client_exited = false;
 
3778
  bool password_is_read = false;
 
3779
 
 
3780
  __attribute__((cleanup(cleanup_string)))
 
3781
    char *tempdir = make_temporary_directory();
 
3782
  g_assert_nonnull(tempdir);
 
3783
 
 
3784
  __attribute__((cleanup(cleanup_string)))
 
3785
    char *tempfilename = make_temporary_file_in_directory(tempdir);
 
3786
  g_assert_nonnull(tempfilename);
 
3787
 
 
3788
  __attribute__((cleanup(cleanup_string)))
 
3789
    char *targetdir = make_temporary_directory();
 
3790
  g_assert_nonnull(targetdir);
 
3791
 
 
3792
  __attribute__((cleanup(cleanup_string)))
 
3793
    char *targetfilename = NULL;
 
3794
  g_assert_cmpint(asprintf(&targetfilename, "%s/%s", targetdir,
 
3795
                           basename(tempfilename)), >, 0);
 
3796
  g_assert_nonnull(targetfilename);
 
3797
 
 
3798
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3799
                                      &password, tempdir,
 
3800
                                      &cancelled_filenames,
 
3801
                                      &current_time,
 
3802
                                      &mandos_client_exited,
 
3803
                                      &password_is_read));
 
3804
 
 
3805
  g_assert_cmpint(rename(tempfilename, targetfilename), ==, 0);
 
3806
 
 
3807
  const task_context *const added_read_task
 
3808
    = find_matching_task(queue,
 
3809
                         (task_context){ .func=read_inotify_event });
 
3810
  g_assert_nonnull(added_read_task);
 
3811
 
 
3812
  /* "sufficient to read at least one event." - inotify(7) */
 
3813
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3814
                              + NAME_MAX + 1);
 
3815
  struct inotify_event *ievent = malloc(ievent_size);
 
3816
  g_assert_nonnull(ievent);
 
3817
 
 
3818
  ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
 
3819
 
 
3820
  g_assert_cmpint((int)read_size, >, 0);
 
3821
  g_assert_true(ievent->mask & IN_MOVED_FROM);
 
3822
  g_assert_cmpstr(ievent->name, ==, basename(tempfilename));
 
3823
 
 
3824
  free(ievent);
 
3825
 
 
3826
  g_assert_cmpint(unlink(targetfilename), ==, 0);
 
3827
  g_assert_cmpint(rmdir(targetdir), ==, 0);
 
3828
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3829
}
 
3830
 
 
3831
static
 
3832
void test_add_inotify_dir_watch_IN_DELETE(__attribute__((unused))
 
3833
                                          test_fixture *fixture,
 
3834
                                          __attribute__((unused))
 
3835
                                          gconstpointer user_data){
 
3836
  __attribute__((cleanup(cleanup_close)))
 
3837
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3838
  g_assert_cmpint(epoll_fd, >=, 0);
 
3839
  __attribute__((cleanup(cleanup_queue)))
 
3840
    task_queue *queue = create_queue();
 
3841
  g_assert_nonnull(queue);
 
3842
  __attribute__((cleanup(string_set_clear)))
 
3843
    string_set cancelled_filenames = {};
 
3844
  const mono_microsecs current_time = 0;
 
3845
 
 
3846
  bool quit_now = false;
 
3847
  buffer password = {};
 
3848
  bool mandos_client_exited = false;
 
3849
  bool password_is_read = false;
 
3850
 
 
3851
  __attribute__((cleanup(cleanup_string)))
 
3852
    char *tempdir = make_temporary_directory();
 
3853
  g_assert_nonnull(tempdir);
 
3854
 
 
3855
  __attribute__((cleanup(cleanup_string)))
 
3856
    char *tempfile = make_temporary_file_in_directory(tempdir);
 
3857
  g_assert_nonnull(tempfile);
 
3858
 
 
3859
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3860
                                      &password, tempdir,
 
3861
                                      &cancelled_filenames,
 
3862
                                      &current_time,
 
3863
                                      &mandos_client_exited,
 
3864
                                      &password_is_read));
 
3865
  g_assert_cmpint(unlink(tempfile), ==, 0);
 
3866
 
 
3867
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3868
 
 
3869
  const task_context *const added_read_task
 
3870
    = find_matching_task(queue,
 
3871
                         (task_context){ .func=read_inotify_event });
 
3872
  g_assert_nonnull(added_read_task);
 
3873
 
 
3874
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3875
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3876
 
 
3877
  /* "sufficient to read at least one event." - inotify(7) */
 
3878
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3879
                              + NAME_MAX + 1);
 
3880
  struct inotify_event *ievent = malloc(ievent_size);
 
3881
  g_assert_nonnull(ievent);
 
3882
 
 
3883
  ssize_t read_size = 0;
 
3884
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3885
 
 
3886
  g_assert_cmpint((int)read_size, >, 0);
 
3887
  g_assert_true(ievent->mask & IN_DELETE);
 
3888
  g_assert_cmpstr(ievent->name, ==, basename(tempfile));
 
3889
 
 
3890
  free(ievent);
 
3891
 
 
3892
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3893
}
 
3894
 
 
3895
static
 
3896
void test_add_inotify_dir_watch_IN_EXCL_UNLINK(__attribute__((unused))
 
3897
                                               test_fixture *fixture,
 
3898
                                               __attribute__((unused))
 
3899
                                               gconstpointer
 
3900
                                               user_data){
 
3901
  __attribute__((cleanup(cleanup_close)))
 
3902
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3903
  g_assert_cmpint(epoll_fd, >=, 0);
 
3904
  __attribute__((cleanup(cleanup_queue)))
 
3905
    task_queue *queue = create_queue();
 
3906
  g_assert_nonnull(queue);
 
3907
  __attribute__((cleanup(string_set_clear)))
 
3908
    string_set cancelled_filenames = {};
 
3909
  const mono_microsecs current_time = 0;
 
3910
 
 
3911
  bool quit_now = false;
 
3912
  buffer password = {};
 
3913
  bool mandos_client_exited = false;
 
3914
  bool password_is_read = false;
 
3915
 
 
3916
  __attribute__((cleanup(cleanup_string)))
 
3917
    char *tempdir = make_temporary_directory();
 
3918
  g_assert_nonnull(tempdir);
 
3919
 
 
3920
  __attribute__((cleanup(cleanup_string)))
 
3921
    char *tempfile = make_temporary_file_in_directory(tempdir);
 
3922
  g_assert_nonnull(tempfile);
 
3923
  int tempfile_fd = open(tempfile, O_WRONLY | O_CLOEXEC | O_NOCTTY
 
3924
                         | O_NOFOLLOW);
 
3925
  g_assert_cmpint(tempfile_fd, >, 2);
 
3926
 
 
3927
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3928
                                      &password, tempdir,
 
3929
                                      &cancelled_filenames,
 
3930
                                      &current_time,
 
3931
                                      &mandos_client_exited,
 
3932
                                      &password_is_read));
 
3933
  g_assert_cmpint(unlink(tempfile), ==, 0);
 
3934
 
 
3935
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3936
 
 
3937
  const task_context *const added_read_task
 
3938
    = find_matching_task(queue,
 
3939
                         (task_context){ .func=read_inotify_event });
 
3940
  g_assert_nonnull(added_read_task);
 
3941
 
 
3942
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3943
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3944
 
 
3945
  /* "sufficient to read at least one event." - inotify(7) */
 
3946
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3947
                              + NAME_MAX + 1);
 
3948
  struct inotify_event *ievent = malloc(ievent_size);
 
3949
  g_assert_nonnull(ievent);
 
3950
 
 
3951
  ssize_t read_size = 0;
 
3952
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3953
 
 
3954
  g_assert_cmpint((int)read_size, >, 0);
 
3955
  g_assert_true(ievent->mask & IN_DELETE);
 
3956
  g_assert_cmpstr(ievent->name, ==, basename(tempfile));
 
3957
 
 
3958
  g_assert_cmpint(close(tempfile_fd), ==, 0);
 
3959
 
 
3960
  /* IN_EXCL_UNLINK should make the closing of the previously unlinked
 
3961
     file not appear as an ievent, so we should not see it now. */
 
3962
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3963
  g_assert_cmpint((int)read_size, ==, -1);
 
3964
  g_assert_true(errno == EAGAIN);
 
3965
 
 
3966
  free(ievent);
 
3967
 
 
3968
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3969
}
 
3970
 
 
3971
static void test_read_inotify_event_readerror(__attribute__((unused))
 
3972
                                              test_fixture *fixture,
 
3973
                                              __attribute__((unused))
 
3974
                                              gconstpointer
 
3975
                                              user_data){
 
3976
  __attribute__((cleanup(cleanup_close)))
 
3977
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3978
  g_assert_cmpint(epoll_fd, >=, 0);
 
3979
  const mono_microsecs current_time = 0;
 
3980
 
 
3981
  /* Reading /proc/self/mem from offset 0 will always result in EIO */
 
3982
  const int fd = open("/proc/self/mem",
 
3983
                      O_RDONLY | O_CLOEXEC | O_NOCTTY);
 
3984
 
 
3985
  bool quit_now = false;
 
3986
  __attribute__((cleanup(cleanup_queue)))
 
3987
    task_queue *queue = create_queue();
 
3988
  g_assert_nonnull(queue);
 
3989
 
 
3990
  task_context task = {
 
3991
    .func=read_inotify_event,
 
3992
    .epoll_fd=epoll_fd,
 
3993
    .fd=fd,
 
3994
    .quit_now=&quit_now,
 
3995
    .filename=strdup("/nonexistent"),
 
3996
    .cancelled_filenames = &(string_set){},
 
3997
    .notafter=0,
 
3998
    .current_time=&current_time,
 
3999
  };
 
4000
  g_assert_nonnull(task.filename);
 
4001
  run_task_with_stderr_to_dev_null(task, queue);
 
4002
  g_assert_true(quit_now);
 
4003
  g_assert_true(queue->next_run == 0);
 
4004
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4005
 
 
4006
  g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
 
4007
 
 
4008
  g_assert_cmpint(close(fd), ==, -1);
 
4009
}
 
4010
 
 
4011
static void test_read_inotify_event_bad_epoll(__attribute__((unused))
 
4012
                                              test_fixture *fixture,
 
4013
                                              __attribute__((unused))
 
4014
                                              gconstpointer
 
4015
                                              user_data){
 
4016
  const mono_microsecs current_time = 17;
 
4017
 
 
4018
  int pipefds[2];
 
4019
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4020
  const int epoll_fd = pipefds[0]; /* This will obviously fail */
 
4021
 
 
4022
  bool quit_now = false;
 
4023
  buffer password = {};
 
4024
  bool mandos_client_exited = false;
 
4025
  bool password_is_read = false;
 
4026
  __attribute__((cleanup(cleanup_queue)))
 
4027
    task_queue *queue = create_queue();
 
4028
  g_assert_nonnull(queue);
 
4029
 
 
4030
  task_context task = {
 
4031
    .func=read_inotify_event,
 
4032
    .epoll_fd=epoll_fd,
 
4033
    .fd=pipefds[0],
 
4034
    .quit_now=&quit_now,
 
4035
    .password=&password,
 
4036
    .filename=strdup("/nonexistent"),
 
4037
    .cancelled_filenames = &(string_set){},
 
4038
    .notafter=0,
 
4039
    .current_time=&current_time,
 
4040
    .mandos_client_exited=&mandos_client_exited,
 
4041
    .password_is_read=&password_is_read,
 
4042
  };
 
4043
  g_assert_nonnull(task.filename);
 
4044
  run_task_with_stderr_to_dev_null(task, queue);
 
4045
 
 
4046
  g_assert_nonnull(find_matching_task(queue, task));
 
4047
  g_assert_true(queue->next_run == 1000000 + current_time);
 
4048
 
 
4049
  g_assert_cmpint(close(pipefds[0]), ==, 0);
 
4050
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4051
}
 
4052
 
 
4053
static void test_read_inotify_event_nodata(__attribute__((unused))
 
4054
                                           test_fixture *fixture,
 
4055
                                           __attribute__((unused))
 
4056
                                           gconstpointer user_data){
 
4057
  __attribute__((cleanup(cleanup_close)))
 
4058
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4059
  g_assert_cmpint(epoll_fd, >=, 0);
 
4060
  const mono_microsecs current_time = 0;
 
4061
 
 
4062
  int pipefds[2];
 
4063
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4064
 
 
4065
  bool quit_now = false;
 
4066
  buffer password = {};
 
4067
  bool mandos_client_exited = false;
 
4068
  bool password_is_read = false;
 
4069
  __attribute__((cleanup(cleanup_queue)))
 
4070
    task_queue *queue = create_queue();
 
4071
  g_assert_nonnull(queue);
 
4072
 
 
4073
  task_context task = {
 
4074
    .func=read_inotify_event,
 
4075
    .epoll_fd=epoll_fd,
 
4076
    .fd=pipefds[0],
 
4077
    .quit_now=&quit_now,
 
4078
    .password=&password,
 
4079
    .filename=strdup("/nonexistent"),
 
4080
    .cancelled_filenames = &(string_set){},
 
4081
    .notafter=0,
 
4082
    .current_time=&current_time,
 
4083
    .mandos_client_exited=&mandos_client_exited,
 
4084
    .password_is_read=&password_is_read,
 
4085
  };
 
4086
  g_assert_nonnull(task.filename);
 
4087
  task.func(task, queue);
 
4088
  g_assert_false(quit_now);
 
4089
  g_assert_true(queue->next_run == 0);
 
4090
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4091
 
 
4092
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4093
        .func=read_inotify_event,
 
4094
        .epoll_fd=epoll_fd,
 
4095
        .fd=pipefds[0],
 
4096
        .quit_now=&quit_now,
 
4097
        .password=&password,
 
4098
        .filename=task.filename,
 
4099
        .cancelled_filenames=task.cancelled_filenames,
 
4100
        .current_time=&current_time,
 
4101
        .mandos_client_exited=&mandos_client_exited,
 
4102
        .password_is_read=&password_is_read,
 
4103
      }));
 
4104
 
 
4105
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4106
                                   EPOLLIN | EPOLLRDHUP));
 
4107
 
 
4108
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4109
}
 
4110
 
 
4111
static void test_read_inotify_event_eof(__attribute__((unused))
 
4112
                                        test_fixture *fixture,
 
4113
                                        __attribute__((unused))
 
4114
                                        gconstpointer user_data){
 
4115
  __attribute__((cleanup(cleanup_close)))
 
4116
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4117
  g_assert_cmpint(epoll_fd, >=, 0);
 
4118
  const mono_microsecs current_time = 0;
 
4119
 
 
4120
  int pipefds[2];
 
4121
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4122
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4123
 
 
4124
  bool quit_now = false;
 
4125
  buffer password = {};
 
4126
  __attribute__((cleanup(cleanup_queue)))
 
4127
    task_queue *queue = create_queue();
 
4128
  g_assert_nonnull(queue);
 
4129
 
 
4130
  task_context task = {
 
4131
    .func=read_inotify_event,
 
4132
    .epoll_fd=epoll_fd,
 
4133
    .fd=pipefds[0],
 
4134
    .quit_now=&quit_now,
 
4135
    .password=&password,
 
4136
    .filename=strdup("/nonexistent"),
 
4137
    .cancelled_filenames = &(string_set){},
 
4138
    .notafter=0,
 
4139
    .current_time=&current_time,
 
4140
  };
 
4141
  run_task_with_stderr_to_dev_null(task, queue);
 
4142
  g_assert_true(quit_now);
 
4143
  g_assert_true(queue->next_run == 0);
 
4144
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4145
 
 
4146
  g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
 
4147
 
 
4148
  g_assert_cmpint(close(pipefds[0]), ==, -1);
 
4149
}
 
4150
 
 
4151
static
 
4152
void test_read_inotify_event_IN_CLOSE_WRITE(__attribute__((unused))
 
4153
                                            test_fixture *fixture,
 
4154
                                            __attribute__((unused))
 
4155
                                            gconstpointer user_data){
 
4156
  __attribute__((cleanup(cleanup_close)))
 
4157
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4158
  g_assert_cmpint(epoll_fd, >=, 0);
 
4159
  const mono_microsecs current_time = 0;
 
4160
 
 
4161
  int pipefds[2];
 
4162
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4163
 
 
4164
  /* "sufficient to read at least one event." - inotify(7) */
 
4165
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4166
                                  + NAME_MAX + 1);
 
4167
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4168
  struct {
 
4169
    struct inotify_event event;
 
4170
    char name_buffer[NAME_MAX + 1];
 
4171
  } ievent_buffer;
 
4172
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4173
 
 
4174
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4175
  ievent->mask = IN_CLOSE_WRITE;
 
4176
  ievent->len = sizeof(dummy_file_name);
 
4177
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4178
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4179
                              + sizeof(dummy_file_name));
 
4180
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4181
                  ==, ievent_size);
 
4182
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4183
 
 
4184
  bool quit_now = false;
 
4185
  buffer password = {};
 
4186
  bool mandos_client_exited = false;
 
4187
  bool password_is_read = false;
 
4188
  __attribute__((cleanup(cleanup_queue)))
 
4189
    task_queue *queue = create_queue();
 
4190
  g_assert_nonnull(queue);
 
4191
 
 
4192
  task_context task = {
 
4193
    .func=read_inotify_event,
 
4194
    .epoll_fd=epoll_fd,
 
4195
    .fd=pipefds[0],
 
4196
    .quit_now=&quit_now,
 
4197
    .password=&password,
 
4198
    .filename=strdup("/nonexistent"),
 
4199
    .cancelled_filenames = &(string_set){},
 
4200
    .notafter=0,
 
4201
    .current_time=&current_time,
 
4202
    .mandos_client_exited=&mandos_client_exited,
 
4203
    .password_is_read=&password_is_read,
 
4204
  };
 
4205
  task.func(task, queue);
 
4206
  g_assert_false(quit_now);
 
4207
  g_assert_true(queue->next_run != 0);
 
4208
  g_assert_cmpuint((unsigned int)queue->length, >=, 1);
 
4209
 
 
4210
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4211
        .func=read_inotify_event,
 
4212
        .epoll_fd=epoll_fd,
 
4213
        .fd=pipefds[0],
 
4214
        .quit_now=&quit_now,
 
4215
        .password=&password,
 
4216
        .filename=task.filename,
 
4217
        .cancelled_filenames=task.cancelled_filenames,
 
4218
        .current_time=&current_time,
 
4219
        .mandos_client_exited=&mandos_client_exited,
 
4220
        .password_is_read=&password_is_read,
 
4221
      }));
 
4222
 
 
4223
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4224
                                   EPOLLIN | EPOLLRDHUP));
 
4225
 
 
4226
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
4227
 
 
4228
  __attribute__((cleanup(cleanup_string)))
 
4229
    char *filename = NULL;
 
4230
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4231
                           dummy_file_name), >, 0);
 
4232
  g_assert_nonnull(filename);
 
4233
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4234
        .func=open_and_parse_question,
 
4235
        .epoll_fd=epoll_fd,
 
4236
        .filename=filename,
 
4237
        .question_filename=filename,
 
4238
        .password=&password,
 
4239
        .cancelled_filenames=task.cancelled_filenames,
 
4240
        .current_time=&current_time,
 
4241
        .mandos_client_exited=&mandos_client_exited,
 
4242
        .password_is_read=&password_is_read,
 
4243
      }));
 
4244
}
 
4245
 
 
4246
static
 
4247
void test_read_inotify_event_IN_MOVED_TO(__attribute__((unused))
 
4248
                                         test_fixture *fixture,
 
4249
                                         __attribute__((unused))
 
4250
                                         gconstpointer user_data){
 
4251
  __attribute__((cleanup(cleanup_close)))
 
4252
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4253
  g_assert_cmpint(epoll_fd, >=, 0);
 
4254
  const mono_microsecs current_time = 0;
 
4255
 
 
4256
  int pipefds[2];
 
4257
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4258
 
 
4259
  /* "sufficient to read at least one event." - inotify(7) */
 
4260
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4261
                                  + NAME_MAX + 1);
 
4262
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4263
  struct {
 
4264
    struct inotify_event event;
 
4265
    char name_buffer[NAME_MAX + 1];
 
4266
  } ievent_buffer;
 
4267
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4268
 
 
4269
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4270
  ievent->mask = IN_MOVED_TO;
 
4271
  ievent->len = sizeof(dummy_file_name);
 
4272
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4273
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4274
                              + sizeof(dummy_file_name));
 
4275
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4276
                  ==, ievent_size);
 
4277
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4278
 
 
4279
  bool quit_now = false;
 
4280
  buffer password = {};
 
4281
  bool mandos_client_exited = false;
 
4282
  bool password_is_read = false;
 
4283
  __attribute__((cleanup(cleanup_queue)))
 
4284
    task_queue *queue = create_queue();
 
4285
  g_assert_nonnull(queue);
 
4286
 
 
4287
  task_context task = {
 
4288
    .func=read_inotify_event,
 
4289
    .epoll_fd=epoll_fd,
 
4290
    .fd=pipefds[0],
 
4291
    .quit_now=&quit_now,
 
4292
    .password=&password,
 
4293
    .filename=strdup("/nonexistent"),
 
4294
    .cancelled_filenames = &(string_set){},
 
4295
    .notafter=0,
 
4296
    .current_time=&current_time,
 
4297
    .mandos_client_exited=&mandos_client_exited,
 
4298
    .password_is_read=&password_is_read,
 
4299
  };
 
4300
  task.func(task, queue);
 
4301
  g_assert_false(quit_now);
 
4302
  g_assert_true(queue->next_run != 0);
 
4303
  g_assert_cmpuint((unsigned int)queue->length, >=, 1);
 
4304
 
 
4305
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4306
        .func=read_inotify_event,
 
4307
        .epoll_fd=epoll_fd,
 
4308
        .fd=pipefds[0],
 
4309
        .quit_now=&quit_now,
 
4310
        .password=&password,
 
4311
        .filename=task.filename,
 
4312
        .cancelled_filenames=task.cancelled_filenames,
 
4313
        .current_time=&current_time,
 
4314
        .mandos_client_exited=&mandos_client_exited,
 
4315
        .password_is_read=&password_is_read,
 
4316
      }));
 
4317
 
 
4318
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4319
                                   EPOLLIN | EPOLLRDHUP));
 
4320
 
 
4321
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
4322
 
 
4323
  __attribute__((cleanup(cleanup_string)))
 
4324
    char *filename = NULL;
 
4325
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4326
                           dummy_file_name), >, 0);
 
4327
  g_assert_nonnull(filename);
 
4328
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4329
        .func=open_and_parse_question,
 
4330
        .epoll_fd=epoll_fd,
 
4331
        .filename=filename,
 
4332
        .question_filename=filename,
 
4333
        .password=&password,
 
4334
        .cancelled_filenames=task.cancelled_filenames,
 
4335
        .current_time=&current_time,
 
4336
        .mandos_client_exited=&mandos_client_exited,
 
4337
        .password_is_read=&password_is_read,
 
4338
      }));
 
4339
}
 
4340
 
 
4341
static
 
4342
void test_read_inotify_event_IN_MOVED_FROM(__attribute__((unused))
 
4343
                                           test_fixture *fixture,
 
4344
                                           __attribute__((unused))
 
4345
                                           gconstpointer user_data){
 
4346
  __attribute__((cleanup(cleanup_close)))
 
4347
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4348
  g_assert_cmpint(epoll_fd, >=, 0);
 
4349
  __attribute__((cleanup(string_set_clear)))
 
4350
    string_set cancelled_filenames = {};
 
4351
  const mono_microsecs current_time = 0;
 
4352
 
 
4353
  int pipefds[2];
 
4354
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4355
 
 
4356
  /* "sufficient to read at least one event." - inotify(7) */
 
4357
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4358
                                  + NAME_MAX + 1);
 
4359
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4360
  struct {
 
4361
    struct inotify_event event;
 
4362
    char name_buffer[NAME_MAX + 1];
 
4363
  } ievent_buffer;
 
4364
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4365
 
 
4366
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4367
  ievent->mask = IN_MOVED_FROM;
 
4368
  ievent->len = sizeof(dummy_file_name);
 
4369
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4370
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4371
                              + sizeof(dummy_file_name));
 
4372
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4373
                  ==, ievent_size);
 
4374
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4375
 
 
4376
  bool quit_now = false;
 
4377
  buffer password = {};
 
4378
  bool mandos_client_exited = false;
 
4379
  bool password_is_read = false;
 
4380
  __attribute__((cleanup(cleanup_queue)))
 
4381
    task_queue *queue = create_queue();
 
4382
  g_assert_nonnull(queue);
 
4383
 
 
4384
  task_context task = {
 
4385
    .func=read_inotify_event,
 
4386
    .epoll_fd=epoll_fd,
 
4387
    .fd=pipefds[0],
 
4388
    .quit_now=&quit_now,
 
4389
    .password=&password,
 
4390
    .filename=strdup("/nonexistent"),
 
4391
    .cancelled_filenames=&cancelled_filenames,
 
4392
    .current_time=&current_time,
 
4393
    .mandos_client_exited=&mandos_client_exited,
 
4394
    .password_is_read=&password_is_read,
 
4395
  };
 
4396
  task.func(task, queue);
 
4397
  g_assert_false(quit_now);
 
4398
  g_assert_true(queue->next_run == 0);
 
4399
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4400
 
 
4401
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4402
        .func=read_inotify_event,
 
4403
        .epoll_fd=epoll_fd,
 
4404
        .fd=pipefds[0],
 
4405
        .quit_now=&quit_now,
 
4406
        .password=&password,
 
4407
        .filename=task.filename,
 
4408
        .cancelled_filenames=&cancelled_filenames,
 
4409
        .current_time=&current_time,
 
4410
        .mandos_client_exited=&mandos_client_exited,
 
4411
        .password_is_read=&password_is_read,
 
4412
      }));
 
4413
 
 
4414
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4415
                                   EPOLLIN | EPOLLRDHUP));
 
4416
 
 
4417
  __attribute__((cleanup(cleanup_string)))
 
4418
    char *filename = NULL;
 
4419
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4420
                           dummy_file_name), >, 0);
 
4421
  g_assert_nonnull(filename);
 
4422
  g_assert_true(string_set_contains(*task.cancelled_filenames,
 
4423
                                    filename));
 
4424
}
 
4425
 
 
4426
static void test_read_inotify_event_IN_DELETE(__attribute__((unused))
 
4427
                                              test_fixture *fixture,
 
4428
                                              __attribute__((unused))
 
4429
                                              gconstpointer
 
4430
                                              user_data){
 
4431
  __attribute__((cleanup(cleanup_close)))
 
4432
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4433
  g_assert_cmpint(epoll_fd, >=, 0);
 
4434
  __attribute__((cleanup(string_set_clear)))
 
4435
    string_set cancelled_filenames = {};
 
4436
  const mono_microsecs current_time = 0;
 
4437
 
 
4438
  int pipefds[2];
 
4439
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4440
 
 
4441
  /* "sufficient to read at least one event." - inotify(7) */
 
4442
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4443
                                  + NAME_MAX + 1);
 
4444
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4445
  struct {
 
4446
    struct inotify_event event;
 
4447
    char name_buffer[NAME_MAX + 1];
 
4448
  } ievent_buffer;
 
4449
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4450
 
 
4451
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4452
  ievent->mask = IN_DELETE;
 
4453
  ievent->len = sizeof(dummy_file_name);
 
4454
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4455
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4456
                              + sizeof(dummy_file_name));
 
4457
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4458
                  ==, ievent_size);
 
4459
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4460
 
 
4461
  bool quit_now = false;
 
4462
  buffer password = {};
 
4463
  bool mandos_client_exited = false;
 
4464
  bool password_is_read = false;
 
4465
  __attribute__((cleanup(cleanup_queue)))
 
4466
    task_queue *queue = create_queue();
 
4467
  g_assert_nonnull(queue);
 
4468
 
 
4469
  task_context task = {
 
4470
    .func=read_inotify_event,
 
4471
    .epoll_fd=epoll_fd,
 
4472
    .fd=pipefds[0],
 
4473
    .quit_now=&quit_now,
 
4474
    .password=&password,
 
4475
    .filename=strdup("/nonexistent"),
 
4476
    .cancelled_filenames=&cancelled_filenames,
 
4477
    .current_time=&current_time,
 
4478
    .mandos_client_exited=&mandos_client_exited,
 
4479
    .password_is_read=&password_is_read,
 
4480
  };
 
4481
  task.func(task, queue);
 
4482
  g_assert_false(quit_now);
 
4483
  g_assert_true(queue->next_run == 0);
 
4484
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4485
 
 
4486
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4487
        .func=read_inotify_event,
 
4488
        .epoll_fd=epoll_fd,
 
4489
        .fd=pipefds[0],
 
4490
        .quit_now=&quit_now,
 
4491
        .password=&password,
 
4492
        .filename=task.filename,
 
4493
        .cancelled_filenames=&cancelled_filenames,
 
4494
        .current_time=&current_time,
 
4495
        .mandos_client_exited=&mandos_client_exited,
 
4496
        .password_is_read=&password_is_read,
 
4497
      }));
 
4498
 
 
4499
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4500
                                   EPOLLIN | EPOLLRDHUP));
 
4501
 
 
4502
  __attribute__((cleanup(cleanup_string)))
 
4503
    char *filename = NULL;
 
4504
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4505
                           dummy_file_name), >, 0);
 
4506
  g_assert_nonnull(filename);
 
4507
  g_assert_true(string_set_contains(*task.cancelled_filenames,
 
4508
                                    filename));
 
4509
}
 
4510
 
 
4511
static void
 
4512
test_read_inotify_event_IN_CLOSE_WRITE_badname(__attribute__((unused))
 
4513
                                               test_fixture *fixture,
 
4514
                                               __attribute__((unused))
 
4515
                                               gconstpointer
 
4516
                                               user_data){
 
4517
  __attribute__((cleanup(cleanup_close)))
 
4518
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4519
  g_assert_cmpint(epoll_fd, >=, 0);
 
4520
  const mono_microsecs current_time = 0;
 
4521
 
 
4522
  int pipefds[2];
 
4523
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4524
 
 
4525
  /* "sufficient to read at least one event." - inotify(7) */
 
4526
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4527
                                  + NAME_MAX + 1);
 
4528
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4529
  struct {
 
4530
    struct inotify_event event;
 
4531
    char name_buffer[NAME_MAX + 1];
 
4532
  } ievent_buffer;
 
4533
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4534
 
 
4535
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4536
  ievent->mask = IN_CLOSE_WRITE;
 
4537
  ievent->len = sizeof(dummy_file_name);
 
4538
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4539
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4540
                              + sizeof(dummy_file_name));
 
4541
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4542
                  ==, ievent_size);
 
4543
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4544
 
 
4545
  bool quit_now = false;
 
4546
  buffer password = {};
 
4547
  bool mandos_client_exited = false;
 
4548
  bool password_is_read = false;
 
4549
  __attribute__((cleanup(cleanup_queue)))
 
4550
    task_queue *queue = create_queue();
 
4551
  g_assert_nonnull(queue);
 
4552
 
 
4553
  task_context task = {
 
4554
    .func=read_inotify_event,
 
4555
    .epoll_fd=epoll_fd,
 
4556
    .fd=pipefds[0],
 
4557
    .quit_now=&quit_now,
 
4558
    .password=&password,
 
4559
    .filename=strdup("/nonexistent"),
 
4560
    .cancelled_filenames = &(string_set){},
 
4561
    .notafter=0,
 
4562
    .current_time=&current_time,
 
4563
    .mandos_client_exited=&mandos_client_exited,
 
4564
    .password_is_read=&password_is_read,
 
4565
  };
 
4566
  task.func(task, queue);
 
4567
  g_assert_false(quit_now);
 
4568
  g_assert_true(queue->next_run == 0);
 
4569
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4570
 
 
4571
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4572
        .func=read_inotify_event,
 
4573
        .epoll_fd=epoll_fd,
 
4574
        .fd=pipefds[0],
 
4575
        .quit_now=&quit_now,
 
4576
        .password=&password,
 
4577
        .filename=task.filename,
 
4578
        .cancelled_filenames=task.cancelled_filenames,
 
4579
        .current_time=&current_time,
 
4580
        .mandos_client_exited=&mandos_client_exited,
 
4581
        .password_is_read=&password_is_read,
 
4582
      }));
 
4583
 
 
4584
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4585
                                   EPOLLIN | EPOLLRDHUP));
 
4586
}
 
4587
 
 
4588
static void
 
4589
test_read_inotify_event_IN_MOVED_TO_badname(__attribute__((unused))
 
4590
                                            test_fixture *fixture,
 
4591
                                            __attribute__((unused))
 
4592
                                            gconstpointer user_data){
 
4593
  __attribute__((cleanup(cleanup_close)))
 
4594
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4595
  g_assert_cmpint(epoll_fd, >=, 0);
 
4596
  const mono_microsecs current_time = 0;
 
4597
 
 
4598
  int pipefds[2];
 
4599
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4600
 
 
4601
  /* "sufficient to read at least one event." - inotify(7) */
 
4602
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4603
                                  + NAME_MAX + 1);
 
4604
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4605
  struct {
 
4606
    struct inotify_event event;
 
4607
    char name_buffer[NAME_MAX + 1];
 
4608
  } ievent_buffer;
 
4609
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4610
 
 
4611
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4612
  ievent->mask = IN_MOVED_TO;
 
4613
  ievent->len = sizeof(dummy_file_name);
 
4614
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4615
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4616
                              + sizeof(dummy_file_name));
 
4617
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4618
                  ==, ievent_size);
 
4619
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4620
 
 
4621
  bool quit_now = false;
 
4622
  buffer password = {};
 
4623
  bool mandos_client_exited = false;
 
4624
  bool password_is_read = false;
 
4625
  __attribute__((cleanup(cleanup_queue)))
 
4626
    task_queue *queue = create_queue();
 
4627
  g_assert_nonnull(queue);
 
4628
 
 
4629
  task_context task = {
 
4630
    .func=read_inotify_event,
 
4631
    .epoll_fd=epoll_fd,
 
4632
    .fd=pipefds[0],
 
4633
    .quit_now=&quit_now,
 
4634
    .password=&password,
 
4635
    .filename=strdup("/nonexistent"),
 
4636
    .cancelled_filenames = &(string_set){},
 
4637
    .notafter=0,
 
4638
    .current_time=&current_time,
 
4639
    .mandos_client_exited=&mandos_client_exited,
 
4640
    .password_is_read=&password_is_read,
 
4641
  };
 
4642
  task.func(task, queue);
 
4643
  g_assert_false(quit_now);
 
4644
  g_assert_true(queue->next_run == 0);
 
4645
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4646
 
 
4647
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4648
        .func=read_inotify_event,
 
4649
        .epoll_fd=epoll_fd,
 
4650
        .fd=pipefds[0],
 
4651
        .quit_now=&quit_now,
 
4652
        .password=&password,
 
4653
        .filename=task.filename,
 
4654
        .cancelled_filenames=task.cancelled_filenames,
 
4655
        .current_time=&current_time,
 
4656
        .mandos_client_exited=&mandos_client_exited,
 
4657
        .password_is_read=&password_is_read,
 
4658
      }));
 
4659
 
 
4660
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4661
                                   EPOLLIN | EPOLLRDHUP));
 
4662
}
 
4663
 
 
4664
static void
 
4665
test_read_inotify_event_IN_MOVED_FROM_badname(__attribute__((unused))
 
4666
                                              test_fixture *fixture,
 
4667
                                              __attribute__((unused))
 
4668
                                              gconstpointer
 
4669
                                              user_data){
 
4670
  __attribute__((cleanup(cleanup_close)))
 
4671
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4672
  g_assert_cmpint(epoll_fd, >=, 0);
 
4673
  __attribute__((cleanup(string_set_clear)))
 
4674
    string_set cancelled_filenames = {};
 
4675
  const mono_microsecs current_time = 0;
 
4676
 
 
4677
  int pipefds[2];
 
4678
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4679
 
 
4680
  /* "sufficient to read at least one event." - inotify(7) */
 
4681
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4682
                                  + NAME_MAX + 1);
 
4683
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4684
  struct {
 
4685
    struct inotify_event event;
 
4686
    char name_buffer[NAME_MAX + 1];
 
4687
  } ievent_buffer;
 
4688
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4689
 
 
4690
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4691
  ievent->mask = IN_MOVED_FROM;
 
4692
  ievent->len = sizeof(dummy_file_name);
 
4693
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4694
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4695
                              + sizeof(dummy_file_name));
 
4696
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4697
                  ==, ievent_size);
 
4698
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4699
 
 
4700
  bool quit_now = false;
 
4701
  buffer password = {};
 
4702
  bool mandos_client_exited = false;
 
4703
  bool password_is_read = false;
 
4704
  __attribute__((cleanup(cleanup_queue)))
 
4705
    task_queue *queue = create_queue();
 
4706
  g_assert_nonnull(queue);
 
4707
 
 
4708
  task_context task = {
 
4709
    .func=read_inotify_event,
 
4710
    .epoll_fd=epoll_fd,
 
4711
    .fd=pipefds[0],
 
4712
    .quit_now=&quit_now,
 
4713
    .password=&password,
 
4714
    .filename=strdup("/nonexistent"),
 
4715
    .cancelled_filenames=&cancelled_filenames,
 
4716
    .current_time=&current_time,
 
4717
    .mandos_client_exited=&mandos_client_exited,
 
4718
    .password_is_read=&password_is_read,
 
4719
  };
 
4720
  task.func(task, queue);
 
4721
  g_assert_false(quit_now);
 
4722
  g_assert_true(queue->next_run == 0);
 
4723
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4724
 
 
4725
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4726
        .func=read_inotify_event,
 
4727
        .epoll_fd=epoll_fd,
 
4728
        .fd=pipefds[0],
 
4729
        .quit_now=&quit_now,
 
4730
        .password=&password,
 
4731
        .filename=task.filename,
 
4732
        .cancelled_filenames=&cancelled_filenames,
 
4733
        .current_time=&current_time,
 
4734
        .mandos_client_exited=&mandos_client_exited,
 
4735
        .password_is_read=&password_is_read,
 
4736
      }));
 
4737
 
 
4738
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4739
                                   EPOLLIN | EPOLLRDHUP));
 
4740
 
 
4741
  __attribute__((cleanup(cleanup_string)))
 
4742
    char *filename = NULL;
 
4743
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4744
                           dummy_file_name), >, 0);
 
4745
  g_assert_nonnull(filename);
 
4746
  g_assert_false(string_set_contains(cancelled_filenames, filename));
 
4747
}
 
4748
 
 
4749
static
 
4750
void test_read_inotify_event_IN_DELETE_badname(__attribute__((unused))
 
4751
                                               test_fixture *fixture,
 
4752
                                               __attribute__((unused))
 
4753
                                               gconstpointer
 
4754
                                               user_data){
 
4755
  __attribute__((cleanup(cleanup_close)))
 
4756
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4757
  g_assert_cmpint(epoll_fd, >=, 0);
 
4758
  __attribute__((cleanup(string_set_clear)))
 
4759
    string_set cancelled_filenames = {};
 
4760
  const mono_microsecs current_time = 0;
 
4761
 
 
4762
  int pipefds[2];
 
4763
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4764
 
 
4765
  /* "sufficient to read at least one event." - inotify(7) */
 
4766
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4767
                                  + NAME_MAX + 1);
 
4768
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4769
  struct {
 
4770
    struct inotify_event event;
 
4771
    char name_buffer[NAME_MAX + 1];
 
4772
  } ievent_buffer;
 
4773
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4774
 
 
4775
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4776
  ievent->mask = IN_DELETE;
 
4777
  ievent->len = sizeof(dummy_file_name);
 
4778
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4779
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4780
                              + sizeof(dummy_file_name));
 
4781
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4782
                  ==, ievent_size);
 
4783
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4784
 
 
4785
  bool quit_now = false;
 
4786
  buffer password = {};
 
4787
  bool mandos_client_exited = false;
 
4788
  bool password_is_read = false;
 
4789
  __attribute__((cleanup(cleanup_queue)))
 
4790
    task_queue *queue = create_queue();
 
4791
  g_assert_nonnull(queue);
 
4792
 
 
4793
  task_context task = {
 
4794
    .func=read_inotify_event,
 
4795
    .epoll_fd=epoll_fd,
 
4796
    .fd=pipefds[0],
 
4797
    .quit_now=&quit_now,
 
4798
    .password=&password,
 
4799
    .filename=strdup("/nonexistent"),
 
4800
    .cancelled_filenames=&cancelled_filenames,
 
4801
    .current_time=&current_time,
 
4802
    .mandos_client_exited=&mandos_client_exited,
 
4803
    .password_is_read=&password_is_read,
 
4804
  };
 
4805
  task.func(task, queue);
 
4806
  g_assert_false(quit_now);
 
4807
  g_assert_true(queue->next_run == 0);
 
4808
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4809
 
 
4810
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4811
        .func=read_inotify_event,
 
4812
        .epoll_fd=epoll_fd,
 
4813
        .fd=pipefds[0],
 
4814
        .quit_now=&quit_now,
 
4815
        .password=&password,
 
4816
        .filename=task.filename,
 
4817
        .cancelled_filenames=&cancelled_filenames,
 
4818
        .current_time=&current_time,
 
4819
        .mandos_client_exited=&mandos_client_exited,
 
4820
        .password_is_read=&password_is_read,
 
4821
      }));
 
4822
 
 
4823
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4824
                                   EPOLLIN | EPOLLRDHUP));
 
4825
 
 
4826
  __attribute__((cleanup(cleanup_string)))
 
4827
    char *filename = NULL;
 
4828
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4829
                           dummy_file_name), >, 0);
 
4830
  g_assert_nonnull(filename);
 
4831
  g_assert_false(string_set_contains(cancelled_filenames, filename));
 
4832
}
 
4833
 
 
4834
static
 
4835
void test_open_and_parse_question_ENOENT(__attribute__((unused))
 
4836
                                         test_fixture *fixture,
 
4837
                                         __attribute__((unused))
 
4838
                                         gconstpointer user_data){
 
4839
  __attribute__((cleanup(cleanup_close)))
 
4840
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4841
  g_assert_cmpint(epoll_fd, >=, 0);
 
4842
  __attribute__((cleanup(string_set_clear)))
 
4843
    string_set cancelled_filenames = {};
 
4844
  bool mandos_client_exited = false;
 
4845
  bool password_is_read = false;
 
4846
  __attribute__((cleanup(cleanup_queue)))
 
4847
    task_queue *queue = create_queue();
 
4848
  g_assert_nonnull(queue);
 
4849
 
 
4850
  char *const filename = strdup("/nonexistent");
 
4851
  g_assert_nonnull(filename);
 
4852
  task_context task = {
 
4853
    .func=open_and_parse_question,
 
4854
    .question_filename=filename,
 
4855
    .epoll_fd=epoll_fd,
 
4856
    .password=(buffer[]){{}},
 
4857
    .filename=filename,
 
4858
    .cancelled_filenames=&cancelled_filenames,
 
4859
    .current_time=(mono_microsecs[]){0},
 
4860
    .mandos_client_exited=&mandos_client_exited,
 
4861
    .password_is_read=&password_is_read,
 
4862
  };
 
4863
  task.func(task, queue);
 
4864
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4865
}
 
4866
 
 
4867
static void test_open_and_parse_question_EIO(__attribute__((unused))
 
4868
                                             test_fixture *fixture,
 
4869
                                             __attribute__((unused))
 
4870
                                             gconstpointer user_data){
 
4871
  __attribute__((cleanup(cleanup_close)))
 
4872
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4873
  g_assert_cmpint(epoll_fd, >=, 0);
 
4874
  __attribute__((cleanup(string_set_clear)))
 
4875
    string_set cancelled_filenames = {};
 
4876
  buffer password = {};
 
4877
  bool mandos_client_exited = false;
 
4878
  bool password_is_read = false;
 
4879
  __attribute__((cleanup(cleanup_queue)))
 
4880
    task_queue *queue = create_queue();
 
4881
  g_assert_nonnull(queue);
 
4882
  const mono_microsecs current_time = 0;
 
4883
 
 
4884
  char *filename = strdup("/proc/self/mem");
 
4885
  task_context task = {
 
4886
    .func=open_and_parse_question,
 
4887
    .question_filename=filename,
 
4888
    .epoll_fd=epoll_fd,
 
4889
    .password=&password,
 
4890
    .filename=filename,
 
4891
    .cancelled_filenames=&cancelled_filenames,
 
4892
    .current_time=&current_time,
 
4893
    .mandos_client_exited=&mandos_client_exited,
 
4894
    .password_is_read=&password_is_read,
 
4895
  };
 
4896
  run_task_with_stderr_to_dev_null(task, queue);
 
4897
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4898
}
 
4899
 
 
4900
static void
 
4901
test_open_and_parse_question_parse_error(__attribute__((unused))
 
4902
                                         test_fixture *fixture,
 
4903
                                         __attribute__((unused))
 
4904
                                         gconstpointer user_data){
 
4905
  __attribute__((cleanup(cleanup_close)))
 
4906
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4907
  g_assert_cmpint(epoll_fd, >=, 0);
 
4908
  __attribute__((cleanup(string_set_clear)))
 
4909
    string_set cancelled_filenames = {};
 
4910
  __attribute__((cleanup(cleanup_queue)))
 
4911
    task_queue *queue = create_queue();
 
4912
  g_assert_nonnull(queue);
 
4913
 
 
4914
  __attribute__((cleanup(cleanup_string)))
 
4915
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
4916
  g_assert_nonnull(tempfilename);
 
4917
  int tempfile = mkostemp(tempfilename, O_CLOEXEC);
 
4918
  g_assert_cmpint(tempfile, >, 0);
 
4919
  const char bad_data[] = "this is bad syntax\n";
 
4920
  g_assert_cmpint(write(tempfile, bad_data, sizeof(bad_data)),
 
4921
                  ==, sizeof(bad_data));
 
4922
  g_assert_cmpint(close(tempfile), ==, 0);
 
4923
 
 
4924
  char *const filename = strdup(tempfilename);
 
4925
  g_assert_nonnull(filename);
 
4926
  task_context task = {
 
4927
    .func=open_and_parse_question,
 
4928
    .question_filename=filename,
 
4929
    .epoll_fd=epoll_fd,
 
4930
    .password=(buffer[]){{}},
 
4931
    .filename=filename,
 
4932
    .cancelled_filenames=&cancelled_filenames,
 
4933
    .current_time=(mono_microsecs[]){0},
 
4934
    .mandos_client_exited=(bool[]){false},
 
4935
    .password_is_read=(bool[]){false},
 
4936
  };
 
4937
  run_task_with_stderr_to_dev_null(task, queue);
 
4938
 
 
4939
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4940
 
 
4941
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
4942
}
 
4943
 
 
4944
static
 
4945
void test_open_and_parse_question_nosocket(__attribute__((unused))
 
4946
                                           test_fixture *fixture,
 
4947
                                           __attribute__((unused))
 
4948
                                           gconstpointer user_data){
 
4949
  __attribute__((cleanup(cleanup_close)))
 
4950
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4951
  g_assert_cmpint(epoll_fd, >=, 0);
 
4952
  __attribute__((cleanup(string_set_clear)))
 
4953
    string_set cancelled_filenames = {};
 
4954
  __attribute__((cleanup(cleanup_queue)))
 
4955
    task_queue *queue = create_queue();
 
4956
  g_assert_nonnull(queue);
 
4957
 
 
4958
  __attribute__((cleanup(cleanup_string)))
 
4959
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
4960
  g_assert_nonnull(tempfilename);
 
4961
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
4962
  g_assert_cmpint(questionfile, >, 0);
 
4963
  FILE *qf = fdopen(questionfile, "w");
 
4964
  g_assert_cmpint(fprintf(qf, "[Ask]\nPID=1\n"), >, 0);
 
4965
  g_assert_cmpint(fclose(qf), ==, 0);
 
4966
 
 
4967
  char *const filename = strdup(tempfilename);
 
4968
  g_assert_nonnull(filename);
 
4969
  task_context task = {
 
4970
    .func=open_and_parse_question,
 
4971
    .question_filename=filename,
 
4972
    .epoll_fd=epoll_fd,
 
4973
    .password=(buffer[]){{}},
 
4974
    .filename=filename,
 
4975
    .cancelled_filenames=&cancelled_filenames,
 
4976
    .current_time=(mono_microsecs[]){0},
 
4977
    .mandos_client_exited=(bool[]){false},
 
4978
    .password_is_read=(bool[]){false},
 
4979
  };
 
4980
  run_task_with_stderr_to_dev_null(task, queue);
 
4981
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4982
 
 
4983
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
4984
}
 
4985
 
 
4986
static
 
4987
void test_open_and_parse_question_badsocket(__attribute__((unused))
 
4988
                                            test_fixture *fixture,
 
4989
                                            __attribute__((unused))
 
4990
                                            gconstpointer user_data){
 
4991
  __attribute__((cleanup(cleanup_close)))
 
4992
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4993
  g_assert_cmpint(epoll_fd, >=, 0);
 
4994
  __attribute__((cleanup(string_set_clear)))
 
4995
    string_set cancelled_filenames = {};
 
4996
  __attribute__((cleanup(cleanup_queue)))
 
4997
    task_queue *queue = create_queue();
 
4998
  g_assert_nonnull(queue);
 
4999
 
 
5000
  __attribute__((cleanup(cleanup_string)))
 
5001
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5002
  g_assert_nonnull(tempfilename);
 
5003
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5004
  g_assert_cmpint(questionfile, >, 0);
 
5005
  FILE *qf = fdopen(questionfile, "w");
 
5006
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=\nPID=1\n"), >, 0);
 
5007
  g_assert_cmpint(fclose(qf), ==, 0);
 
5008
 
 
5009
  char *const filename = strdup(tempfilename);
 
5010
  g_assert_nonnull(filename);
 
5011
  task_context task = {
 
5012
    .func=open_and_parse_question,
 
5013
    .question_filename=filename,
 
5014
    .epoll_fd=epoll_fd,
 
5015
    .password=(buffer[]){{}},
 
5016
    .filename=filename,
 
5017
    .cancelled_filenames=&cancelled_filenames,
 
5018
    .current_time=(mono_microsecs[]){0},
 
5019
    .mandos_client_exited=(bool[]){false},
 
5020
    .password_is_read=(bool[]){false},
 
5021
  };
 
5022
  run_task_with_stderr_to_dev_null(task, queue);
 
5023
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5024
 
 
5025
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5026
}
 
5027
 
 
5028
static
 
5029
void test_open_and_parse_question_nopid(__attribute__((unused))
 
5030
                                        test_fixture *fixture,
 
5031
                                        __attribute__((unused))
 
5032
                                        gconstpointer user_data){
 
5033
  __attribute__((cleanup(cleanup_close)))
 
5034
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5035
  g_assert_cmpint(epoll_fd, >=, 0);
 
5036
  __attribute__((cleanup(string_set_clear)))
 
5037
    string_set cancelled_filenames = {};
 
5038
  __attribute__((cleanup(cleanup_queue)))
 
5039
    task_queue *queue = create_queue();
 
5040
  g_assert_nonnull(queue);
 
5041
 
 
5042
  __attribute__((cleanup(cleanup_string)))
 
5043
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5044
  g_assert_nonnull(tempfilename);
 
5045
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5046
  g_assert_cmpint(questionfile, >, 0);
 
5047
  FILE *qf = fdopen(questionfile, "w");
 
5048
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\n"), >, 0);
 
5049
  g_assert_cmpint(fclose(qf), ==, 0);
 
5050
 
 
5051
  char *const filename = strdup(tempfilename);
 
5052
  g_assert_nonnull(filename);
 
5053
  task_context task = {
 
5054
    .func=open_and_parse_question,
 
5055
    .question_filename=filename,
 
5056
    .epoll_fd=epoll_fd,
 
5057
    .password=(buffer[]){{}},
 
5058
    .filename=filename,
 
5059
    .cancelled_filenames=&cancelled_filenames,
 
5060
    .current_time=(mono_microsecs[]){0},
 
5061
    .mandos_client_exited=(bool[]){false},
 
5062
    .password_is_read=(bool[]){false},
 
5063
  };
 
5064
  run_task_with_stderr_to_dev_null(task, queue);
 
5065
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5066
 
 
5067
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5068
}
 
5069
 
 
5070
static
 
5071
void test_open_and_parse_question_badpid(__attribute__((unused))
 
5072
                                         test_fixture *fixture,
 
5073
                                         __attribute__((unused))
 
5074
                                         gconstpointer user_data){
 
5075
  __attribute__((cleanup(cleanup_close)))
 
5076
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5077
  g_assert_cmpint(epoll_fd, >=, 0);
 
5078
  __attribute__((cleanup(string_set_clear)))
 
5079
    string_set cancelled_filenames = {};
 
5080
  __attribute__((cleanup(cleanup_queue)))
 
5081
    task_queue *queue = create_queue();
 
5082
  g_assert_nonnull(queue);
 
5083
 
 
5084
  __attribute__((cleanup(cleanup_string)))
 
5085
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5086
  g_assert_nonnull(tempfilename);
 
5087
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5088
  g_assert_cmpint(questionfile, >, 0);
 
5089
  FILE *qf = fdopen(questionfile, "w");
 
5090
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=\n"),
 
5091
                  >, 0);
 
5092
  g_assert_cmpint(fclose(qf), ==, 0);
 
5093
 
 
5094
  char *const filename = strdup(tempfilename);
 
5095
  g_assert_nonnull(filename);
 
5096
  task_context task = {
 
5097
    .func=open_and_parse_question,
 
5098
    .question_filename=filename,
 
5099
    .epoll_fd=epoll_fd,
 
5100
    .password=(buffer[]){{}},
 
5101
    .filename=filename,
 
5102
    .cancelled_filenames=&cancelled_filenames,
 
5103
    .current_time=(mono_microsecs[]){0},
 
5104
    .mandos_client_exited=(bool[]){false},
 
5105
    .password_is_read=(bool[]){false},
 
5106
  };
 
5107
  run_task_with_stderr_to_dev_null(task, queue);
 
5108
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5109
 
 
5110
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5111
}
 
5112
 
 
5113
static void
 
5114
test_open_and_parse_question_noexist_pid(__attribute__((unused))
 
5115
                                         test_fixture *fixture,
 
5116
                                         __attribute__((unused))
 
5117
                                         gconstpointer user_data){
 
5118
  __attribute__((cleanup(cleanup_close)))
 
5119
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5120
  g_assert_cmpint(epoll_fd, >=, 0);
 
5121
  __attribute__((cleanup(string_set_clear)))
 
5122
    string_set cancelled_filenames = {};
 
5123
  buffer password = {};
 
5124
  bool mandos_client_exited = false;
 
5125
  bool password_is_read = false;
 
5126
  __attribute__((cleanup(cleanup_queue)))
 
5127
    task_queue *queue = create_queue();
 
5128
  g_assert_nonnull(queue);
 
5129
  const mono_microsecs current_time = 0;
 
5130
 
 
5131
  /* Find value of sysctl kernel.pid_max */
 
5132
  uintmax_t pid_max = 0;
 
5133
  FILE *sysctl_pid_max = fopen("/proc/sys/kernel/pid_max", "r");
 
5134
  g_assert_nonnull(sysctl_pid_max);
 
5135
  g_assert_cmpint(fscanf(sysctl_pid_max, "%" PRIuMAX, &pid_max),
 
5136
                  ==, 1);
 
5137
  g_assert_cmpint(fclose(sysctl_pid_max), ==, 0);
 
5138
 
 
5139
  pid_t nonexisting_pid = ((pid_t)pid_max)+1;
 
5140
  g_assert_true(nonexisting_pid > 0); /* Overflow check */
 
5141
 
 
5142
  __attribute__((cleanup(cleanup_string)))
 
5143
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5144
  g_assert_nonnull(tempfilename);
 
5145
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5146
  g_assert_cmpint(questionfile, >, 0);
 
5147
  FILE *qf = fdopen(questionfile, "w");
 
5148
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5149
                          PRIuMAX"\n", (uintmax_t)nonexisting_pid),
 
5150
                  >, 0);
 
5151
  g_assert_cmpint(fclose(qf), ==, 0);
 
5152
 
 
5153
  char *const question_filename = strdup(tempfilename);
 
5154
  g_assert_nonnull(question_filename);
 
5155
  task_context task = {
 
5156
    .func=open_and_parse_question,
 
5157
    .question_filename=question_filename,
 
5158
    .epoll_fd=epoll_fd,
 
5159
    .password=&password,
 
5160
    .filename=question_filename,
 
5161
    .cancelled_filenames=&cancelled_filenames,
 
5162
    .current_time=&current_time,
 
5163
    .mandos_client_exited=&mandos_client_exited,
 
5164
    .password_is_read=&password_is_read,
 
5165
  };
 
5166
  run_task_with_stderr_to_dev_null(task, queue);
 
5167
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5168
 
 
5169
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5170
}
 
5171
 
 
5172
static void
 
5173
test_open_and_parse_question_no_notafter(__attribute__((unused))
 
5174
                                         test_fixture *fixture,
 
5175
                                         __attribute__((unused))
 
5176
                                         gconstpointer user_data){
 
5177
  __attribute__((cleanup(cleanup_close)))
 
5178
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5179
  g_assert_cmpint(epoll_fd, >=, 0);
 
5180
  __attribute__((cleanup(string_set_clear)))
 
5181
    string_set cancelled_filenames = {};
 
5182
  buffer password = {};
 
5183
  bool mandos_client_exited = false;
 
5184
  bool password_is_read = false;
 
5185
  __attribute__((cleanup(cleanup_queue)))
 
5186
    task_queue *queue = create_queue();
 
5187
  g_assert_nonnull(queue);
 
5188
  const mono_microsecs current_time = 0;
 
5189
 
 
5190
  __attribute__((cleanup(cleanup_string)))
 
5191
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5192
  g_assert_nonnull(tempfilename);
 
5193
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5194
  g_assert_cmpint(questionfile, >, 0);
 
5195
  FILE *qf = fdopen(questionfile, "w");
 
5196
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5197
                          PRIuMAX "\n", (uintmax_t)getpid()), >, 0);
 
5198
  g_assert_cmpint(fclose(qf), ==, 0);
 
5199
 
 
5200
  char *const filename = strdup(tempfilename);
 
5201
  g_assert_nonnull(filename);
 
5202
  task_context task = {
 
5203
    .func=open_and_parse_question,
 
5204
    .question_filename=filename,
 
5205
    .epoll_fd=epoll_fd,
 
5206
    .password=&password,
 
5207
    .filename=filename,
 
5208
    .cancelled_filenames=&cancelled_filenames,
 
5209
    .current_time=&current_time,
 
5210
    .mandos_client_exited=&mandos_client_exited,
 
5211
    .password_is_read=&password_is_read,
 
5212
  };
 
5213
  task.func(task, queue);
 
5214
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5215
 
 
5216
  __attribute__((cleanup(cleanup_string)))
 
5217
    char *socket_filename = strdup("/nonexistent");
 
5218
  g_assert_nonnull(socket_filename);
 
5219
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
5220
        .func=connect_question_socket,
 
5221
        .question_filename=tempfilename,
 
5222
        .filename=socket_filename,
 
5223
        .epoll_fd=epoll_fd,
 
5224
        .password=&password,
 
5225
        .current_time=&current_time,
 
5226
        .mandos_client_exited=&mandos_client_exited,
 
5227
        .password_is_read=&password_is_read,
 
5228
      }));
 
5229
 
 
5230
  g_assert_true(queue->next_run != 0);
 
5231
 
 
5232
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5233
}
 
5234
 
 
5235
static void
 
5236
test_open_and_parse_question_bad_notafter(__attribute__((unused))
 
5237
                                          test_fixture *fixture,
 
5238
                                          __attribute__((unused))
 
5239
                                          gconstpointer user_data){
 
5240
  __attribute__((cleanup(cleanup_close)))
 
5241
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5242
  g_assert_cmpint(epoll_fd, >=, 0);
 
5243
  __attribute__((cleanup(string_set_clear)))
 
5244
    string_set cancelled_filenames = {};
 
5245
  buffer password = {};
 
5246
  bool mandos_client_exited = false;
 
5247
  bool password_is_read = false;
 
5248
  __attribute__((cleanup(cleanup_queue)))
 
5249
    task_queue *queue = create_queue();
 
5250
  g_assert_nonnull(queue);
 
5251
  const mono_microsecs current_time = 0;
 
5252
 
 
5253
  __attribute__((cleanup(cleanup_string)))
 
5254
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5255
  g_assert_nonnull(tempfilename);
 
5256
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5257
  g_assert_cmpint(questionfile, >, 0);
 
5258
  FILE *qf = fdopen(questionfile, "w");
 
5259
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5260
                          PRIuMAX "\nNotAfter=\n",
 
5261
                          (uintmax_t)getpid()), >, 0);
 
5262
  g_assert_cmpint(fclose(qf), ==, 0);
 
5263
 
 
5264
  char *const filename = strdup(tempfilename);
 
5265
  g_assert_nonnull(filename);
 
5266
  task_context task = {
 
5267
    .func=open_and_parse_question,
 
5268
    .question_filename=filename,
 
5269
    .epoll_fd=epoll_fd,
 
5270
    .password=&password,
 
5271
    .filename=filename,
 
5272
    .cancelled_filenames=&cancelled_filenames,
 
5273
    .current_time=&current_time,
 
5274
    .mandos_client_exited=&mandos_client_exited,
 
5275
    .password_is_read=&password_is_read,
 
5276
  };
 
5277
  run_task_with_stderr_to_dev_null(task, queue);
 
5278
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5279
 
 
5280
  __attribute__((cleanup(cleanup_string)))
 
5281
    char *socket_filename = strdup("/nonexistent");
 
5282
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
5283
        .func=connect_question_socket,
 
5284
        .question_filename=tempfilename,
 
5285
        .filename=socket_filename,
 
5286
        .epoll_fd=epoll_fd,
 
5287
        .password=&password,
 
5288
        .current_time=&current_time,
 
5289
        .mandos_client_exited=&mandos_client_exited,
 
5290
        .password_is_read=&password_is_read,
 
5291
      }));
 
5292
  g_assert_true(queue->next_run != 0);
 
5293
 
 
5294
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5295
}
 
5296
 
 
5297
static
 
5298
void assert_open_and_parse_question_with_notafter(const mono_microsecs
 
5299
                                                  current_time,
 
5300
                                                  const mono_microsecs
 
5301
                                                  notafter,
 
5302
                                                  const mono_microsecs
 
5303
                                                  next_queue_run){
 
5304
  __attribute__((cleanup(cleanup_close)))
 
5305
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5306
  g_assert_cmpint(epoll_fd, >=, 0);
 
5307
  __attribute__((cleanup(string_set_clear)))
 
5308
    string_set cancelled_filenames = {};
 
5309
  buffer password = {};
 
5310
  bool mandos_client_exited = false;
 
5311
  bool password_is_read = false;
 
5312
  __attribute__((cleanup(cleanup_queue)))
 
5313
    task_queue *queue = create_queue();
 
5314
  g_assert_nonnull(queue);
 
5315
  queue->next_run = next_queue_run;
 
5316
 
 
5317
  __attribute__((cleanup(cleanup_string)))
 
5318
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5319
  g_assert_nonnull(tempfilename);
 
5320
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5321
  g_assert_cmpint(questionfile, >, 0);
 
5322
  FILE *qf = fdopen(questionfile, "w");
 
5323
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5324
                          PRIuMAX "\nNotAfter=%" PRIuMAX "\n",
 
5325
                          (uintmax_t)getpid(), notafter), >, 0);
 
5326
  g_assert_cmpint(fclose(qf), ==, 0);
 
5327
 
 
5328
  char *const filename = strdup(tempfilename);
 
5329
  g_assert_nonnull(filename);
 
5330
  task_context task = {
 
5331
    .func=open_and_parse_question,
 
5332
    .question_filename=filename,
 
5333
    .epoll_fd=epoll_fd,
 
5334
    .password=&password,
 
5335
    .filename=filename,
 
5336
    .cancelled_filenames=&cancelled_filenames,
 
5337
    .current_time=&current_time,
 
5338
    .mandos_client_exited=&mandos_client_exited,
 
5339
    .password_is_read=&password_is_read,
 
5340
  };
 
5341
  task.func(task, queue);
 
5342
 
 
5343
  if(queue->length >= 1){
 
5344
    __attribute__((cleanup(cleanup_string)))
 
5345
      char *socket_filename = strdup("/nonexistent");
 
5346
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5347
          .func=connect_question_socket,
 
5348
          .filename=socket_filename,
 
5349
          .epoll_fd=epoll_fd,
 
5350
          .password=&password,
 
5351
          .current_time=&current_time,
 
5352
          .cancelled_filenames=&cancelled_filenames,
 
5353
          .mandos_client_exited=&mandos_client_exited,
 
5354
          .password_is_read=&password_is_read,
 
5355
        }));
 
5356
    g_assert_true(queue->next_run != 0);
 
5357
  }
 
5358
 
 
5359
  if(notafter == 0){
 
5360
    g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5361
  } else if(current_time >= notafter) {
 
5362
    g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5363
  } else {
 
5364
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5365
          .func=cancel_old_question,
 
5366
          .question_filename=tempfilename,
 
5367
          .filename=tempfilename,
 
5368
          .notafter=notafter,
 
5369
          .cancelled_filenames=&cancelled_filenames,
 
5370
          .current_time=&current_time,
 
5371
        }));
 
5372
  }
 
5373
  g_assert_true(queue->next_run == 1);
 
5374
 
 
5375
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5376
}
 
5377
 
 
5378
static void
 
5379
test_open_and_parse_question_notafter_0(__attribute__((unused))
 
5380
                                        test_fixture *fixture,
 
5381
                                        __attribute__((unused))
 
5382
                                        gconstpointer user_data){
 
5383
  /* current_time, notafter, next_queue_run */
 
5384
  assert_open_and_parse_question_with_notafter(0, 0, 0);
 
5385
}
 
5386
 
 
5387
static void
 
5388
test_open_and_parse_question_notafter_1(__attribute__((unused))
 
5389
                                        test_fixture *fixture,
 
5390
                                        __attribute__((unused))
 
5391
                                        gconstpointer user_data){
 
5392
  /* current_time, notafter, next_queue_run */
 
5393
  assert_open_and_parse_question_with_notafter(0, 1, 0);
 
5394
}
 
5395
 
 
5396
static void
 
5397
test_open_and_parse_question_notafter_1_1(__attribute__((unused))
 
5398
                                          test_fixture *fixture,
 
5399
                                          __attribute__((unused))
 
5400
                                          gconstpointer user_data){
 
5401
  /* current_time, notafter, next_queue_run */
 
5402
  assert_open_and_parse_question_with_notafter(0, 1, 1);
 
5403
}
 
5404
 
 
5405
static void
 
5406
test_open_and_parse_question_notafter_1_2(__attribute__((unused))
 
5407
                                          test_fixture *fixture,
 
5408
                                          __attribute__((unused))
 
5409
                                          gconstpointer user_data){
 
5410
  /* current_time, notafter, next_queue_run */
 
5411
  assert_open_and_parse_question_with_notafter(0, 1, 2);
 
5412
}
 
5413
 
 
5414
static void
 
5415
test_open_and_parse_question_equal_notafter(__attribute__((unused))
 
5416
                                            test_fixture *fixture,
 
5417
                                            __attribute__((unused))
 
5418
                                            gconstpointer user_data){
 
5419
  /* current_time, notafter, next_queue_run */
 
5420
  assert_open_and_parse_question_with_notafter(1, 1, 0);
 
5421
}
 
5422
 
 
5423
static void
 
5424
test_open_and_parse_question_late_notafter(__attribute__((unused))
 
5425
                                           test_fixture *fixture,
 
5426
                                           __attribute__((unused))
 
5427
                                           gconstpointer user_data){
 
5428
  /* current_time, notafter, next_queue_run */
 
5429
  assert_open_and_parse_question_with_notafter(2, 1, 0);
 
5430
}
 
5431
 
 
5432
static void assert_cancel_old_question_param(const mono_microsecs
 
5433
                                             next_queue_run,
 
5434
                                             const mono_microsecs
 
5435
                                             notafter,
 
5436
                                             const mono_microsecs
 
5437
                                             current_time,
 
5438
                                             const mono_microsecs
 
5439
                                             next_set_to){
 
5440
  __attribute__((cleanup(string_set_clear)))
 
5441
    string_set cancelled_filenames = {};
 
5442
  __attribute__((cleanup(cleanup_queue)))
 
5443
    task_queue *queue = create_queue();
 
5444
  g_assert_nonnull(queue);
 
5445
  queue->next_run = next_queue_run;
 
5446
 
 
5447
  char *const question_filename = strdup("/nonexistent");
 
5448
  g_assert_nonnull(question_filename);
 
5449
  task_context task = {
 
5450
    .func=cancel_old_question,
 
5451
    .question_filename=question_filename,
 
5452
    .filename=question_filename,
 
5453
    .notafter=notafter,
 
5454
    .cancelled_filenames=&cancelled_filenames,
 
5455
    .current_time=&current_time,
 
5456
  };
 
5457
  task.func(task, queue);
 
5458
 
 
5459
  if(current_time >= notafter){
 
5460
    g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5461
    g_assert_true(string_set_contains(cancelled_filenames,
 
5462
                                      "/nonexistent"));
 
5463
  } else {
 
5464
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5465
          .func=cancel_old_question,
 
5466
          .question_filename=question_filename,
 
5467
          .filename=question_filename,
 
5468
          .notafter=notafter,
 
5469
          .cancelled_filenames=&cancelled_filenames,
 
5470
          .current_time=&current_time,
 
5471
        }));
 
5472
 
 
5473
    g_assert_false(string_set_contains(cancelled_filenames,
 
5474
                                       question_filename));
 
5475
  }
 
5476
  g_assert_cmpuint((unsigned int)queue->next_run, ==,
 
5477
                   (unsigned int)next_set_to);
 
5478
}
 
5479
 
 
5480
static void test_cancel_old_question_0_1_2(__attribute__((unused))
 
5481
                                           test_fixture *fixture,
 
5482
                                           __attribute__((unused))
 
5483
                                           gconstpointer user_data){
 
5484
  /* next_queue_run unset,
 
5485
     cancellation should happen because time has come,
 
5486
     next_queue_run should be unchanged */
 
5487
  /* next_queue_run, notafter, current_time, next_set_to */
 
5488
  assert_cancel_old_question_param(0, 1, 2, 0);
 
5489
}
 
5490
 
 
5491
static void test_cancel_old_question_0_2_1(__attribute__((unused))
 
5492
                                           test_fixture *fixture,
 
5493
                                           __attribute__((unused))
 
5494
                                           gconstpointer user_data){
 
5495
  /* If next_queue_run is 0, meaning unset, and notafter is 2,
 
5496
     and current_time is not yet notafter or greater,
 
5497
     update value of next_queue_run to value of notafter */
 
5498
  /* next_queue_run, notafter, current_time, next_set_to */
 
5499
  assert_cancel_old_question_param(0, 2, 1, 2);
 
5500
}
 
5501
 
 
5502
static void test_cancel_old_question_1_2_3(__attribute__((unused))
 
5503
                                           test_fixture *fixture,
 
5504
                                           __attribute__((unused))
 
5505
                                           gconstpointer user_data){
 
5506
  /* next_queue_run 1,
 
5507
     cancellation should happen because time has come,
 
5508
     next_queue_run should be unchanged */
 
5509
  /* next_queue_run, notafter, current_time, next_set_to */
 
5510
  assert_cancel_old_question_param(1, 2, 3, 1);
 
5511
}
 
5512
 
 
5513
static void test_cancel_old_question_1_3_2(__attribute__((unused))
 
5514
                                           test_fixture *fixture,
 
5515
                                           __attribute__((unused))
 
5516
                                           gconstpointer user_data){
 
5517
  /* If next_queue_run is set,
 
5518
     and current_time is not yet notafter or greater,
 
5519
     and notafter is larger than next_queue_run
 
5520
     next_queue_run should be unchanged */
 
5521
  /* next_queue_run, notafter, current_time, next_set_to */
 
5522
  assert_cancel_old_question_param(1, 3, 2, 1);
 
5523
}
 
5524
 
 
5525
static void test_cancel_old_question_2_1_3(__attribute__((unused))
 
5526
                                           test_fixture *fixture,
 
5527
                                           __attribute__((unused))
 
5528
                                           gconstpointer user_data){
 
5529
  /* next_queue_run 2,
 
5530
     cancellation should happen because time has come,
 
5531
     next_queue_run should be unchanged */
 
5532
  /* next_queue_run, notafter, current_time, next_set_to */
 
5533
  assert_cancel_old_question_param(2, 1, 3, 2);
 
5534
}
 
5535
 
 
5536
static void test_cancel_old_question_2_3_1(__attribute__((unused))
 
5537
                                           test_fixture *fixture,
 
5538
                                           __attribute__((unused))
 
5539
                                           gconstpointer user_data){
 
5540
  /* If next_queue_run is set,
 
5541
     and current_time is not yet notafter or greater,
 
5542
     and notafter is larger than next_queue_run
 
5543
     next_queue_run should be unchanged */
 
5544
  /* next_queue_run, notafter, current_time, next_set_to */
 
5545
  assert_cancel_old_question_param(2, 3, 1, 2);
 
5546
}
 
5547
 
 
5548
static void test_cancel_old_question_3_1_2(__attribute__((unused))
 
5549
                                           test_fixture *fixture,
 
5550
                                           __attribute__((unused))
 
5551
                                           gconstpointer user_data){
 
5552
  /* next_queue_run 3,
 
5553
     cancellation should happen because time has come,
 
5554
     next_queue_run should be unchanged */
 
5555
  /* next_queue_run, notafter, current_time, next_set_to */
 
5556
  assert_cancel_old_question_param(3, 1, 2, 3);
 
5557
}
 
5558
 
 
5559
static void test_cancel_old_question_3_2_1(__attribute__((unused))
 
5560
                                           test_fixture *fixture,
 
5561
                                           __attribute__((unused))
 
5562
                                           gconstpointer user_data){
 
5563
  /* If next_queue_run is set,
 
5564
     and current_time is not yet notafter or greater,
 
5565
     and notafter is smaller than next_queue_run
 
5566
     update value of next_queue_run to value of notafter */
 
5567
  /* next_queue_run, notafter, current_time, next_set_to */
 
5568
  assert_cancel_old_question_param(3, 2, 1, 2);
 
5569
}
 
5570
 
 
5571
static void
 
5572
test_connect_question_socket_name_too_long(__attribute__((unused))
 
5573
                                           test_fixture *fixture,
 
5574
                                           __attribute__((unused))
 
5575
                                           gconstpointer user_data){
 
5576
  __attribute__((cleanup(cleanup_close)))
 
5577
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5578
  g_assert_cmpint(epoll_fd, >=, 0);
 
5579
  const char question_filename[] = "/nonexistent/question";
 
5580
  __attribute__((cleanup(string_set_clear)))
 
5581
    string_set cancelled_filenames = {};
 
5582
  __attribute__((cleanup(cleanup_queue)))
 
5583
    task_queue *queue = create_queue();
 
5584
  g_assert_nonnull(queue);
 
5585
  __attribute__((cleanup(cleanup_string)))
 
5586
    char *tempdir = make_temporary_directory();
 
5587
  g_assert_nonnull(tempdir);
 
5588
  struct sockaddr_un unix_socket = { .sun_family=AF_LOCAL };
 
5589
  char socket_name[sizeof(unix_socket.sun_path)];
 
5590
  memset(socket_name, 'x', sizeof(socket_name));
 
5591
  socket_name[sizeof(socket_name)-1] = '\0';
 
5592
  char *filename = NULL;
 
5593
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5594
                  >, 0);
 
5595
  g_assert_nonnull(filename);
 
5596
 
 
5597
  task_context task = {
 
5598
    .func=connect_question_socket,
 
5599
    .question_filename=strdup(question_filename),
 
5600
    .epoll_fd=epoll_fd,
 
5601
    .password=(buffer[]){{}},
 
5602
    .filename=filename,
 
5603
    .cancelled_filenames=&cancelled_filenames,
 
5604
    .mandos_client_exited=(bool[]){false},
 
5605
    .password_is_read=(bool[]){false},
 
5606
    .current_time=(mono_microsecs[]){0},
 
5607
  };
 
5608
  g_assert_nonnull(task.question_filename);
 
5609
  run_task_with_stderr_to_dev_null(task, queue);
 
5610
 
 
5611
  g_assert_true(string_set_contains(cancelled_filenames,
 
5612
                                    question_filename));
 
5613
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5614
  g_assert_true(queue->next_run == 0);
 
5615
 
 
5616
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5617
}
 
5618
 
 
5619
static
 
5620
void test_connect_question_socket_connect_fail(__attribute__((unused))
 
5621
                                               test_fixture *fixture,
 
5622
                                               __attribute__((unused))
 
5623
                                               gconstpointer
 
5624
                                               user_data){
 
5625
  __attribute__((cleanup(cleanup_close)))
 
5626
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5627
  g_assert_cmpint(epoll_fd, >=, 0);
 
5628
  const char question_filename[] = "/nonexistent/question";
 
5629
  __attribute__((cleanup(string_set_clear)))
 
5630
    string_set cancelled_filenames = {};
 
5631
  const mono_microsecs current_time = 3;
 
5632
  __attribute__((cleanup(cleanup_queue)))
 
5633
    task_queue *queue = create_queue();
 
5634
  g_assert_nonnull(queue);
 
5635
  __attribute__((cleanup(cleanup_string)))
 
5636
    char *tempdir = make_temporary_directory();
 
5637
  g_assert_nonnull(tempdir);
 
5638
  char socket_name[] = "nonexistent";
 
5639
  char *filename = NULL;
 
5640
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5641
                  >, 0);
 
5642
  g_assert_nonnull(filename);
 
5643
 
 
5644
  task_context task = {
 
5645
    .func=connect_question_socket,
 
5646
    .question_filename=strdup(question_filename),
 
5647
    .epoll_fd=epoll_fd,
 
5648
    .password=(buffer[]){{}},
 
5649
    .filename=filename,
 
5650
    .cancelled_filenames=&cancelled_filenames,
 
5651
    .mandos_client_exited=(bool[]){false},
 
5652
    .password_is_read=(bool[]){false},
 
5653
    .current_time=&current_time,
 
5654
  };
 
5655
  g_assert_nonnull(task.question_filename);
 
5656
  run_task_with_stderr_to_dev_null(task, queue);
 
5657
 
 
5658
  g_assert_nonnull(find_matching_task(queue, task));
 
5659
 
 
5660
  g_assert_false(string_set_contains(cancelled_filenames,
 
5661
                                     question_filename));
 
5662
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5663
  g_assert_true(queue->next_run == 1000000 + current_time);
 
5664
 
 
5665
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5666
}
 
5667
 
 
5668
static
 
5669
void test_connect_question_socket_bad_epoll(__attribute__((unused))
 
5670
                                            test_fixture *fixture,
 
5671
                                            __attribute__((unused))
 
5672
                                            gconstpointer user_data){
 
5673
  __attribute__((cleanup(cleanup_close)))
 
5674
    const int epoll_fd = open("/dev/null",
 
5675
                              O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
5676
  __attribute__((cleanup(cleanup_string)))
 
5677
    char *const question_filename = strdup("/nonexistent/question");
 
5678
  g_assert_nonnull(question_filename);
 
5679
  __attribute__((cleanup(string_set_clear)))
 
5680
    string_set cancelled_filenames = {};
 
5681
  const mono_microsecs current_time = 5;
 
5682
  __attribute__((cleanup(cleanup_queue)))
 
5683
    task_queue *queue = create_queue();
 
5684
  g_assert_nonnull(queue);
 
5685
  __attribute__((cleanup(cleanup_string)))
 
5686
    char *tempdir = make_temporary_directory();
 
5687
  g_assert_nonnull(tempdir);
 
5688
  __attribute__((cleanup(cleanup_close)))
 
5689
    const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
 
5690
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
5691
  g_assert_cmpint(sock_fd, >=, 0);
 
5692
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
5693
  const char socket_name[] = "socket_name";
 
5694
  __attribute__((cleanup(cleanup_string)))
 
5695
    char *filename = NULL;
 
5696
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5697
                  >, 0);
 
5698
  g_assert_nonnull(filename);
 
5699
  g_assert_cmpint((int)strlen(filename), <,
 
5700
                  (int)sizeof(sock_name.sun_path));
 
5701
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
5702
  sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
 
5703
  g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
 
5704
                            (socklen_t)SUN_LEN(&sock_name)), >=, 0);
 
5705
  task_context task = {
 
5706
    .func=connect_question_socket,
 
5707
    .question_filename=strdup(question_filename),
 
5708
    .epoll_fd=epoll_fd,
 
5709
    .password=(buffer[]){{}},
 
5710
    .filename=strdup(filename),
 
5711
    .cancelled_filenames=&cancelled_filenames,
 
5712
    .mandos_client_exited=(bool[]){false},
 
5713
    .password_is_read=(bool[]){false},
 
5714
    .current_time=&current_time,
 
5715
  };
 
5716
  g_assert_nonnull(task.question_filename);
 
5717
  run_task_with_stderr_to_dev_null(task, queue);
 
5718
 
 
5719
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5720
  const task_context *const added_task
 
5721
    = find_matching_task(queue, task);
 
5722
  g_assert_nonnull(added_task);
 
5723
  g_assert_true(queue->next_run == 1000000 + current_time);
 
5724
 
 
5725
  g_assert_cmpint(unlink(filename), ==, 0);
 
5726
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5727
}
 
5728
 
 
5729
static
 
5730
void test_connect_question_socket_usable(__attribute__((unused))
 
5731
                                         test_fixture *fixture,
 
5732
                                         __attribute__((unused))
 
5733
                                         gconstpointer user_data){
 
5734
  __attribute__((cleanup(cleanup_close)))
 
5735
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5736
  g_assert_cmpint(epoll_fd, >=, 0);
 
5737
  __attribute__((cleanup(cleanup_string)))
 
5738
    char *const question_filename = strdup("/nonexistent/question");
 
5739
  g_assert_nonnull(question_filename);
 
5740
  __attribute__((cleanup(string_set_clear)))
 
5741
    string_set cancelled_filenames = {};
 
5742
  buffer password = {};
 
5743
  bool mandos_client_exited = false;
 
5744
  bool password_is_read = false;
 
5745
  const mono_microsecs current_time = 0;
 
5746
  __attribute__((cleanup(cleanup_queue)))
 
5747
    task_queue *queue = create_queue();
 
5748
  g_assert_nonnull(queue);
 
5749
  __attribute__((cleanup(cleanup_string)))
 
5750
    char *tempdir = make_temporary_directory();
 
5751
  g_assert_nonnull(tempdir);
 
5752
  __attribute__((cleanup(cleanup_close)))
 
5753
    const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
 
5754
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
5755
  g_assert_cmpint(sock_fd, >=, 0);
 
5756
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
5757
  const char socket_name[] = "socket_name";
 
5758
  __attribute__((cleanup(cleanup_string)))
 
5759
    char *filename = NULL;
 
5760
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5761
                  >, 0);
 
5762
  g_assert_nonnull(filename);
 
5763
  g_assert_cmpint((int)strlen(filename), <,
 
5764
                  (int)sizeof(sock_name.sun_path));
 
5765
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
5766
  sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
 
5767
  g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
 
5768
                            (socklen_t)SUN_LEN(&sock_name)), >=, 0);
 
5769
  task_context task = {
 
5770
    .func=connect_question_socket,
 
5771
    .question_filename=strdup(question_filename),
 
5772
    .epoll_fd=epoll_fd,
 
5773
    .password=&password,
 
5774
    .filename=strdup(filename),
 
5775
    .cancelled_filenames=&cancelled_filenames,
 
5776
    .mandos_client_exited=&mandos_client_exited,
 
5777
    .password_is_read=&password_is_read,
 
5778
    .current_time=&current_time,
 
5779
  };
 
5780
  g_assert_nonnull(task.question_filename);
 
5781
  task.func(task, queue);
 
5782
 
 
5783
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5784
  const task_context *const added_task
 
5785
    = find_matching_task(queue, (task_context){
 
5786
        .func=send_password_to_socket,
 
5787
        .question_filename=question_filename,
 
5788
        .filename=filename,
 
5789
        .epoll_fd=epoll_fd,
 
5790
        .password=&password,
 
5791
        .cancelled_filenames=&cancelled_filenames,
 
5792
        .mandos_client_exited=&mandos_client_exited,
 
5793
        .password_is_read=&password_is_read,
 
5794
        .current_time=&current_time,
 
5795
      });
 
5796
  g_assert_nonnull(added_task);
 
5797
  g_assert_cmpint(added_task->fd, >, 0);
 
5798
 
 
5799
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5800
                                   EPOLLOUT));
 
5801
 
 
5802
  const int fd = added_task->fd;
 
5803
  g_assert_cmpint(fd, >, 0);
 
5804
  g_assert_true(fd_has_cloexec_and_nonblock(fd));
 
5805
 
 
5806
  /* write to fd */
 
5807
  char write_data[PIPE_BUF];
 
5808
  {
 
5809
    /* Construct test password buffer */
 
5810
    /* Start with + since that is what the real procotol uses */
 
5811
    write_data[0] = '+';
 
5812
    /* Set a special character at string end just to mark the end */
 
5813
    write_data[sizeof(write_data)-2] = 'y';
 
5814
    /* Set NUL at buffer end, as suggested by the protocol */
 
5815
    write_data[sizeof(write_data)-1] = '\0';
 
5816
    /* Fill rest of password with 'x' */
 
5817
    memset(write_data+1, 'x', sizeof(write_data)-3);
 
5818
    g_assert_cmpint((int)send(fd, write_data, sizeof(write_data),
 
5819
                              MSG_NOSIGNAL), ==, sizeof(write_data));
 
5820
  }
 
5821
 
 
5822
  /* read from sock_fd */
 
5823
  char read_data[sizeof(write_data)];
 
5824
  g_assert_cmpint((int)read(sock_fd, read_data, sizeof(read_data)),
 
5825
                  ==, sizeof(read_data));
 
5826
 
 
5827
  g_assert_true(memcmp(write_data, read_data, sizeof(write_data))
 
5828
                == 0);
 
5829
 
 
5830
  /* writing to sock_fd should fail */
 
5831
  g_assert_cmpint(send(sock_fd, write_data, sizeof(write_data),
 
5832
                       MSG_NOSIGNAL), <, 0);
 
5833
 
 
5834
  /* reading from fd should fail */
 
5835
  g_assert_cmpint((int)recv(fd, read_data, sizeof(read_data),
 
5836
                            MSG_NOSIGNAL), <, 0);
 
5837
 
 
5838
  g_assert_cmpint(unlink(filename), ==, 0);
 
5839
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5840
}
 
5841
 
 
5842
static void
 
5843
test_send_password_to_socket_client_not_exited(__attribute__((unused))
 
5844
                                               test_fixture *fixture,
 
5845
                                               __attribute__((unused))
 
5846
                                               gconstpointer
 
5847
                                               user_data){
 
5848
  __attribute__((cleanup(cleanup_close)))
 
5849
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5850
  g_assert_cmpint(epoll_fd, >=, 0);
 
5851
  __attribute__((cleanup(cleanup_string)))
 
5852
    char *const question_filename = strdup("/nonexistent/question");
 
5853
  g_assert_nonnull(question_filename);
 
5854
  __attribute__((cleanup(cleanup_string)))
 
5855
    char *const filename = strdup("/nonexistent/socket");
 
5856
  g_assert_nonnull(filename);
 
5857
  __attribute__((cleanup(string_set_clear)))
 
5858
    string_set cancelled_filenames = {};
 
5859
  buffer password = {};
 
5860
  bool password_is_read = true;
 
5861
  __attribute__((cleanup(cleanup_queue)))
 
5862
    task_queue *queue = create_queue();
 
5863
  g_assert_nonnull(queue);
 
5864
  int socketfds[2];
 
5865
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5866
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5867
                             socketfds), ==, 0);
 
5868
  __attribute__((cleanup(cleanup_close)))
 
5869
    const int read_socket = socketfds[0];
 
5870
  const int write_socket = socketfds[1];
 
5871
  task_context task = {
 
5872
    .func=send_password_to_socket,
 
5873
    .question_filename=strdup(question_filename),
 
5874
    .filename=strdup(filename),
 
5875
    .epoll_fd=epoll_fd,
 
5876
    .fd=write_socket,
 
5877
    .password=&password,
 
5878
    .cancelled_filenames=&cancelled_filenames,
 
5879
    .mandos_client_exited=(bool[]){false},
 
5880
    .password_is_read=&password_is_read,
 
5881
    .current_time=(mono_microsecs[]){0},
 
5882
  };
 
5883
  g_assert_nonnull(task.question_filename);
 
5884
 
 
5885
  task.func(task, queue);
 
5886
 
 
5887
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5888
 
 
5889
  const task_context *const added_task
 
5890
    = find_matching_task(queue, task);
 
5891
  g_assert_nonnull(added_task);
 
5892
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
5893
  g_assert_true(password_is_read);
 
5894
 
 
5895
  g_assert_cmpint(added_task->fd, >, 0);
 
5896
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5897
                                   EPOLLOUT));
 
5898
}
 
5899
 
 
5900
static void
 
5901
test_send_password_to_socket_password_not_read(__attribute__((unused))
 
5902
                                               test_fixture *fixture,
 
5903
                                               __attribute__((unused))
 
5904
                                               gconstpointer
 
5905
                                               user_data){
 
5906
  __attribute__((cleanup(cleanup_close)))
 
5907
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5908
  g_assert_cmpint(epoll_fd, >=, 0);
 
5909
  __attribute__((cleanup(cleanup_string)))
 
5910
    char *const question_filename = strdup("/nonexistent/question");
 
5911
  g_assert_nonnull(question_filename);
 
5912
  __attribute__((cleanup(cleanup_string)))
 
5913
    char *const filename = strdup("/nonexistent/socket");
 
5914
  __attribute__((cleanup(string_set_clear)))
 
5915
    string_set cancelled_filenames = {};
 
5916
  buffer password = {};
 
5917
  __attribute__((cleanup(cleanup_queue)))
 
5918
    task_queue *queue = create_queue();
 
5919
  g_assert_nonnull(queue);
 
5920
  int socketfds[2];
 
5921
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5922
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5923
                             socketfds), ==, 0);
 
5924
  __attribute__((cleanup(cleanup_close)))
 
5925
    const int read_socket = socketfds[0];
 
5926
  const int write_socket = socketfds[1];
 
5927
  task_context task = {
 
5928
    .func=send_password_to_socket,
 
5929
    .question_filename=strdup(question_filename),
 
5930
    .filename=strdup(filename),
 
5931
    .epoll_fd=epoll_fd,
 
5932
    .fd=write_socket,
 
5933
    .password=&password,
 
5934
    .cancelled_filenames=&cancelled_filenames,
 
5935
    .mandos_client_exited=(bool[]){false},
 
5936
    .password_is_read=(bool[]){false},
 
5937
    .current_time=(mono_microsecs[]){0},
 
5938
  };
 
5939
  g_assert_nonnull(task.question_filename);
 
5940
 
 
5941
  task.func(task, queue);
 
5942
 
 
5943
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5944
 
 
5945
  const task_context *const added_task = find_matching_task(queue,
 
5946
                                                            task);
 
5947
  g_assert_nonnull(added_task);
 
5948
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
5949
  g_assert_true(queue->next_run == 0);
 
5950
 
 
5951
  g_assert_cmpint(added_task->fd, >, 0);
 
5952
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5953
                                   EPOLLOUT));
 
5954
}
 
5955
 
 
5956
static
 
5957
void test_send_password_to_socket_EMSGSIZE(__attribute__((unused))
 
5958
                                           test_fixture *fixture,
 
5959
                                           __attribute__((unused))
 
5960
                                           gconstpointer user_data){
 
5961
#ifndef __amd64__
 
5962
  g_test_skip("Skipping EMSGSIZE test on non-AMD64 platform");
 
5963
#else
 
5964
  __attribute__((cleanup(cleanup_close)))
 
5965
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5966
  g_assert_cmpint(epoll_fd, >=, 0);
 
5967
  const char question_filename[] = "/nonexistent/question";
 
5968
  char *const filename = strdup("/nonexistent/socket");
 
5969
  __attribute__((cleanup(string_set_clear)))
 
5970
    string_set cancelled_filenames = {};
 
5971
  const size_t oversized = 1024*1024; /* Limit seems to be 212960 */
 
5972
  __attribute__((cleanup(cleanup_buffer)))
 
5973
    buffer password = {
 
5974
    .data=malloc(oversized),
 
5975
    .length=oversized,
 
5976
    .allocated=oversized,
 
5977
  };
 
5978
  g_assert_nonnull(password.data);
 
5979
  if(mlock(password.data, password.allocated) != 0){
 
5980
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
5981
  }
 
5982
  /* Construct test password buffer */
 
5983
  /* Start with + since that is what the real procotol uses */
 
5984
  password.data[0] = '+';
 
5985
  /* Set a special character at string end just to mark the end */
 
5986
  password.data[oversized-3] = 'y';
 
5987
  /* Set NUL at buffer end, as suggested by the protocol */
 
5988
  password.data[oversized-2] = '\0';
 
5989
  /* Fill rest of password with 'x' */
 
5990
  memset(password.data+1, 'x', oversized-3);
 
5991
 
 
5992
  __attribute__((cleanup(cleanup_queue)))
 
5993
    task_queue *queue = create_queue();
 
5994
  g_assert_nonnull(queue);
 
5995
  int socketfds[2];
 
5996
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5997
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5998
                             socketfds), ==, 0);
 
5999
  __attribute__((cleanup(cleanup_close)))
 
6000
    const int read_socket = socketfds[0];
 
6001
  __attribute__((cleanup(cleanup_close)))
 
6002
    const int write_socket = socketfds[1];
 
6003
  task_context task = {
 
6004
    .func=send_password_to_socket,
 
6005
    .question_filename=strdup(question_filename),
 
6006
    .filename=filename,
 
6007
    .epoll_fd=epoll_fd,
 
6008
    .fd=write_socket,
 
6009
    .password=&password,
 
6010
    .cancelled_filenames=&cancelled_filenames,
 
6011
    .mandos_client_exited=(bool[]){true},
 
6012
    .password_is_read=(bool[]){true},
 
6013
    .current_time=(mono_microsecs[]){0},
 
6014
  };
 
6015
  g_assert_nonnull(task.question_filename);
 
6016
 
 
6017
  run_task_with_stderr_to_dev_null(task, queue);
 
6018
 
 
6019
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6020
  g_assert_true(string_set_contains(cancelled_filenames,
 
6021
                                    question_filename));
 
6022
#endif
 
6023
}
 
6024
 
 
6025
static void test_send_password_to_socket_retry(__attribute__((unused))
 
6026
                                               test_fixture *fixture,
 
6027
                                               __attribute__((unused))
 
6028
                                               gconstpointer
 
6029
                                               user_data){
 
6030
  __attribute__((cleanup(cleanup_close)))
 
6031
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6032
  g_assert_cmpint(epoll_fd, >=, 0);
 
6033
  __attribute__((cleanup(cleanup_string)))
 
6034
    char *const question_filename = strdup("/nonexistent/question");
 
6035
  g_assert_nonnull(question_filename);
 
6036
  __attribute__((cleanup(cleanup_string)))
 
6037
    char *const filename = strdup("/nonexistent/socket");
 
6038
  g_assert_nonnull(filename);
 
6039
  __attribute__((cleanup(string_set_clear)))
 
6040
    string_set cancelled_filenames = {};
 
6041
  __attribute__((cleanup(cleanup_buffer)))
 
6042
    buffer password = {};
 
6043
 
 
6044
  __attribute__((cleanup(cleanup_queue)))
 
6045
    task_queue *queue = create_queue();
 
6046
  g_assert_nonnull(queue);
 
6047
  int socketfds[2];
 
6048
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6049
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6050
                             socketfds), ==, 0);
 
6051
  __attribute__((cleanup(cleanup_close)))
 
6052
    const int read_socket = socketfds[0];
 
6053
  const int write_socket = socketfds[1];
 
6054
  /* Close the server side socket to force ECONNRESET on client */
 
6055
  g_assert_cmpint(close(read_socket), ==, 0);
 
6056
  task_context task = {
 
6057
    .func=send_password_to_socket,
 
6058
    .question_filename=strdup(question_filename),
 
6059
    .filename=strdup(filename),
 
6060
    .epoll_fd=epoll_fd,
 
6061
    .fd=write_socket,
 
6062
    .password=&password,
 
6063
    .cancelled_filenames=&cancelled_filenames,
 
6064
    .mandos_client_exited=(bool[]){true},
 
6065
    .password_is_read=(bool[]){true},
 
6066
    .current_time=(mono_microsecs[]){0},
 
6067
  };
 
6068
  g_assert_nonnull(task.question_filename);
 
6069
 
 
6070
  task.func(task, queue);
 
6071
 
 
6072
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6073
 
 
6074
  const task_context *const added_task = find_matching_task(queue,
 
6075
                                                            task);
 
6076
  g_assert_nonnull(added_task);
 
6077
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
6078
 
 
6079
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
6080
                                   EPOLLOUT));
 
6081
}
 
6082
 
 
6083
static
 
6084
void test_send_password_to_socket_bad_epoll(__attribute__((unused))
 
6085
                                            test_fixture *fixture,
 
6086
                                            __attribute__((unused))
 
6087
                                            gconstpointer user_data){
 
6088
  __attribute__((cleanup(cleanup_close)))
 
6089
    const int epoll_fd = open("/dev/null",
 
6090
                              O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
6091
  __attribute__((cleanup(cleanup_string)))
 
6092
    char *const question_filename = strdup("/nonexistent/question");
 
6093
  g_assert_nonnull(question_filename);
 
6094
  __attribute__((cleanup(cleanup_string)))
 
6095
    char *const filename = strdup("/nonexistent/socket");
 
6096
  g_assert_nonnull(filename);
 
6097
  __attribute__((cleanup(string_set_clear)))
 
6098
    string_set cancelled_filenames = {};
 
6099
  __attribute__((cleanup(cleanup_buffer)))
 
6100
    buffer password = {};
 
6101
 
 
6102
  const mono_microsecs current_time = 11;
 
6103
  __attribute__((cleanup(cleanup_queue)))
 
6104
    task_queue *queue = create_queue();
 
6105
  g_assert_nonnull(queue);
 
6106
  int socketfds[2];
 
6107
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6108
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6109
                             socketfds), ==, 0);
 
6110
  __attribute__((cleanup(cleanup_close)))
 
6111
    const int read_socket = socketfds[0];
 
6112
  const int write_socket = socketfds[1];
 
6113
  /* Close the server side socket to force ECONNRESET on client */
 
6114
  g_assert_cmpint(close(read_socket), ==, 0);
 
6115
  task_context task = {
 
6116
    .func=send_password_to_socket,
 
6117
    .question_filename=strdup(question_filename),
 
6118
    .filename=strdup(filename),
 
6119
    .epoll_fd=epoll_fd,
 
6120
    .fd=write_socket,
 
6121
    .password=&password,
 
6122
    .cancelled_filenames=&cancelled_filenames,
 
6123
    .mandos_client_exited=(bool[]){true},
 
6124
    .password_is_read=(bool[]){true},
 
6125
    .current_time=&current_time,
 
6126
  };
 
6127
  g_assert_nonnull(task.question_filename);
 
6128
 
 
6129
  run_task_with_stderr_to_dev_null(task, queue);
 
6130
 
 
6131
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6132
 
 
6133
  const task_context *const added_task = find_matching_task(queue,
 
6134
                                                            task);
 
6135
  g_assert_nonnull(added_task);
 
6136
  g_assert_true(queue->next_run == current_time + 1000000);
 
6137
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
6138
}
 
6139
 
 
6140
static void assert_send_password_to_socket_password(buffer password){
 
6141
  __attribute__((cleanup(cleanup_close)))
 
6142
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6143
  g_assert_cmpint(epoll_fd, >=, 0);
 
6144
  char *const question_filename = strdup("/nonexistent/question");
 
6145
  g_assert_nonnull(question_filename);
 
6146
  char *const filename = strdup("/nonexistent/socket");
 
6147
  g_assert_nonnull(filename);
 
6148
  __attribute__((cleanup(string_set_clear)))
 
6149
    string_set cancelled_filenames = {};
 
6150
 
 
6151
  __attribute__((cleanup(cleanup_queue)))
 
6152
    task_queue *queue = create_queue();
 
6153
  g_assert_nonnull(queue);
 
6154
  int socketfds[2];
 
6155
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6156
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6157
                             socketfds), ==, 0);
 
6158
  __attribute__((cleanup(cleanup_close)))
 
6159
    const int read_socket = socketfds[0];
 
6160
  const int write_socket = socketfds[1];
 
6161
  task_context task = {
 
6162
    .func=send_password_to_socket,
 
6163
    .question_filename=question_filename,
 
6164
    .filename=filename,
 
6165
    .epoll_fd=epoll_fd,
 
6166
    .fd=write_socket,
 
6167
    .password=&password,
 
6168
    .cancelled_filenames=&cancelled_filenames,
 
6169
    .mandos_client_exited=(bool[]){true},
 
6170
    .password_is_read=(bool[]){true},
 
6171
    .current_time=(mono_microsecs[]){0},
 
6172
  };
 
6173
 
 
6174
  char *expected_written_data = malloc(password.length + 2);
 
6175
  g_assert_nonnull(expected_written_data);
 
6176
  expected_written_data[0] = '+';
 
6177
  expected_written_data[password.length + 1] = '\0';
 
6178
  if(password.length > 0){
 
6179
    g_assert_nonnull(password.data);
 
6180
    memcpy(expected_written_data + 1, password.data, password.length);
 
6181
  }
 
6182
 
 
6183
  task.func(task, queue);
 
6184
 
 
6185
  char buf[PIPE_BUF];
 
6186
  g_assert_cmpint((int)read(read_socket, buf, PIPE_BUF), ==,
 
6187
                  (int)(password.length + 2));
 
6188
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6189
 
 
6190
  g_assert_true(memcmp(expected_written_data, buf,
 
6191
                       password.length + 2) == 0);
 
6192
 
 
6193
  g_assert_true(epoll_set_does_not_contain(epoll_fd, write_socket));
 
6194
 
 
6195
  free(expected_written_data);
 
6196
}
 
6197
 
 
6198
static void
 
6199
test_send_password_to_socket_null_password(__attribute__((unused))
 
6200
                                           test_fixture *fixture,
 
6201
                                           __attribute__((unused))
 
6202
                                           gconstpointer user_data){
 
6203
  __attribute__((cleanup(cleanup_buffer)))
 
6204
    buffer password = {};
 
6205
  assert_send_password_to_socket_password(password);
 
6206
}
 
6207
 
 
6208
static void
 
6209
test_send_password_to_socket_empty_password(__attribute__((unused))
 
6210
                                            test_fixture *fixture,
 
6211
                                            __attribute__((unused))
 
6212
                                            gconstpointer user_data){
 
6213
  __attribute__((cleanup(cleanup_buffer)))
 
6214
    buffer password = {
 
6215
    .data=malloc(1),           /* because malloc(0) may return NULL */
 
6216
    .length=0,
 
6217
    .allocated=0,               /* deliberate lie */
 
6218
  };
 
6219
  g_assert_nonnull(password.data);
 
6220
  assert_send_password_to_socket_password(password);
 
6221
}
 
6222
 
 
6223
static void
 
6224
test_send_password_to_socket_empty_str_pass(__attribute__((unused))
 
6225
                                            test_fixture *fixture,
 
6226
                                            __attribute__((unused))
 
6227
                                            gconstpointer user_data){
 
6228
  __attribute__((cleanup(cleanup_buffer)))
 
6229
    buffer password = {
 
6230
    .data=strdup(""),
 
6231
    .length=0,
 
6232
    .allocated=1,
 
6233
  };
 
6234
  if(mlock(password.data, password.allocated) != 0){
 
6235
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6236
  }
 
6237
  assert_send_password_to_socket_password(password);
 
6238
}
 
6239
 
 
6240
static void
 
6241
test_send_password_to_socket_text_password(__attribute__((unused))
 
6242
                                           test_fixture *fixture,
 
6243
                                           __attribute__((unused))
 
6244
                                           gconstpointer user_data){
 
6245
  const char dummy_test_password[] = "dummy test password";
 
6246
  __attribute__((cleanup(cleanup_buffer)))
 
6247
    buffer password = {
 
6248
    .data = strdup(dummy_test_password),
 
6249
    .length = strlen(dummy_test_password),
 
6250
    .allocated = sizeof(dummy_test_password),
 
6251
  };
 
6252
  if(mlock(password.data, password.allocated) != 0){
 
6253
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6254
  }
 
6255
  assert_send_password_to_socket_password(password);
 
6256
}
 
6257
 
 
6258
static void
 
6259
test_send_password_to_socket_binary_password(__attribute__((unused))
 
6260
                                             test_fixture *fixture,
 
6261
                                             __attribute__((unused))
 
6262
                                             gconstpointer user_data){
 
6263
  __attribute__((cleanup(cleanup_buffer)))
 
6264
    buffer password = {
 
6265
    .data=malloc(255),
 
6266
    .length=255,
 
6267
    .allocated=255,
 
6268
  };
 
6269
  g_assert_nonnull(password.data);
 
6270
  if(mlock(password.data, password.allocated) != 0){
 
6271
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6272
  }
 
6273
  char c = 1;                   /* Start at 1, avoiding NUL */
 
6274
  for(int i=0; i < 255; i++){
 
6275
    password.data[i] = c++;
 
6276
  }
 
6277
  assert_send_password_to_socket_password(password);
 
6278
}
 
6279
 
 
6280
static void
 
6281
test_send_password_to_socket_nuls_in_password(__attribute__((unused))
 
6282
                                              test_fixture *fixture,
 
6283
                                              __attribute__((unused))
 
6284
                                              gconstpointer
 
6285
                                              user_data){
 
6286
  char test_password[] = {'\0', 'a', '\0', 'b', '\0', 'c', '\0'};
 
6287
  __attribute__((cleanup(cleanup_buffer)))
 
6288
    buffer password = {
 
6289
    .data=malloc(sizeof(test_password)),
 
6290
    .length=sizeof(test_password),
 
6291
    .allocated=sizeof(test_password),
 
6292
  };
 
6293
  g_assert_nonnull(password.data);
 
6294
  if(mlock(password.data, password.allocated) !=0){
 
6295
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6296
  }
 
6297
  memcpy(password.data, test_password, password.allocated);
 
6298
  assert_send_password_to_socket_password(password);
 
6299
}
 
6300
 
 
6301
static bool assert_add_existing_questions_to_devnull(task_queue
 
6302
                                                     *const,
 
6303
                                                     const int,
 
6304
                                                     buffer *const,
 
6305
                                                     string_set *,
 
6306
                                                     const
 
6307
                                                     mono_microsecs
 
6308
                                                     *const,
 
6309
                                                     bool *const,
 
6310
                                                     bool *const,
 
6311
                                                     const char
 
6312
                                                     *const);
 
6313
 
 
6314
static void test_add_existing_questions_ENOENT(__attribute__((unused))
 
6315
                                               test_fixture *fixture,
 
6316
                                               __attribute__((unused))
 
6317
                                               gconstpointer
 
6318
                                               user_data){
 
6319
  __attribute__((cleanup(cleanup_queue)))
 
6320
    task_queue *queue = create_queue();
 
6321
  g_assert_nonnull(queue);
 
6322
  __attribute__((cleanup(cleanup_close)))
 
6323
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6324
  g_assert_cmpint(epoll_fd, >=, 0);
 
6325
  __attribute__((cleanup(string_set_clear)))
 
6326
    string_set cancelled_filenames = {};
 
6327
 
 
6328
  g_assert_false(assert_add_existing_questions_to_devnull
 
6329
                 (queue,
 
6330
                  epoll_fd,
 
6331
                  (buffer[]){{}}, /* password */
 
6332
                  &cancelled_filenames,
 
6333
                  (mono_microsecs[]){0}, /* current_time */
 
6334
                  (bool[]){false},       /* mandos_client_exited */
 
6335
                  (bool[]){false},       /* password_is_read */
 
6336
                  "/nonexistent"));      /* dirname */
 
6337
 
 
6338
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6339
}
 
6340
 
 
6341
static
 
6342
bool assert_add_existing_questions_to_devnull(task_queue
 
6343
                                              *const queue,
 
6344
                                              const int
 
6345
                                              epoll_fd,
 
6346
                                              buffer *const
 
6347
                                              password,
 
6348
                                              string_set
 
6349
                                              *cancelled_filenames,
 
6350
                                              const mono_microsecs
 
6351
                                              *const current_time,
 
6352
                                              bool *const
 
6353
                                              mandos_client_exited,
 
6354
                                              bool *const
 
6355
                                              password_is_read,
 
6356
                                              const char *const
 
6357
                                              dirname){
 
6358
  __attribute__((cleanup(cleanup_close)))
 
6359
    const int devnull_fd = open("/dev/null",
 
6360
                                O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
6361
  g_assert_cmpint(devnull_fd, >=, 0);
 
6362
  __attribute__((cleanup(cleanup_close)))
 
6363
    const int real_stderr_fd = dup(STDERR_FILENO);
 
6364
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
6365
  dup2(devnull_fd, STDERR_FILENO);
 
6366
  const bool ret = add_existing_questions(queue, epoll_fd, password,
 
6367
                                          cancelled_filenames,
 
6368
                                          current_time,
 
6369
                                          mandos_client_exited,
 
6370
                                          password_is_read, dirname);
 
6371
  dup2(real_stderr_fd, STDERR_FILENO);
 
6372
  return ret;
 
6373
}
 
6374
 
 
6375
static
 
6376
void test_add_existing_questions_no_questions(__attribute__((unused))
 
6377
                                              test_fixture *fixture,
 
6378
                                              __attribute__((unused))
 
6379
                                              gconstpointer
 
6380
                                              user_data){
 
6381
  __attribute__((cleanup(cleanup_queue)))
 
6382
    task_queue *queue = create_queue();
 
6383
  g_assert_nonnull(queue);
 
6384
  __attribute__((cleanup(cleanup_close)))
 
6385
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6386
  g_assert_cmpint(epoll_fd, >=, 0);
 
6387
  __attribute__((cleanup(string_set_clear)))
 
6388
    string_set cancelled_filenames = {};
 
6389
  __attribute__((cleanup(cleanup_string)))
 
6390
    char *tempdir = make_temporary_directory();
 
6391
  g_assert_nonnull(tempdir);
 
6392
 
 
6393
  g_assert_false(assert_add_existing_questions_to_devnull
 
6394
                 (queue,
 
6395
                  epoll_fd,
 
6396
                  (buffer[]){{}}, /* password */
 
6397
                  &cancelled_filenames,
 
6398
                  (mono_microsecs[]){0}, /* current_time */
 
6399
                  (bool[]){false},       /* mandos_client_exited */
 
6400
                  (bool[]){false},       /* password_is_read */
 
6401
                  tempdir));
 
6402
 
 
6403
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6404
 
 
6405
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6406
}
 
6407
 
 
6408
static char *make_question_file_in_directory(const char *const);
 
6409
 
 
6410
static
 
6411
void test_add_existing_questions_one_question(__attribute__((unused))
 
6412
                                              test_fixture *fixture,
 
6413
                                              __attribute__((unused))
 
6414
                                              gconstpointer
 
6415
                                              user_data){
 
6416
  __attribute__((cleanup(cleanup_queue)))
 
6417
    task_queue *queue = create_queue();
 
6418
  g_assert_nonnull(queue);
 
6419
  __attribute__((cleanup(cleanup_close)))
 
6420
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6421
  g_assert_cmpint(epoll_fd, >=, 0);
 
6422
  __attribute__((cleanup(cleanup_buffer)))
 
6423
    buffer password = {};
 
6424
  __attribute__((cleanup(string_set_clear)))
 
6425
    string_set cancelled_filenames = {};
 
6426
  const mono_microsecs current_time = 0;
 
6427
  bool mandos_client_exited = false;
 
6428
  bool password_is_read = false;
 
6429
  __attribute__((cleanup(cleanup_string)))
 
6430
    char *tempdir = make_temporary_directory();
 
6431
  g_assert_nonnull(tempdir);
 
6432
  __attribute__((cleanup(cleanup_string)))
 
6433
    char *question_filename
 
6434
    = make_question_file_in_directory(tempdir);
 
6435
  g_assert_nonnull(question_filename);
 
6436
 
 
6437
  g_assert_true(assert_add_existing_questions_to_devnull
 
6438
                (queue,
 
6439
                 epoll_fd,
 
6440
                 &password,
 
6441
                 &cancelled_filenames,
 
6442
                 &current_time,
 
6443
                 &mandos_client_exited,
 
6444
                 &password_is_read,
 
6445
                 tempdir));
 
6446
 
 
6447
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6448
 
 
6449
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
6450
        .func=open_and_parse_question,
 
6451
        .epoll_fd=epoll_fd,
 
6452
        .filename=question_filename,
 
6453
        .question_filename=question_filename,
 
6454
        .password=&password,
 
6455
        .cancelled_filenames=&cancelled_filenames,
 
6456
        .current_time=&current_time,
 
6457
        .mandos_client_exited=&mandos_client_exited,
 
6458
        .password_is_read=&password_is_read,
 
6459
      }));
 
6460
 
 
6461
  g_assert_true(queue->next_run == 1);
 
6462
 
 
6463
  g_assert_cmpint(unlink(question_filename), ==, 0);
 
6464
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6465
}
 
6466
 
 
6467
static char *make_question_file_in_directory(const char
 
6468
                                             *const dir){
 
6469
  return make_temporary_prefixed_file_in_directory("ask.", dir);
 
6470
}
 
6471
 
 
6472
static
 
6473
void test_add_existing_questions_two_questions(__attribute__((unused))
 
6474
                                               test_fixture *fixture,
 
6475
                                               __attribute__((unused))
 
6476
                                               gconstpointer
 
6477
                                               user_data){
 
6478
  __attribute__((cleanup(cleanup_queue)))
 
6479
    task_queue *queue = create_queue();
 
6480
  g_assert_nonnull(queue);
 
6481
  __attribute__((cleanup(cleanup_close)))
 
6482
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6483
  g_assert_cmpint(epoll_fd, >=, 0);
 
6484
  __attribute__((cleanup(cleanup_buffer)))
 
6485
    buffer password = {};
 
6486
  __attribute__((cleanup(string_set_clear)))
 
6487
    string_set cancelled_filenames = {};
 
6488
  const mono_microsecs current_time = 0;
 
6489
  bool mandos_client_exited = false;
 
6490
  bool password_is_read = false;
 
6491
  __attribute__((cleanup(cleanup_string)))
 
6492
    char *tempdir = make_temporary_directory();
 
6493
  g_assert_nonnull(tempdir);
 
6494
  __attribute__((cleanup(cleanup_string)))
 
6495
    char *question_filename1
 
6496
    = make_question_file_in_directory(tempdir);
 
6497
  g_assert_nonnull(question_filename1);
 
6498
  __attribute__((cleanup(cleanup_string)))
 
6499
    char *question_filename2
 
6500
    = make_question_file_in_directory(tempdir);
 
6501
  g_assert_nonnull(question_filename2);
 
6502
 
 
6503
  g_assert_true(assert_add_existing_questions_to_devnull
 
6504
                (queue,
 
6505
                 epoll_fd,
 
6506
                 &password,
 
6507
                 &cancelled_filenames,
 
6508
                 &current_time,
 
6509
                 &mandos_client_exited,
 
6510
                 &password_is_read,
 
6511
                 tempdir));
 
6512
 
 
6513
  g_assert_cmpuint((unsigned int)queue->length, ==, 2);
 
6514
 
 
6515
  g_assert_true(queue->next_run == 1);
 
6516
 
 
6517
  __attribute__((cleanup(string_set_clear)))
 
6518
    string_set seen_questions = {};
 
6519
 
 
6520
  bool queue_contains_question_opener(char *const question_filename){
 
6521
    return(find_matching_task(queue, (task_context){
 
6522
          .func=open_and_parse_question,
 
6523
          .epoll_fd=epoll_fd,
 
6524
          .question_filename=question_filename,
 
6525
          .password=&password,
 
6526
          .cancelled_filenames=&cancelled_filenames,
 
6527
          .current_time=&current_time,
 
6528
          .mandos_client_exited=&mandos_client_exited,
 
6529
          .password_is_read=&password_is_read,
 
6530
        }) != NULL);
 
6531
  }
 
6532
 
 
6533
  g_assert_true(queue_contains_question_opener(question_filename1));
 
6534
  g_assert_true(queue_contains_question_opener(question_filename2));
 
6535
 
 
6536
  g_assert_true(queue->next_run == 1);
 
6537
 
 
6538
  g_assert_cmpint(unlink(question_filename1), ==, 0);
 
6539
  g_assert_cmpint(unlink(question_filename2), ==, 0);
 
6540
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6541
}
 
6542
 
 
6543
static void
 
6544
test_add_existing_questions_non_questions(__attribute__((unused))
 
6545
                                          test_fixture *fixture,
 
6546
                                          __attribute__((unused))
 
6547
                                          gconstpointer user_data){
 
6548
  __attribute__((cleanup(cleanup_queue)))
 
6549
    task_queue *queue = create_queue();
 
6550
  g_assert_nonnull(queue);
 
6551
  __attribute__((cleanup(cleanup_close)))
 
6552
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6553
  g_assert_cmpint(epoll_fd, >=, 0);
 
6554
  __attribute__((cleanup(string_set_clear)))
 
6555
    string_set cancelled_filenames = {};
 
6556
  __attribute__((cleanup(cleanup_string)))
 
6557
    char *tempdir = make_temporary_directory();
 
6558
  g_assert_nonnull(tempdir);
 
6559
  __attribute__((cleanup(cleanup_string)))
 
6560
    char *question_filename1
 
6561
    = make_temporary_file_in_directory(tempdir);
 
6562
  g_assert_nonnull(question_filename1);
 
6563
  __attribute__((cleanup(cleanup_string)))
 
6564
    char *question_filename2
 
6565
    = make_temporary_file_in_directory(tempdir);
 
6566
  g_assert_nonnull(question_filename2);
 
6567
 
 
6568
  g_assert_false(assert_add_existing_questions_to_devnull
 
6569
                 (queue,
 
6570
                  epoll_fd,
 
6571
                  (buffer[]){{}}, /* password */
 
6572
                  &cancelled_filenames,
 
6573
                  (mono_microsecs[]){0}, /* current_time */
 
6574
                  (bool[]){false},       /* mandos_client_exited */
 
6575
                  (bool[]){false},       /* password_is_read */
 
6576
                  tempdir));
 
6577
 
 
6578
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6579
 
 
6580
  g_assert_cmpint(unlink(question_filename1), ==, 0);
 
6581
  g_assert_cmpint(unlink(question_filename2), ==, 0);
 
6582
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6583
}
 
6584
 
 
6585
static void
 
6586
test_add_existing_questions_both_types(__attribute__((unused))
 
6587
                                       test_fixture *fixture,
 
6588
                                       __attribute__((unused))
 
6589
                                       gconstpointer user_data){
 
6590
  __attribute__((cleanup(cleanup_queue)))
 
6591
    task_queue *queue = create_queue();
 
6592
  g_assert_nonnull(queue);
 
6593
  __attribute__((cleanup(cleanup_close)))
 
6594
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6595
  g_assert_cmpint(epoll_fd, >=, 0);
 
6596
  __attribute__((cleanup(cleanup_buffer)))
 
6597
    buffer password = {};
 
6598
  __attribute__((cleanup(string_set_clear)))
 
6599
    string_set cancelled_filenames = {};
 
6600
  const mono_microsecs current_time = 0;
 
6601
  bool mandos_client_exited = false;
 
6602
  bool password_is_read = false;
 
6603
  __attribute__((cleanup(cleanup_string)))
 
6604
    char *tempdir = make_temporary_directory();
 
6605
  g_assert_nonnull(tempdir);
 
6606
  __attribute__((cleanup(cleanup_string)))
 
6607
    char *tempfilename1 = make_temporary_file_in_directory(tempdir);
 
6608
  g_assert_nonnull(tempfilename1);
 
6609
  __attribute__((cleanup(cleanup_string)))
 
6610
    char *tempfilename2 = make_temporary_file_in_directory(tempdir);
 
6611
  g_assert_nonnull(tempfilename2);
 
6612
  __attribute__((cleanup(cleanup_string)))
 
6613
    char *question_filename
 
6614
    = make_question_file_in_directory(tempdir);
 
6615
  g_assert_nonnull(question_filename);
 
6616
 
 
6617
  g_assert_true(assert_add_existing_questions_to_devnull
 
6618
                (queue,
 
6619
                 epoll_fd,
 
6620
                 &password,
 
6621
                 &cancelled_filenames,
 
6622
                 &current_time,
 
6623
                 &mandos_client_exited,
 
6624
                 &password_is_read,
 
6625
                 tempdir));
 
6626
 
 
6627
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6628
 
 
6629
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
6630
        .func=open_and_parse_question,
 
6631
        .epoll_fd=epoll_fd,
 
6632
        .filename=question_filename,
 
6633
        .question_filename=question_filename,
 
6634
        .password=&password,
 
6635
        .cancelled_filenames=&cancelled_filenames,
 
6636
        .current_time=&current_time,
 
6637
        .mandos_client_exited=&mandos_client_exited,
 
6638
        .password_is_read=&password_is_read,
 
6639
      }));
 
6640
 
 
6641
  g_assert_true(queue->next_run == 1);
 
6642
 
 
6643
  g_assert_cmpint(unlink(tempfilename1), ==, 0);
 
6644
  g_assert_cmpint(unlink(tempfilename2), ==, 0);
 
6645
  g_assert_cmpint(unlink(question_filename), ==, 0);
 
6646
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6647
}
 
6648
 
 
6649
static void test_wait_for_event_timeout(__attribute__((unused))
 
6650
                                        test_fixture *fixture,
 
6651
                                        __attribute__((unused))
 
6652
                                        gconstpointer user_data){
 
6653
  __attribute__((cleanup(cleanup_close)))
 
6654
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6655
  g_assert_cmpint(epoll_fd, >=, 0);
 
6656
 
 
6657
  g_assert_true(wait_for_event(epoll_fd, 1, 0));
 
6658
}
 
6659
 
 
6660
static void test_wait_for_event_event(__attribute__((unused))
 
6661
                                      test_fixture *fixture,
 
6662
                                      __attribute__((unused))
 
6663
                                      gconstpointer user_data){
 
6664
  __attribute__((cleanup(cleanup_close)))
 
6665
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6666
  g_assert_cmpint(epoll_fd, >=, 0);
 
6667
  int pipefds[2];
 
6668
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6669
  __attribute__((cleanup(cleanup_close)))
 
6670
    const int read_pipe = pipefds[0];
 
6671
  __attribute__((cleanup(cleanup_close)))
 
6672
    const int write_pipe = pipefds[1];
 
6673
  g_assert_cmpint(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, read_pipe,
 
6674
                            &(struct epoll_event)
 
6675
                            { .events=EPOLLIN | EPOLLRDHUP }), ==, 0);
 
6676
  g_assert_cmpint((int)write(write_pipe, "x", 1), ==, 1);
 
6677
 
 
6678
  g_assert_true(wait_for_event(epoll_fd, 0, 0));
 
6679
}
 
6680
 
 
6681
static void test_wait_for_event_sigchld(test_fixture *fixture,
 
6682
                                        __attribute__((unused))
 
6683
                                        gconstpointer user_data){
 
6684
  const pid_t pid = fork();
 
6685
  if(pid == 0){         /* Child */
 
6686
    if(not restore_signal_handler(&fixture->orig_sigaction)){
 
6687
      _exit(EXIT_FAILURE);
 
6688
    }
 
6689
    if(not restore_sigmask(&fixture->orig_sigmask)){
 
6690
      _exit(EXIT_FAILURE);
 
6691
    }
 
6692
    exit(EXIT_SUCCESS);
 
6693
  }
 
6694
  g_assert_true(pid != -1);
 
6695
  __attribute__((cleanup(cleanup_close)))
 
6696
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6697
  g_assert_cmpint(epoll_fd, >=, 0);
 
6698
 
 
6699
  g_assert_true(wait_for_event(epoll_fd, 0, 0));
 
6700
 
 
6701
  int status;
 
6702
  g_assert_true(waitpid(pid, &status, 0) == pid);
 
6703
  g_assert_true(WIFEXITED(status));
 
6704
  g_assert_cmpint(WEXITSTATUS(status), ==, EXIT_SUCCESS);
 
6705
}
 
6706
 
 
6707
static void test_run_queue_zeroes_next_run(__attribute__((unused))
 
6708
                                           test_fixture *fixture,
 
6709
                                           __attribute__((unused))
 
6710
                                           gconstpointer user_data){
 
6711
  __attribute__((cleanup(cleanup_queue)))
 
6712
    task_queue *queue = create_queue();
 
6713
  g_assert_nonnull(queue);
 
6714
  queue->next_run = 1;
 
6715
  __attribute__((cleanup(cleanup_close)))
 
6716
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6717
  __attribute__((cleanup(string_set_clear)))
 
6718
    string_set cancelled_filenames = {};
 
6719
  bool quit_now = false;
 
6720
 
 
6721
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6722
  g_assert_false(quit_now);
 
6723
  g_assert_cmpuint((unsigned int)queue->next_run, ==, 0);
 
6724
}
 
6725
 
 
6726
static
 
6727
void test_run_queue_clears_cancelled_filenames(__attribute__((unused))
 
6728
                                               test_fixture *fixture,
 
6729
                                               __attribute__((unused))
 
6730
                                               gconstpointer
 
6731
                                               user_data){
 
6732
  __attribute__((cleanup(cleanup_queue)))
 
6733
    task_queue *queue = create_queue();
 
6734
  g_assert_nonnull(queue);
 
6735
  __attribute__((cleanup(string_set_clear)))
 
6736
    string_set cancelled_filenames = {};
 
6737
  bool quit_now = false;
 
6738
  const char question_filename[] = "/nonexistent/question_filename";
 
6739
  g_assert_true(string_set_add(&cancelled_filenames,
 
6740
                               question_filename));
 
6741
 
 
6742
  g_assert_true(add_to_queue(queue,
 
6743
                             (task_context){ .func=dummy_func }));
 
6744
 
 
6745
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6746
  g_assert_false(quit_now);
 
6747
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6748
  g_assert_false(string_set_contains(cancelled_filenames,
 
6749
                                     question_filename));
 
6750
}
 
6751
 
 
6752
static
 
6753
void test_run_queue_skips_cancelled_filenames(__attribute__((unused))
 
6754
                                              test_fixture *fixture,
 
6755
                                              __attribute__((unused))
 
6756
                                              gconstpointer
 
6757
                                              user_data){
 
6758
  __attribute__((cleanup(cleanup_queue)))
 
6759
    task_queue *queue = create_queue();
 
6760
  g_assert_nonnull(queue);
 
6761
  __attribute__((cleanup(string_set_clear)))
 
6762
    string_set cancelled_filenames = {};
 
6763
  bool quit_now = false;
 
6764
  int pipefds[2];
 
6765
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6766
  __attribute__((cleanup(cleanup_close)))
 
6767
    const int read_pipe = pipefds[0];
 
6768
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
6769
  const char question_filename[] = "/nonexistent/question_filename";
 
6770
  g_assert_true(string_set_add(&cancelled_filenames,
 
6771
                               question_filename));
 
6772
  __attribute__((nonnull))
 
6773
    void quit_func(const task_context task,
 
6774
                   __attribute__((unused)) task_queue *const q){
 
6775
    g_assert_nonnull(task.quit_now);
 
6776
    *task.quit_now = true;
 
6777
  }
 
6778
  task_context task = {
 
6779
    .func=quit_func,
 
6780
    .question_filename=strdup(question_filename),
 
6781
    .quit_now=&quit_now,
 
6782
    .fd=read_pipe,
 
6783
  };
 
6784
  g_assert_nonnull(task.question_filename);
 
6785
 
 
6786
  g_assert_true(add_to_queue(queue, task));
 
6787
 
 
6788
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6789
  g_assert_false(quit_now);
 
6790
 
 
6791
  /* read_pipe should be closed already */
 
6792
  errno = 0;
 
6793
  bool read_pipe_closed = (close(read_pipe) == -1);
 
6794
  read_pipe_closed &= (errno == EBADF);
 
6795
  g_assert_true(read_pipe_closed);
 
6796
}
 
6797
 
 
6798
static void test_run_queue_one_task(__attribute__((unused))
 
6799
                                    test_fixture *fixture,
 
6800
                                    __attribute__((unused))
 
6801
                                    gconstpointer user_data){
 
6802
  __attribute__((cleanup(cleanup_queue)))
 
6803
    task_queue *queue = create_queue();
 
6804
  g_assert_nonnull(queue);
 
6805
  __attribute__((cleanup(string_set_clear)))
 
6806
    string_set cancelled_filenames = {};
 
6807
  bool quit_now = false;
 
6808
 
 
6809
  __attribute__((nonnull))
 
6810
    void next_run_func(__attribute__((unused))
 
6811
                       const task_context task,
 
6812
                       task_queue *const q){
 
6813
    q->next_run = 1;
 
6814
  }
 
6815
 
 
6816
  task_context task = {
 
6817
    .func=next_run_func,
 
6818
  };
 
6819
  g_assert_true(add_to_queue(queue, task));
 
6820
 
 
6821
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6822
  g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
 
6823
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6824
}
 
6825
 
 
6826
static void test_run_queue_two_tasks(__attribute__((unused))
 
6827
                                     test_fixture *fixture,
 
6828
                                     __attribute__((unused))
 
6829
                                     gconstpointer user_data){
 
6830
  __attribute__((cleanup(cleanup_queue)))
 
6831
    task_queue *queue = create_queue();
 
6832
  g_assert_nonnull(queue);
 
6833
  queue->next_run = 1;
 
6834
  __attribute__((cleanup(string_set_clear)))
 
6835
    string_set cancelled_filenames = {};
 
6836
  bool quit_now = false;
 
6837
  bool mandos_client_exited = false;
 
6838
 
 
6839
  __attribute__((nonnull))
 
6840
    void next_run_func(__attribute__((unused))
 
6841
                       const task_context task,
 
6842
                       task_queue *const q){
 
6843
    q->next_run = 1;
 
6844
  }
 
6845
 
 
6846
  __attribute__((nonnull))
 
6847
    void exited_func(const task_context task,
 
6848
                     __attribute__((unused)) task_queue *const q){
 
6849
    *task.mandos_client_exited = true;
 
6850
  }
 
6851
 
 
6852
  task_context task1 = {
 
6853
    .func=next_run_func,
 
6854
  };
 
6855
  g_assert_true(add_to_queue(queue, task1));
 
6856
 
 
6857
  task_context task2 = {
 
6858
    .func=exited_func,
 
6859
    .mandos_client_exited=&mandos_client_exited,
 
6860
  };
 
6861
  g_assert_true(add_to_queue(queue, task2));
 
6862
 
 
6863
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6864
  g_assert_false(quit_now);
 
6865
  g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
 
6866
  g_assert_true(mandos_client_exited);
 
6867
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6868
}
 
6869
 
 
6870
static void test_run_queue_two_tasks_quit(__attribute__((unused))
 
6871
                                          test_fixture *fixture,
 
6872
                                          __attribute__((unused))
 
6873
                                          gconstpointer user_data){
 
6874
  __attribute__((cleanup(cleanup_queue)))
 
6875
    task_queue *queue = create_queue();
 
6876
  g_assert_nonnull(queue);
 
6877
  __attribute__((cleanup(string_set_clear)))
 
6878
    string_set cancelled_filenames = {};
 
6879
  bool quit_now = false;
 
6880
  bool mandos_client_exited = false;
 
6881
  bool password_is_read = false;
 
6882
 
 
6883
  __attribute__((nonnull))
 
6884
    void set_exited_func(const task_context task,
 
6885
                         __attribute__((unused)) task_queue *const q){
 
6886
    *task.mandos_client_exited = true;
 
6887
    *task.quit_now = true;
 
6888
  }
 
6889
  task_context task1 = {
 
6890
    .func=set_exited_func,
 
6891
    .quit_now=&quit_now,
 
6892
    .mandos_client_exited=&mandos_client_exited,
 
6893
  };
 
6894
  g_assert_true(add_to_queue(queue, task1));
 
6895
 
 
6896
  __attribute__((nonnull))
 
6897
    void set_read_func(const task_context task,
 
6898
                       __attribute__((unused)) task_queue *const q){
 
6899
    *task.quit_now = true;
 
6900
    *task.password_is_read = true;
 
6901
  }
 
6902
  task_context task2 = {
 
6903
    .func=set_read_func,
 
6904
    .quit_now=&quit_now,
 
6905
    .password_is_read=&password_is_read,
 
6906
  };
 
6907
  g_assert_true(add_to_queue(queue, task2));
 
6908
 
 
6909
  g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6910
  g_assert_true(quit_now);
 
6911
  g_assert_true(mandos_client_exited xor password_is_read);
 
6912
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6913
}
 
6914
 
 
6915
static void test_run_queue_two_tasks_cleanup(__attribute__((unused))
 
6916
                                             test_fixture *fixture,
 
6917
                                             __attribute__((unused))
 
6918
                                             gconstpointer user_data){
 
6919
  __attribute__((cleanup(cleanup_queue)))
 
6920
    task_queue *queue = create_queue();
 
6921
  g_assert_nonnull(queue);
 
6922
  __attribute__((cleanup(string_set_clear)))
 
6923
    string_set cancelled_filenames = {};
 
6924
  int pipefds[2];
 
6925
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6926
  __attribute__((cleanup(cleanup_close)))
 
6927
    const int read_pipe = pipefds[0];
 
6928
  __attribute__((cleanup(cleanup_close)))
 
6929
    const int write_pipe = pipefds[1];
 
6930
  bool quit_now = false;
 
6931
 
 
6932
  __attribute__((nonnull))
 
6933
    void read_func(const task_context task,
 
6934
                   __attribute__((unused)) task_queue *const q){
 
6935
    *task.quit_now = true;
 
6936
  }
 
6937
  task_context task1 = {
 
6938
    .func=read_func,
 
6939
    .quit_now=&quit_now,
 
6940
    .fd=read_pipe,
 
6941
  };
 
6942
  g_assert_true(add_to_queue(queue, task1));
 
6943
 
 
6944
  __attribute__((nonnull))
 
6945
    void write_func(const task_context task,
 
6946
                    __attribute__((unused)) task_queue *const q){
 
6947
    *task.quit_now = true;
 
6948
  }
 
6949
  task_context task2 = {
 
6950
    .func=write_func,
 
6951
    .quit_now=&quit_now,
 
6952
    .fd=write_pipe,
 
6953
  };
 
6954
  g_assert_true(add_to_queue(queue, task2));
 
6955
 
 
6956
  g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6957
  g_assert_true(quit_now);
 
6958
 
 
6959
  /* Either read_pipe or write_pipe should be closed already */
 
6960
  errno = 0;
 
6961
  bool close_read_pipe = (close(read_pipe) == -1);
 
6962
  close_read_pipe &= (errno == EBADF);
 
6963
  errno = 0;
 
6964
  bool close_write_pipe = (close(write_pipe) == -1);
 
6965
  close_write_pipe &= (errno == EBADF);
 
6966
  g_assert_true(close_read_pipe xor close_write_pipe);
 
6967
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6968
}
 
6969
 
 
6970
static void test_setup_signal_handler(__attribute__((unused))
 
6971
                                      test_fixture *fixture,
 
6972
                                      __attribute__((unused))
 
6973
                                      gconstpointer user_data){
 
6974
  /* Save current SIGCHLD action, whatever it is */
 
6975
  struct sigaction expected_sigchld_action;
 
6976
  g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
 
6977
                  ==, 0);
 
6978
 
 
6979
  /* Act; i.e. run the setup_signal_handler() function */
 
6980
  struct sigaction actual_old_sigchld_action;
 
6981
  g_assert_true(setup_signal_handler(&actual_old_sigchld_action));
 
6982
 
 
6983
  /* Check that the function correctly set "actual_old_sigchld_action"
 
6984
     to the same values as the previously saved
 
6985
     "expected_sigchld_action" */
 
6986
  /* Check member sa_handler */
 
6987
  g_assert_true(actual_old_sigchld_action.sa_handler
 
6988
                == expected_sigchld_action.sa_handler);
 
6989
  /* Check member sa_mask */
 
6990
  for(int signum = 1; signum < NSIG; signum++){
 
6991
    const int expected_old_block_state
 
6992
      = sigismember(&expected_sigchld_action.sa_mask, signum);
 
6993
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
6994
    const int actual_old_block_state
 
6995
      = sigismember(&actual_old_sigchld_action.sa_mask, signum);
 
6996
    g_assert_cmpint(actual_old_block_state, >=, 0);
 
6997
    g_assert_cmpint(actual_old_block_state,
 
6998
                    ==, expected_old_block_state);
 
6999
  }
 
7000
  /* Check member sa_flags */
 
7001
  g_assert_true((actual_old_sigchld_action.sa_flags
 
7002
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
7003
                == (expected_sigchld_action.sa_flags
 
7004
                    & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
 
7005
 
 
7006
  /* Retrieve the current signal handler for SIGCHLD as set by
 
7007
     setup_signal_handler() */
 
7008
  struct sigaction actual_new_sigchld_action;
 
7009
  g_assert_cmpint(sigaction(SIGCHLD, NULL,
 
7010
                            &actual_new_sigchld_action), ==, 0);
 
7011
  /* Check that the signal handler (member sa_handler) is correctly
 
7012
     set to the "handle_sigchld" function */
 
7013
  g_assert_true(actual_new_sigchld_action.sa_handler != SIG_DFL);
 
7014
  g_assert_true(actual_new_sigchld_action.sa_handler != SIG_IGN);
 
7015
  g_assert_true(actual_new_sigchld_action.sa_handler
 
7016
                == handle_sigchld);
 
7017
  /* Check (in member sa_mask) that at least a handful of signals are
 
7018
     actually blocked during the signal handler */
 
7019
  for(int signum = 1; signum < NSIG; signum++){
 
7020
    int actual_new_block_state;
 
7021
    switch(signum){
 
7022
    case SIGTERM:
 
7023
    case SIGINT:
 
7024
    case SIGQUIT:
 
7025
    case SIGHUP:
 
7026
      actual_new_block_state
 
7027
        = sigismember(&actual_new_sigchld_action.sa_mask, signum);
 
7028
      g_assert_cmpint(actual_new_block_state, ==, 1);
 
7029
      continue;
 
7030
    case SIGKILL:               /* non-blockable */
 
7031
    case SIGSTOP:               /* non-blockable */
 
7032
    case SIGCHLD:               /* always blocked */
 
7033
    default:
 
7034
      continue;
 
7035
    }
 
7036
  }
 
7037
  /* Check member sa_flags */
 
7038
  g_assert_true((actual_new_sigchld_action.sa_flags
 
7039
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
7040
                == (SA_NOCLDSTOP | SA_RESTART));
 
7041
 
 
7042
  /* Restore signal handler */
 
7043
  g_assert_cmpint(sigaction(SIGCHLD, &expected_sigchld_action, NULL),
 
7044
                  ==, 0);
 
7045
}
 
7046
 
 
7047
static void test_restore_signal_handler(__attribute__((unused))
 
7048
                                        test_fixture *fixture,
 
7049
                                        __attribute__((unused))
 
7050
                                        gconstpointer user_data){
 
7051
  /* Save current SIGCHLD action, whatever it is */
 
7052
  struct sigaction expected_sigchld_action;
 
7053
  g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
 
7054
                  ==, 0);
 
7055
  /* Since we haven't established a signal handler yet, there should
 
7056
     not be one established.  But another test may have relied on
 
7057
     restore_signal_handler() to restore the signal handler, and if
 
7058
     restore_signal_handler() is buggy (which we should be prepared
 
7059
     for in this test) the signal handler may not have been restored
 
7060
     properly; check for this: */
 
7061
  g_assert_true(expected_sigchld_action.sa_handler != handle_sigchld);
 
7062
 
 
7063
  /* Establish a signal handler */
 
7064
  struct sigaction sigchld_action = {
 
7065
    .sa_handler=handle_sigchld,
 
7066
    .sa_flags=SA_RESTART | SA_NOCLDSTOP,
 
7067
  };
 
7068
  g_assert_cmpint(sigfillset(&sigchld_action.sa_mask), ==, 0);
 
7069
  g_assert_cmpint(sigaction(SIGCHLD, &sigchld_action, NULL), ==, 0);
 
7070
 
 
7071
  /* Act; i.e. run the restore_signal_handler() function */
 
7072
  g_assert_true(restore_signal_handler(&expected_sigchld_action));
 
7073
 
 
7074
  /* Retrieve the restored signal handler data */
 
7075
  struct sigaction actual_restored_sigchld_action;
 
7076
  g_assert_cmpint(sigaction(SIGCHLD, NULL,
 
7077
                            &actual_restored_sigchld_action), ==, 0);
 
7078
 
 
7079
  /* Check that the function correctly restored the signal action, as
 
7080
     saved in "actual_restored_sigchld_action", to the same values as
 
7081
     the previously saved "expected_sigchld_action" */
 
7082
  /* Check member sa_handler */
 
7083
  g_assert_true(actual_restored_sigchld_action.sa_handler
 
7084
                == expected_sigchld_action.sa_handler);
 
7085
  /* Check member sa_mask */
 
7086
  for(int signum = 1; signum < NSIG; signum++){
 
7087
    const int expected_old_block_state
 
7088
      = sigismember(&expected_sigchld_action.sa_mask, signum);
 
7089
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
7090
    const int actual_restored_block_state
 
7091
      = sigismember(&actual_restored_sigchld_action.sa_mask, signum);
 
7092
    g_assert_cmpint(actual_restored_block_state, >=, 0);
 
7093
    g_assert_cmpint(actual_restored_block_state,
 
7094
                    ==, expected_old_block_state);
 
7095
  }
 
7096
  /* Check member sa_flags */
 
7097
  g_assert_true((actual_restored_sigchld_action.sa_flags
 
7098
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
7099
                == (expected_sigchld_action.sa_flags
 
7100
                    & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
 
7101
}
 
7102
 
 
7103
static void test_block_sigchld(__attribute__((unused))
 
7104
                               test_fixture *fixture,
 
7105
                               __attribute__((unused))
 
7106
                               gconstpointer user_data){
 
7107
  /* Save original signal mask */
 
7108
  sigset_t expected_sigmask;
 
7109
  g_assert_cmpint(pthread_sigmask(-1, NULL, &expected_sigmask),
 
7110
                  ==, 0);
 
7111
 
 
7112
  /* Make sure SIGCHLD is unblocked for this test */
 
7113
  sigset_t sigchld_sigmask;
 
7114
  g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
 
7115
  g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
 
7116
  g_assert_cmpint(pthread_sigmask(SIG_UNBLOCK, &sigchld_sigmask,
 
7117
                                  NULL), ==, 0);
 
7118
 
 
7119
  /* Act; i.e. run the block_sigchld() function */
 
7120
  sigset_t actual_old_sigmask;
 
7121
  g_assert_true(block_sigchld(&actual_old_sigmask));
 
7122
 
 
7123
  /* Check the actual_old_sigmask; it should be the same as the
 
7124
     previously saved signal mask "expected_sigmask". */
 
7125
  for(int signum = 1; signum < NSIG; signum++){
 
7126
    const int expected_old_block_state
 
7127
      = sigismember(&expected_sigmask, signum);
 
7128
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
7129
    const int actual_old_block_state
 
7130
      = sigismember(&actual_old_sigmask, signum);
 
7131
    g_assert_cmpint(actual_old_block_state, >=, 0);
 
7132
    g_assert_cmpint(actual_old_block_state,
 
7133
                    ==, expected_old_block_state);
 
7134
  }
 
7135
 
 
7136
  /* Retrieve the newly set signal mask */
 
7137
  sigset_t actual_sigmask;
 
7138
  g_assert_cmpint(pthread_sigmask(-1, NULL, &actual_sigmask), ==, 0);
 
7139
 
 
7140
  /* SIGCHLD should be blocked */
 
7141
  g_assert_cmpint(sigismember(&actual_sigmask, SIGCHLD), ==, 1);
 
7142
 
 
7143
  /* Restore signal mask */
 
7144
  g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &expected_sigmask,
 
7145
                                  NULL), ==, 0);
 
7146
}
 
7147
 
 
7148
static void test_restore_sigmask(__attribute__((unused))
 
7149
                                 test_fixture *fixture,
 
7150
                                 __attribute__((unused))
 
7151
                                 gconstpointer user_data){
 
7152
  /* Save original signal mask */
 
7153
  sigset_t orig_sigmask;
 
7154
  g_assert_cmpint(pthread_sigmask(-1, NULL, &orig_sigmask), ==, 0);
 
7155
 
 
7156
  /* Make sure SIGCHLD is blocked for this test */
 
7157
  sigset_t sigchld_sigmask;
 
7158
  g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
 
7159
  g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
 
7160
  g_assert_cmpint(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask,
 
7161
                                  NULL), ==, 0);
 
7162
 
 
7163
  /* Act; i.e. run the restore_sigmask() function */
 
7164
  g_assert_true(restore_sigmask(&orig_sigmask));
 
7165
 
 
7166
  /* Retrieve the newly restored signal mask */
 
7167
  sigset_t restored_sigmask;
 
7168
  g_assert_cmpint(pthread_sigmask(-1, NULL, &restored_sigmask),
 
7169
                  ==, 0);
 
7170
 
 
7171
  /* Check the restored_sigmask; it should be the same as the
 
7172
     previously saved signal mask "orig_sigmask". */
 
7173
  for(int signum = 1; signum < NSIG; signum++){
 
7174
    const int orig_block_state = sigismember(&orig_sigmask, signum);
 
7175
    g_assert_cmpint(orig_block_state, >=, 0);
 
7176
    const int restored_block_state = sigismember(&restored_sigmask,
 
7177
                                                 signum);
 
7178
    g_assert_cmpint(restored_block_state, >=, 0);
 
7179
    g_assert_cmpint(restored_block_state, ==, orig_block_state);
 
7180
  }
 
7181
 
 
7182
  /* Restore signal mask */
 
7183
  g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &orig_sigmask,
 
7184
                                  NULL), ==, 0);
 
7185
}
 
7186
 
 
7187
static void test_parse_arguments_noargs(__attribute__((unused))
 
7188
                                        test_fixture *fixture,
 
7189
                                        __attribute__((unused))
 
7190
                                        gconstpointer user_data){
 
7191
  char *argv[] = {
 
7192
    strdup("prgname"),
 
7193
    NULL };
 
7194
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7195
 
 
7196
  char *agent_directory = NULL;
 
7197
  char *helper_directory = NULL;
 
7198
  uid_t user = 0;
 
7199
  gid_t group = 0;
 
7200
  char *mandos_argz = NULL;
 
7201
  size_t mandos_argz_length = 0;
 
7202
 
 
7203
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7204
                                &helper_directory, &user, &group,
 
7205
                                &mandos_argz, &mandos_argz_length));
 
7206
  g_assert_null(agent_directory);
 
7207
  g_assert_null(helper_directory);
 
7208
  g_assert_true(user == 0);
 
7209
  g_assert_true(group == 0);
 
7210
  g_assert_null(mandos_argz);
 
7211
  g_assert_true(mandos_argz_length == 0);
 
7212
 
 
7213
  for(char **arg = argv; *arg != NULL; arg++){
 
7214
    free(*arg);
 
7215
  }
 
7216
}
 
7217
 
 
7218
__attribute__((nonnull))
 
7219
static bool parse_arguments_devnull(int argc, char *argv[],
 
7220
                                    const bool exit_failure,
 
7221
                                    char **agent_directory,
 
7222
                                    char **helper_directory,
 
7223
                                    uid_t *const user,
 
7224
                                    gid_t *const group,
 
7225
                                    char **mandos_argz,
 
7226
                                    size_t *mandos_argz_length){
 
7227
 
 
7228
  FILE *real_stderr = stderr;
 
7229
  FILE *devnull = fopen("/dev/null", "we");
 
7230
  g_assert_nonnull(devnull);
 
7231
  stderr = devnull;
 
7232
 
 
7233
  const bool ret = parse_arguments(argc, argv, exit_failure,
 
7234
                                   agent_directory,
 
7235
                                   helper_directory, user, group,
 
7236
                                   mandos_argz, mandos_argz_length);
 
7237
  const error_t saved_errno = errno;
 
7238
 
 
7239
  stderr = real_stderr;
 
7240
  g_assert_cmpint(fclose(devnull), ==, 0);
 
7241
 
 
7242
  errno = saved_errno;
 
7243
 
 
7244
  return ret;
 
7245
}
 
7246
 
 
7247
static void test_parse_arguments_invalid(__attribute__((unused))
 
7248
                                         test_fixture *fixture,
 
7249
                                         __attribute__((unused))
 
7250
                                         gconstpointer user_data){
 
7251
  char *argv[] = {
 
7252
    strdup("prgname"),
 
7253
    strdup("--invalid"),
 
7254
    NULL };
 
7255
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7256
 
 
7257
  char *agent_directory = NULL;
 
7258
  char *helper_directory = NULL;
 
7259
  uid_t user = 0;
 
7260
  gid_t group = 0;
 
7261
  char *mandos_argz = NULL;
 
7262
  size_t mandos_argz_length = 0;
 
7263
 
 
7264
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7265
                                         &agent_directory,
 
7266
                                         &helper_directory, &user,
 
7267
                                         &group, &mandos_argz,
 
7268
                                         &mandos_argz_length));
 
7269
 
 
7270
  g_assert_true(errno == EINVAL);
 
7271
  g_assert_null(agent_directory);
 
7272
  g_assert_null(helper_directory);
 
7273
  g_assert_null(mandos_argz);
 
7274
  g_assert_true(mandos_argz_length == 0);
 
7275
 
 
7276
  for(char **arg = argv; *arg != NULL; arg++){
 
7277
    free(*arg);
 
7278
  }
 
7279
}
 
7280
 
 
7281
static void test_parse_arguments_long_dir(__attribute__((unused))
 
7282
                                          test_fixture *fixture,
 
7283
                                          __attribute__((unused))
 
7284
                                          gconstpointer user_data){
 
7285
  char *argv[] = {
 
7286
    strdup("prgname"),
 
7287
    strdup("--agent-directory"),
 
7288
    strdup("/tmp"),
 
7289
    NULL };
 
7290
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7291
 
 
7292
  __attribute__((cleanup(cleanup_string)))
 
7293
    char *agent_directory = NULL;
 
7294
  char *helper_directory = NULL;
 
7295
  uid_t user = 0;
 
7296
  gid_t group = 0;
 
7297
  __attribute__((cleanup(cleanup_string)))
 
7298
    char *mandos_argz = NULL;
 
7299
  size_t mandos_argz_length = 0;
 
7300
 
 
7301
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7302
                                &helper_directory, &user, &group,
 
7303
                                &mandos_argz, &mandos_argz_length));
 
7304
 
 
7305
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7306
  g_assert_null(helper_directory);
 
7307
  g_assert_true(user == 0);
 
7308
  g_assert_true(group == 0);
 
7309
  g_assert_null(mandos_argz);
 
7310
  g_assert_true(mandos_argz_length == 0);
 
7311
 
 
7312
  for(char **arg = argv; *arg != NULL; arg++){
 
7313
    free(*arg);
 
7314
  }
 
7315
}
 
7316
 
 
7317
static void test_parse_arguments_short_dir(__attribute__((unused))
 
7318
                                           test_fixture *fixture,
 
7319
                                           __attribute__((unused))
 
7320
                                           gconstpointer user_data){
 
7321
  char *argv[] = {
 
7322
    strdup("prgname"),
 
7323
    strdup("-d"),
 
7324
    strdup("/tmp"),
 
7325
    NULL };
 
7326
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7327
 
 
7328
  __attribute__((cleanup(cleanup_string)))
 
7329
    char *agent_directory = NULL;
 
7330
  char *helper_directory = NULL;
 
7331
  uid_t user = 0;
 
7332
  gid_t group = 0;
 
7333
  __attribute__((cleanup(cleanup_string)))
 
7334
    char *mandos_argz = NULL;
 
7335
  size_t mandos_argz_length = 0;
 
7336
 
 
7337
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7338
                                &helper_directory, &user, &group,
 
7339
                                &mandos_argz, &mandos_argz_length));
 
7340
 
 
7341
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7342
  g_assert_null(helper_directory);
 
7343
  g_assert_true(user == 0);
 
7344
  g_assert_true(group == 0);
 
7345
  g_assert_null(mandos_argz);
 
7346
  g_assert_true(mandos_argz_length == 0);
 
7347
 
 
7348
  for(char **arg = argv; *arg != NULL; arg++){
 
7349
    free(*arg);
 
7350
  }
 
7351
}
 
7352
 
 
7353
static
 
7354
void test_parse_arguments_helper_directory(__attribute__((unused))
 
7355
                                           test_fixture *fixture,
 
7356
                                           __attribute__((unused))
 
7357
                                           gconstpointer user_data){
 
7358
  char *argv[] = {
 
7359
    strdup("prgname"),
 
7360
    strdup("--helper-directory"),
 
7361
    strdup("/tmp"),
 
7362
    NULL };
 
7363
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7364
 
 
7365
  char *agent_directory = NULL;
 
7366
  __attribute__((cleanup(cleanup_string)))
 
7367
    char *helper_directory = NULL;
 
7368
  uid_t user = 0;
 
7369
  gid_t group = 0;
 
7370
  __attribute__((cleanup(cleanup_string)))
 
7371
    char *mandos_argz = NULL;
 
7372
  size_t mandos_argz_length = 0;
 
7373
 
 
7374
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7375
                                &helper_directory, &user, &group,
 
7376
                                &mandos_argz, &mandos_argz_length));
 
7377
 
 
7378
  g_assert_cmpstr(helper_directory, ==, "/tmp");
 
7379
  g_assert_null(agent_directory);
 
7380
  g_assert_true(user == 0);
 
7381
  g_assert_true(group == 0);
 
7382
  g_assert_null(mandos_argz);
 
7383
  g_assert_true(mandos_argz_length == 0);
 
7384
 
 
7385
  for(char **arg = argv; *arg != NULL; arg++){
 
7386
    free(*arg);
 
7387
  }
 
7388
}
 
7389
 
 
7390
static
 
7391
void test_parse_arguments_plugin_helper_dir(__attribute__((unused))
 
7392
                                            test_fixture *fixture,
 
7393
                                            __attribute__((unused))
 
7394
                                            gconstpointer user_data){
 
7395
  char *argv[] = {
 
7396
    strdup("prgname"),
 
7397
    strdup("--plugin-helper-dir"),
 
7398
    strdup("/tmp"),
 
7399
    NULL };
 
7400
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7401
 
 
7402
  char *agent_directory = NULL;
 
7403
  __attribute__((cleanup(cleanup_string)))
 
7404
    char *helper_directory = NULL;
 
7405
  uid_t user = 0;
 
7406
  gid_t group = 0;
 
7407
  __attribute__((cleanup(cleanup_string)))
 
7408
    char *mandos_argz = NULL;
 
7409
  size_t mandos_argz_length = 0;
 
7410
 
 
7411
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7412
                                &helper_directory, &user, &group,
 
7413
                                &mandos_argz, &mandos_argz_length));
 
7414
 
 
7415
  g_assert_cmpstr(helper_directory, ==, "/tmp");
 
7416
  g_assert_null(agent_directory);
 
7417
  g_assert_true(user == 0);
 
7418
  g_assert_true(group == 0);
 
7419
  g_assert_null(mandos_argz);
 
7420
  g_assert_true(mandos_argz_length == 0);
 
7421
 
 
7422
  for(char **arg = argv; *arg != NULL; arg++){
 
7423
    free(*arg);
 
7424
  }
 
7425
}
 
7426
 
 
7427
static void test_parse_arguments_user(__attribute__((unused))
 
7428
                                      test_fixture *fixture,
 
7429
                                      __attribute__((unused))
 
7430
                                      gconstpointer user_data){
 
7431
  char *argv[] = {
 
7432
    strdup("prgname"),
 
7433
    strdup("--user"),
 
7434
    strdup("1000"),
 
7435
    NULL };
 
7436
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7437
 
 
7438
  char *agent_directory = NULL;
 
7439
  __attribute__((cleanup(cleanup_string)))
 
7440
    char *helper_directory = NULL;
 
7441
  uid_t user = 0;
 
7442
  gid_t group = 0;
 
7443
  __attribute__((cleanup(cleanup_string)))
 
7444
    char *mandos_argz = NULL;
 
7445
  size_t mandos_argz_length = 0;
 
7446
 
 
7447
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7448
                                &helper_directory, &user, &group,
 
7449
                                &mandos_argz, &mandos_argz_length));
 
7450
 
 
7451
  g_assert_null(helper_directory);
 
7452
  g_assert_null(agent_directory);
 
7453
  g_assert_cmpuint((unsigned int)user, ==, 1000);
 
7454
  g_assert_true(group == 0);
 
7455
  g_assert_null(mandos_argz);
 
7456
  g_assert_true(mandos_argz_length == 0);
 
7457
 
 
7458
  for(char **arg = argv; *arg != NULL; arg++){
 
7459
    free(*arg);
 
7460
  }
 
7461
}
 
7462
 
 
7463
static void test_parse_arguments_user_invalid(__attribute__((unused))
 
7464
                                              test_fixture *fixture,
 
7465
                                              __attribute__((unused))
 
7466
                                              gconstpointer
 
7467
                                              user_data){
 
7468
  char *argv[] = {
 
7469
    strdup("prgname"),
 
7470
    strdup("--user"),
 
7471
    strdup("invalid"),
 
7472
    NULL };
 
7473
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7474
 
 
7475
  char *agent_directory = NULL;
 
7476
  __attribute__((cleanup(cleanup_string)))
 
7477
    char *helper_directory = NULL;
 
7478
  uid_t user = 0;
 
7479
  gid_t group = 0;
 
7480
  __attribute__((cleanup(cleanup_string)))
 
7481
    char *mandos_argz = NULL;
 
7482
  size_t mandos_argz_length = 0;
 
7483
 
 
7484
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7485
                                         &agent_directory,
 
7486
                                         &helper_directory, &user,
 
7487
                                         &group, &mandos_argz,
 
7488
                                         &mandos_argz_length));
 
7489
 
 
7490
  g_assert_null(helper_directory);
 
7491
  g_assert_null(agent_directory);
 
7492
  g_assert_cmpuint((unsigned int)user, ==, 0);
 
7493
  g_assert_true(group == 0);
 
7494
  g_assert_null(mandos_argz);
 
7495
  g_assert_true(mandos_argz_length == 0);
 
7496
 
 
7497
  for(char **arg = argv; *arg != NULL; arg++){
 
7498
    free(*arg);
 
7499
  }
 
7500
}
 
7501
 
 
7502
static
 
7503
void test_parse_arguments_user_zero_invalid(__attribute__((unused))
 
7504
                                            test_fixture *fixture,
 
7505
                                            __attribute__((unused))
 
7506
                                            gconstpointer user_data){
 
7507
  char *argv[] = {
 
7508
    strdup("prgname"),
 
7509
    strdup("--user"),
 
7510
    strdup("0"),
 
7511
    NULL };
 
7512
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7513
 
 
7514
  char *agent_directory = NULL;
 
7515
  __attribute__((cleanup(cleanup_string)))
 
7516
    char *helper_directory = NULL;
 
7517
  uid_t user = 0;
 
7518
  gid_t group = 0;
 
7519
  __attribute__((cleanup(cleanup_string)))
 
7520
    char *mandos_argz = NULL;
 
7521
  size_t mandos_argz_length = 0;
 
7522
 
 
7523
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7524
                                         &agent_directory,
 
7525
                                         &helper_directory, &user,
 
7526
                                         &group, &mandos_argz,
 
7527
                                         &mandos_argz_length));
 
7528
 
 
7529
  g_assert_null(helper_directory);
 
7530
  g_assert_null(agent_directory);
 
7531
  g_assert_cmpuint((unsigned int)user, ==, 0);
 
7532
  g_assert_true(group == 0);
 
7533
  g_assert_null(mandos_argz);
 
7534
  g_assert_true(mandos_argz_length == 0);
 
7535
 
 
7536
  for(char **arg = argv; *arg != NULL; arg++){
 
7537
    free(*arg);
 
7538
  }
 
7539
}
 
7540
 
 
7541
static void test_parse_arguments_group(__attribute__((unused))
 
7542
                                       test_fixture *fixture,
 
7543
                                       __attribute__((unused))
 
7544
                                       gconstpointer user_data){
 
7545
  char *argv[] = {
 
7546
    strdup("prgname"),
 
7547
    strdup("--group"),
 
7548
    strdup("1000"),
 
7549
    NULL };
 
7550
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7551
 
 
7552
  char *agent_directory = NULL;
 
7553
  __attribute__((cleanup(cleanup_string)))
 
7554
    char *helper_directory = NULL;
 
7555
  uid_t user = 0;
 
7556
  gid_t group = 0;
 
7557
  __attribute__((cleanup(cleanup_string)))
 
7558
    char *mandos_argz = NULL;
 
7559
  size_t mandos_argz_length = 0;
 
7560
 
 
7561
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7562
                                &helper_directory, &user, &group,
 
7563
                                &mandos_argz, &mandos_argz_length));
 
7564
 
 
7565
  g_assert_null(helper_directory);
 
7566
  g_assert_null(agent_directory);
 
7567
  g_assert_true(user == 0);
 
7568
  g_assert_cmpuint((unsigned int)group, ==, 1000);
 
7569
  g_assert_null(mandos_argz);
 
7570
  g_assert_true(mandos_argz_length == 0);
 
7571
 
 
7572
  for(char **arg = argv; *arg != NULL; arg++){
 
7573
    free(*arg);
 
7574
  }
 
7575
}
 
7576
 
 
7577
static void test_parse_arguments_group_invalid(__attribute__((unused))
 
7578
                                               test_fixture *fixture,
 
7579
                                               __attribute__((unused))
 
7580
                                               gconstpointer
 
7581
                                               user_data){
 
7582
  char *argv[] = {
 
7583
    strdup("prgname"),
 
7584
    strdup("--group"),
 
7585
    strdup("invalid"),
 
7586
    NULL };
 
7587
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7588
 
 
7589
  char *agent_directory = NULL;
 
7590
  __attribute__((cleanup(cleanup_string)))
 
7591
    char *helper_directory = NULL;
 
7592
  uid_t user = 0;
 
7593
  gid_t group = 0;
 
7594
  __attribute__((cleanup(cleanup_string)))
 
7595
    char *mandos_argz = NULL;
 
7596
  size_t mandos_argz_length = 0;
 
7597
 
 
7598
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7599
                                         &agent_directory,
 
7600
                                         &helper_directory, &user,
 
7601
                                         &group, &mandos_argz,
 
7602
                                         &mandos_argz_length));
 
7603
 
 
7604
  g_assert_null(helper_directory);
 
7605
  g_assert_null(agent_directory);
 
7606
  g_assert_true(user == 0);
 
7607
  g_assert_true(group == 0);
 
7608
  g_assert_null(mandos_argz);
 
7609
  g_assert_true(mandos_argz_length == 0);
 
7610
 
 
7611
  for(char **arg = argv; *arg != NULL; arg++){
 
7612
    free(*arg);
 
7613
  }
 
7614
}
 
7615
 
 
7616
static
 
7617
void test_parse_arguments_group_zero_invalid(__attribute__((unused))
 
7618
                                             test_fixture *fixture,
 
7619
                                             __attribute__((unused))
 
7620
                                             gconstpointer user_data){
 
7621
  char *argv[] = {
 
7622
    strdup("prgname"),
 
7623
    strdup("--group"),
 
7624
    strdup("0"),
 
7625
    NULL };
 
7626
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7627
 
 
7628
  char *agent_directory = NULL;
 
7629
  __attribute__((cleanup(cleanup_string)))
 
7630
    char *helper_directory = NULL;
 
7631
  uid_t user = 0;
 
7632
  gid_t group = 0;
 
7633
  __attribute__((cleanup(cleanup_string)))
 
7634
    char *mandos_argz = NULL;
 
7635
  size_t mandos_argz_length = 0;
 
7636
 
 
7637
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7638
                                         &agent_directory,
 
7639
                                         &helper_directory, &user,
 
7640
                                         &group, &mandos_argz,
 
7641
                                         &mandos_argz_length));
 
7642
 
 
7643
  g_assert_null(helper_directory);
 
7644
  g_assert_null(agent_directory);
 
7645
  g_assert_cmpuint((unsigned int)group, ==, 0);
 
7646
  g_assert_true(group == 0);
 
7647
  g_assert_null(mandos_argz);
 
7648
  g_assert_true(mandos_argz_length == 0);
 
7649
 
 
7650
  for(char **arg = argv; *arg != NULL; arg++){
 
7651
    free(*arg);
 
7652
  }
 
7653
}
 
7654
 
 
7655
static void test_parse_arguments_mandos_noargs(__attribute__((unused))
 
7656
                                               test_fixture *fixture,
 
7657
                                               __attribute__((unused))
 
7658
                                               gconstpointer
 
7659
                                               user_data){
 
7660
  char *argv[] = {
 
7661
    strdup("prgname"),
 
7662
    strdup("mandos-client"),
 
7663
    NULL };
 
7664
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7665
 
 
7666
  __attribute__((cleanup(cleanup_string)))
 
7667
    char *agent_directory = NULL;
 
7668
  __attribute__((cleanup(cleanup_string)))
 
7669
    char *helper_directory = NULL;
 
7670
  uid_t user = 0;
 
7671
  gid_t group = 0;
 
7672
  __attribute__((cleanup(cleanup_string)))
 
7673
    char *mandos_argz = NULL;
 
7674
  size_t mandos_argz_length = 0;
 
7675
 
 
7676
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7677
                                &helper_directory, &user, &group,
 
7678
                                &mandos_argz, &mandos_argz_length));
 
7679
 
 
7680
  g_assert_null(agent_directory);
 
7681
  g_assert_null(helper_directory);
 
7682
  g_assert_true(user == 0);
 
7683
  g_assert_true(group == 0);
 
7684
  g_assert_cmpstr(mandos_argz, ==, "mandos-client");
 
7685
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7686
                                            mandos_argz_length),
 
7687
                   ==, 1);
 
7688
 
 
7689
  for(char **arg = argv; *arg != NULL; arg++){
 
7690
    free(*arg);
 
7691
  }
 
7692
}
 
7693
 
 
7694
static void test_parse_arguments_mandos_args(__attribute__((unused))
 
7695
                                             test_fixture *fixture,
 
7696
                                             __attribute__((unused))
 
7697
                                             gconstpointer user_data){
 
7698
  char *argv[] = {
 
7699
    strdup("prgname"),
 
7700
    strdup("mandos-client"),
 
7701
    strdup("one"),
 
7702
    strdup("two"),
 
7703
    strdup("three"),
 
7704
    NULL };
 
7705
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7706
 
 
7707
  __attribute__((cleanup(cleanup_string)))
 
7708
    char *agent_directory = NULL;
 
7709
  __attribute__((cleanup(cleanup_string)))
 
7710
    char *helper_directory = NULL;
 
7711
  uid_t user = 0;
 
7712
  gid_t group = 0;
 
7713
  __attribute__((cleanup(cleanup_string)))
 
7714
    char *mandos_argz = NULL;
 
7715
  size_t mandos_argz_length = 0;
 
7716
 
 
7717
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7718
                                &helper_directory, &user, &group,
 
7719
                                &mandos_argz, &mandos_argz_length));
 
7720
 
 
7721
  g_assert_null(agent_directory);
 
7722
  g_assert_null(helper_directory);
 
7723
  g_assert_true(user == 0);
 
7724
  g_assert_true(group == 0);
 
7725
  char *marg = mandos_argz;
 
7726
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7727
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7728
  g_assert_cmpstr(marg, ==, "one");
 
7729
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7730
  g_assert_cmpstr(marg, ==, "two");
 
7731
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7732
  g_assert_cmpstr(marg, ==, "three");
 
7733
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7734
                                            mandos_argz_length),
 
7735
                   ==, 4);
 
7736
 
 
7737
  for(char **arg = argv; *arg != NULL; arg++){
 
7738
    free(*arg);
 
7739
  }
 
7740
}
 
7741
 
 
7742
static void test_parse_arguments_all_args(__attribute__((unused))
 
7743
                                          test_fixture *fixture,
 
7744
                                          __attribute__((unused))
 
7745
                                          gconstpointer user_data){
 
7746
  char *argv[] = {
 
7747
    strdup("prgname"),
 
7748
    strdup("--agent-directory"),
 
7749
    strdup("/tmp"),
 
7750
    strdup("--helper-directory"),
 
7751
    strdup("/var/tmp"),
 
7752
    strdup("--user"),
 
7753
    strdup("1"),
 
7754
    strdup("--group"),
 
7755
    strdup("2"),
 
7756
    strdup("mandos-client"),
 
7757
    strdup("one"),
 
7758
    strdup("two"),
 
7759
    strdup("three"),
 
7760
    NULL };
 
7761
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7762
 
 
7763
  __attribute__((cleanup(cleanup_string)))
 
7764
    char *agent_directory = NULL;
 
7765
  __attribute__((cleanup(cleanup_string)))
 
7766
    char *helper_directory = NULL;
 
7767
  uid_t user = 0;
 
7768
  gid_t group = 0;
 
7769
  __attribute__((cleanup(cleanup_string)))
 
7770
    char *mandos_argz = NULL;
 
7771
  size_t mandos_argz_length = 0;
 
7772
 
 
7773
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7774
                                &helper_directory, &user, &group,
 
7775
                                &mandos_argz, &mandos_argz_length));
 
7776
 
 
7777
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7778
  g_assert_cmpstr(helper_directory, ==, "/var/tmp");
 
7779
  g_assert_true(user == 1);
 
7780
  g_assert_true(group == 2);
 
7781
  char *marg = mandos_argz;
 
7782
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7783
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7784
  g_assert_cmpstr(marg, ==, "one");
 
7785
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7786
  g_assert_cmpstr(marg, ==, "two");
 
7787
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7788
  g_assert_cmpstr(marg, ==, "three");
 
7789
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7790
                                            mandos_argz_length),
 
7791
                   ==, 4);
 
7792
 
 
7793
  for(char **arg = argv; *arg != NULL; arg++){
 
7794
    free(*arg);
 
7795
  }
 
7796
}
 
7797
 
 
7798
static void test_parse_arguments_mixed(__attribute__((unused))
 
7799
                                       test_fixture *fixture,
 
7800
                                       __attribute__((unused))
 
7801
                                       gconstpointer user_data){
 
7802
  char *argv[] = {
 
7803
    strdup("prgname"),
 
7804
    strdup("mandos-client"),
 
7805
    strdup("--user"),
 
7806
    strdup("1"),
 
7807
    strdup("one"),
 
7808
    strdup("--agent-directory"),
 
7809
    strdup("/tmp"),
 
7810
    strdup("two"),
 
7811
    strdup("three"),
 
7812
    strdup("--helper-directory=/var/tmp"),
 
7813
    NULL };
 
7814
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7815
 
 
7816
  __attribute__((cleanup(cleanup_string)))
 
7817
    char *agent_directory = NULL;
 
7818
  __attribute__((cleanup(cleanup_string)))
 
7819
    char *helper_directory = NULL;
 
7820
  uid_t user = 0;
 
7821
  gid_t group = 0;
 
7822
  __attribute__((cleanup(cleanup_string)))
 
7823
    char *mandos_argz = NULL;
 
7824
  size_t mandos_argz_length = 0;
 
7825
 
 
7826
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7827
                                &helper_directory, &user, &group,
 
7828
                                &mandos_argz, &mandos_argz_length));
 
7829
 
 
7830
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7831
  g_assert_cmpstr(helper_directory, ==, "/var/tmp");
 
7832
  g_assert_true(user == 1);
 
7833
  g_assert_true(group == 0);
 
7834
  char *marg = mandos_argz;
 
7835
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7836
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7837
  g_assert_cmpstr(marg, ==, "one");
 
7838
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7839
  g_assert_cmpstr(marg, ==, "two");
 
7840
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7841
  g_assert_cmpstr(marg, ==, "three");
 
7842
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7843
                                            mandos_argz_length),
 
7844
                   ==, 4);
 
7845
 
 
7846
  for(char **arg = argv; *arg != NULL; arg++){
 
7847
    free(*arg);
 
7848
  }
 
7849
}
 
7850
 
 
7851
/* End of tests section */
 
7852
 
 
7853
/* Test boilerplate section; New tests should be added to the test
 
7854
   suite definition here, in the "run_tests" function.
 
7855
 
 
7856
   Finally, this section also contains the should_only_run_tests()
 
7857
   function used by main() for deciding if tests should be run or to
 
7858
   start normally. */
 
7859
 
 
7860
__attribute__((cold))
 
7861
static bool run_tests(int argc, char *argv[]){
 
7862
  g_test_init(&argc, &argv, NULL);
 
7863
 
 
7864
  /* A macro to add a test with no setup or teardown functions */
 
7865
#define test_add(testpath, testfunc)                    \
 
7866
  do {                                                  \
 
7867
    g_test_add((testpath), test_fixture, NULL, NULL,    \
 
7868
               (testfunc), NULL);                       \
 
7869
  } while(false)
 
7870
 
 
7871
  /* Test the signal-related functions first, since some other tests
 
7872
     depend on these functions in their setups and teardowns */
 
7873
  test_add("/signal-handling/setup", test_setup_signal_handler);
 
7874
  test_add("/signal-handling/restore", test_restore_signal_handler);
 
7875
  test_add("/signal-handling/block", test_block_sigchld);
 
7876
  test_add("/signal-handling/restore-sigmask", test_restore_sigmask);
 
7877
 
 
7878
  /* Regular non-signal-related tests; these use no setups or
 
7879
     teardowns */
 
7880
  test_add("/parse_arguments/noargs", test_parse_arguments_noargs);
 
7881
  test_add("/parse_arguments/invalid", test_parse_arguments_invalid);
 
7882
  test_add("/parse_arguments/long-dir",
 
7883
           test_parse_arguments_long_dir);
 
7884
  test_add("/parse_arguments/short-dir",
 
7885
           test_parse_arguments_short_dir);
 
7886
  test_add("/parse_arguments/helper-directory",
 
7887
           test_parse_arguments_helper_directory);
 
7888
  test_add("/parse_arguments/plugin-helper-dir",
 
7889
           test_parse_arguments_plugin_helper_dir);
 
7890
  test_add("/parse_arguments/user", test_parse_arguments_user);
 
7891
  test_add("/parse_arguments/user-invalid",
 
7892
           test_parse_arguments_user_invalid);
 
7893
  test_add("/parse_arguments/user-zero-invalid",
 
7894
           test_parse_arguments_user_zero_invalid);
 
7895
  test_add("/parse_arguments/group", test_parse_arguments_group);
 
7896
  test_add("/parse_arguments/group-invalid",
 
7897
           test_parse_arguments_group_invalid);
 
7898
  test_add("/parse_arguments/group-zero-invalid",
 
7899
           test_parse_arguments_group_zero_invalid);
 
7900
  test_add("/parse_arguments/mandos-noargs",
 
7901
           test_parse_arguments_mandos_noargs);
 
7902
  test_add("/parse_arguments/mandos-args",
 
7903
           test_parse_arguments_mandos_args);
 
7904
  test_add("/parse_arguments/all-args",
 
7905
           test_parse_arguments_all_args);
 
7906
  test_add("/parse_arguments/mixed", test_parse_arguments_mixed);
 
7907
  test_add("/queue/create", test_create_queue);
 
7908
  test_add("/queue/add", test_add_to_queue);
 
7909
  test_add("/queue/add/overflow", test_add_to_queue_overflow);
 
7910
  test_add("/queue/has_question/empty",
 
7911
           test_queue_has_question_empty);
 
7912
  test_add("/queue/has_question/false",
 
7913
           test_queue_has_question_false);
 
7914
  test_add("/queue/has_question/true", test_queue_has_question_true);
 
7915
  test_add("/queue/has_question/false2",
 
7916
           test_queue_has_question_false2);
 
7917
  test_add("/queue/has_question/true2",
 
7918
           test_queue_has_question_true2);
 
7919
  test_add("/buffer/cleanup", test_cleanup_buffer);
 
7920
  test_add("/string_set/net-set-contains-nothing",
 
7921
           test_string_set_new_set_contains_nothing);
 
7922
  test_add("/string_set/with-added-string-contains-it",
 
7923
           test_string_set_with_added_string_contains_it);
 
7924
  test_add("/string_set/cleared-does-not-contain-string",
 
7925
           test_string_set_cleared_does_not_contain_str);
 
7926
  test_add("/string_set/swap/one-with-empty",
 
7927
           test_string_set_swap_one_with_empty);
 
7928
  test_add("/string_set/swap/empty-with-one",
 
7929
           test_string_set_swap_empty_with_one);
 
7930
  test_add("/string_set/swap/one-with-one",
 
7931
           test_string_set_swap_one_with_one);
 
7932
 
 
7933
  /* A macro to add a test using the setup and teardown functions */
 
7934
#define test_add_st(path, func)                                 \
 
7935
  do {                                                          \
 
7936
    g_test_add((path), test_fixture, NULL, test_setup, (func),  \
 
7937
               test_teardown);                                  \
 
7938
  } while(false)
 
7939
 
 
7940
  /* Signal-related tests; these use setups and teardowns which
 
7941
     establish, during each test run, a signal handler for, and a
 
7942
     signal mask blocking, the SIGCHLD signal, just like main() */
 
7943
  test_add_st("/wait_for_event/timeout", test_wait_for_event_timeout);
 
7944
  test_add_st("/wait_for_event/event", test_wait_for_event_event);
 
7945
  test_add_st("/wait_for_event/sigchld", test_wait_for_event_sigchld);
 
7946
  test_add_st("/run_queue/zeroes-next-run",
 
7947
              test_run_queue_zeroes_next_run);
 
7948
  test_add_st("/run_queue/clears-cancelled_filenames",
 
7949
              test_run_queue_clears_cancelled_filenames);
 
7950
  test_add_st("/run_queue/skips-cancelled-filenames",
 
7951
              test_run_queue_skips_cancelled_filenames);
 
7952
  test_add_st("/run_queue/one-task", test_run_queue_one_task);
 
7953
  test_add_st("/run_queue/two-tasks", test_run_queue_two_tasks);
 
7954
  test_add_st("/run_queue/two-tasks/quit",
 
7955
              test_run_queue_two_tasks_quit);
 
7956
  test_add_st("/run_queue/two-tasks-cleanup",
 
7957
              test_run_queue_two_tasks_cleanup);
 
7958
  test_add_st("/task-creators/start_mandos_client",
 
7959
              test_start_mandos_client);
 
7960
  test_add_st("/task-creators/start_mandos_client/execv",
 
7961
              test_start_mandos_client_execv);
 
7962
  test_add_st("/task-creators/start_mandos_client/suid/euid",
 
7963
              test_start_mandos_client_suid_euid);
 
7964
  test_add_st("/task-creators/start_mandos_client/suid/egid",
 
7965
              test_start_mandos_client_suid_egid);
 
7966
  test_add_st("/task-creators/start_mandos_client/suid/ruid",
 
7967
              test_start_mandos_client_suid_ruid);
 
7968
  test_add_st("/task-creators/start_mandos_client/suid/rgid",
 
7969
              test_start_mandos_client_suid_rgid);
 
7970
  test_add_st("/task-creators/start_mandos_client/read",
 
7971
              test_start_mandos_client_read);
 
7972
  test_add_st("/task-creators/start_mandos_client/helper-directory",
 
7973
              test_start_mandos_client_helper_directory);
 
7974
  test_add_st("/task-creators/start_mandos_client/sigmask",
 
7975
              test_start_mandos_client_sigmask);
 
7976
  test_add_st("/task/wait_for_mandos_client_exit/badpid",
 
7977
              test_wait_for_mandos_client_exit_badpid);
 
7978
  test_add_st("/task/wait_for_mandos_client_exit/noexit",
 
7979
              test_wait_for_mandos_client_exit_noexit);
 
7980
  test_add_st("/task/wait_for_mandos_client_exit/success",
 
7981
              test_wait_for_mandos_client_exit_success);
 
7982
  test_add_st("/task/wait_for_mandos_client_exit/failure",
 
7983
              test_wait_for_mandos_client_exit_failure);
 
7984
  test_add_st("/task/wait_for_mandos_client_exit/killed",
 
7985
              test_wait_for_mandos_client_exit_killed);
 
7986
  test_add_st("/task/read_mandos_client_output/readerror",
 
7987
              test_read_mandos_client_output_readerror);
 
7988
  test_add_st("/task/read_mandos_client_output/nodata",
 
7989
              test_read_mandos_client_output_nodata);
 
7990
  test_add_st("/task/read_mandos_client_output/eof",
 
7991
              test_read_mandos_client_output_eof);
 
7992
  test_add_st("/task/read_mandos_client_output/once",
 
7993
              test_read_mandos_client_output_once);
 
7994
  test_add_st("/task/read_mandos_client_output/malloc",
 
7995
              test_read_mandos_client_output_malloc);
 
7996
  test_add_st("/task/read_mandos_client_output/append",
 
7997
              test_read_mandos_client_output_append);
 
7998
  test_add_st("/task-creators/add_inotify_dir_watch",
 
7999
              test_add_inotify_dir_watch);
 
8000
  test_add_st("/task-creators/add_inotify_dir_watch/fail",
 
8001
              test_add_inotify_dir_watch_fail);
 
8002
  test_add_st("/task-creators/add_inotify_dir_watch/not-a-directory",
 
8003
              test_add_inotify_dir_watch_nondir);
 
8004
  test_add_st("/task-creators/add_inotify_dir_watch/EAGAIN",
 
8005
              test_add_inotify_dir_watch_EAGAIN);
 
8006
  test_add_st("/task-creators/add_inotify_dir_watch/IN_CLOSE_WRITE",
 
8007
              test_add_inotify_dir_watch_IN_CLOSE_WRITE);
 
8008
  test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_TO",
 
8009
              test_add_inotify_dir_watch_IN_MOVED_TO);
 
8010
  test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_FROM",
 
8011
              test_add_inotify_dir_watch_IN_MOVED_FROM);
 
8012
  test_add_st("/task-creators/add_inotify_dir_watch/IN_EXCL_UNLINK",
 
8013
              test_add_inotify_dir_watch_IN_EXCL_UNLINK);
 
8014
  test_add_st("/task-creators/add_inotify_dir_watch/IN_DELETE",
 
8015
              test_add_inotify_dir_watch_IN_DELETE);
 
8016
  test_add_st("/task/read_inotify_event/readerror",
 
8017
              test_read_inotify_event_readerror);
 
8018
  test_add_st("/task/read_inotify_event/bad-epoll",
 
8019
              test_read_inotify_event_bad_epoll);
 
8020
  test_add_st("/task/read_inotify_event/nodata",
 
8021
              test_read_inotify_event_nodata);
 
8022
  test_add_st("/task/read_inotify_event/eof",
 
8023
              test_read_inotify_event_eof);
 
8024
  test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE",
 
8025
              test_read_inotify_event_IN_CLOSE_WRITE);
 
8026
  test_add_st("/task/read_inotify_event/IN_MOVED_TO",
 
8027
              test_read_inotify_event_IN_MOVED_TO);
 
8028
  test_add_st("/task/read_inotify_event/IN_MOVED_FROM",
 
8029
              test_read_inotify_event_IN_MOVED_FROM);
 
8030
  test_add_st("/task/read_inotify_event/IN_DELETE",
 
8031
              test_read_inotify_event_IN_DELETE);
 
8032
  test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE/badname",
 
8033
              test_read_inotify_event_IN_CLOSE_WRITE_badname);
 
8034
  test_add_st("/task/read_inotify_event/IN_MOVED_TO/badname",
 
8035
              test_read_inotify_event_IN_MOVED_TO_badname);
 
8036
  test_add_st("/task/read_inotify_event/IN_MOVED_FROM/badname",
 
8037
              test_read_inotify_event_IN_MOVED_FROM_badname);
 
8038
  test_add_st("/task/read_inotify_event/IN_DELETE/badname",
 
8039
              test_read_inotify_event_IN_DELETE_badname);
 
8040
  test_add_st("/task/open_and_parse_question/ENOENT",
 
8041
              test_open_and_parse_question_ENOENT);
 
8042
  test_add_st("/task/open_and_parse_question/EIO",
 
8043
              test_open_and_parse_question_EIO);
 
8044
  test_add_st("/task/open_and_parse_question/parse-error",
 
8045
              test_open_and_parse_question_parse_error);
 
8046
  test_add_st("/task/open_and_parse_question/nosocket",
 
8047
              test_open_and_parse_question_nosocket);
 
8048
  test_add_st("/task/open_and_parse_question/badsocket",
 
8049
              test_open_and_parse_question_badsocket);
 
8050
  test_add_st("/task/open_and_parse_question/nopid",
 
8051
              test_open_and_parse_question_nopid);
 
8052
  test_add_st("/task/open_and_parse_question/badpid",
 
8053
              test_open_and_parse_question_badpid);
 
8054
  test_add_st("/task/open_and_parse_question/noexist_pid",
 
8055
              test_open_and_parse_question_noexist_pid);
 
8056
  test_add_st("/task/open_and_parse_question/no-notafter",
 
8057
              test_open_and_parse_question_no_notafter);
 
8058
  test_add_st("/task/open_and_parse_question/bad-notafter",
 
8059
              test_open_and_parse_question_bad_notafter);
 
8060
  test_add_st("/task/open_and_parse_question/notafter-0",
 
8061
              test_open_and_parse_question_notafter_0);
 
8062
  test_add_st("/task/open_and_parse_question/notafter-1",
 
8063
              test_open_and_parse_question_notafter_1);
 
8064
  test_add_st("/task/open_and_parse_question/notafter-1-1",
 
8065
              test_open_and_parse_question_notafter_1_1);
 
8066
  test_add_st("/task/open_and_parse_question/notafter-1-2",
 
8067
              test_open_and_parse_question_notafter_1_2);
 
8068
  test_add_st("/task/open_and_parse_question/equal-notafter",
 
8069
              test_open_and_parse_question_equal_notafter);
 
8070
  test_add_st("/task/open_and_parse_question/late-notafter",
 
8071
              test_open_and_parse_question_late_notafter);
 
8072
  test_add_st("/task/cancel_old_question/0-1-2",
 
8073
              test_cancel_old_question_0_1_2);
 
8074
  test_add_st("/task/cancel_old_question/0-2-1",
 
8075
              test_cancel_old_question_0_2_1);
 
8076
  test_add_st("/task/cancel_old_question/1-2-3",
 
8077
              test_cancel_old_question_1_2_3);
 
8078
  test_add_st("/task/cancel_old_question/1-3-2",
 
8079
              test_cancel_old_question_1_3_2);
 
8080
  test_add_st("/task/cancel_old_question/2-1-3",
 
8081
              test_cancel_old_question_2_1_3);
 
8082
  test_add_st("/task/cancel_old_question/2-3-1",
 
8083
              test_cancel_old_question_2_3_1);
 
8084
  test_add_st("/task/cancel_old_question/3-1-2",
 
8085
              test_cancel_old_question_3_1_2);
 
8086
  test_add_st("/task/cancel_old_question/3-2-1",
 
8087
              test_cancel_old_question_3_2_1);
 
8088
  test_add_st("/task/connect_question_socket/name-too-long",
 
8089
              test_connect_question_socket_name_too_long);
 
8090
  test_add_st("/task/connect_question_socket/connect-fail",
 
8091
              test_connect_question_socket_connect_fail);
 
8092
  test_add_st("/task/connect_question_socket/bad-epoll",
 
8093
              test_connect_question_socket_bad_epoll);
 
8094
  test_add_st("/task/connect_question_socket/usable",
 
8095
              test_connect_question_socket_usable);
 
8096
  test_add_st("/task/send_password_to_socket/client-not-exited",
 
8097
              test_send_password_to_socket_client_not_exited);
 
8098
  test_add_st("/task/send_password_to_socket/password-not-read",
 
8099
              test_send_password_to_socket_password_not_read);
 
8100
  test_add_st("/task/send_password_to_socket/EMSGSIZE",
 
8101
              test_send_password_to_socket_EMSGSIZE);
 
8102
  test_add_st("/task/send_password_to_socket/retry",
 
8103
              test_send_password_to_socket_retry);
 
8104
  test_add_st("/task/send_password_to_socket/bad-epoll",
 
8105
              test_send_password_to_socket_bad_epoll);
 
8106
  test_add_st("/task/send_password_to_socket/null-password",
 
8107
              test_send_password_to_socket_null_password);
 
8108
  test_add_st("/task/send_password_to_socket/empty-password",
 
8109
              test_send_password_to_socket_empty_password);
 
8110
  test_add_st("/task/send_password_to_socket/empty-str-password",
 
8111
              test_send_password_to_socket_empty_str_pass);
 
8112
  test_add_st("/task/send_password_to_socket/text-password",
 
8113
              test_send_password_to_socket_text_password);
 
8114
  test_add_st("/task/send_password_to_socket/binary-password",
 
8115
              test_send_password_to_socket_binary_password);
 
8116
  test_add_st("/task/send_password_to_socket/nuls-in-password",
 
8117
              test_send_password_to_socket_nuls_in_password);
 
8118
  test_add_st("/task-creators/add_existing_questions/ENOENT",
 
8119
              test_add_existing_questions_ENOENT);
 
8120
  test_add_st("/task-creators/add_existing_questions/no-questions",
 
8121
              test_add_existing_questions_no_questions);
 
8122
  test_add_st("/task-creators/add_existing_questions/one-question",
 
8123
              test_add_existing_questions_one_question);
 
8124
  test_add_st("/task-creators/add_existing_questions/two-questions",
 
8125
              test_add_existing_questions_two_questions);
 
8126
  test_add_st("/task-creators/add_existing_questions/non-questions",
 
8127
              test_add_existing_questions_non_questions);
 
8128
  test_add_st("/task-creators/add_existing_questions/both-types",
 
8129
              test_add_existing_questions_both_types);
 
8130
 
 
8131
  return g_test_run() == 0;
 
8132
}
 
8133
 
 
8134
static bool should_only_run_tests(int *argc_p, char **argv_p[]){
 
8135
  GOptionContext *context = g_option_context_new("");
 
8136
 
 
8137
  g_option_context_set_help_enabled(context, FALSE);
 
8138
  g_option_context_set_ignore_unknown_options(context, TRUE);
 
8139
 
 
8140
  gboolean should_run_tests = FALSE;
 
8141
  GOptionEntry entries[] = {
 
8142
    { "test", 0, 0, G_OPTION_ARG_NONE,
 
8143
      &should_run_tests, "Run tests", NULL },
 
8144
    { NULL }
 
8145
  };
 
8146
  g_option_context_add_main_entries(context, entries, NULL);
 
8147
 
 
8148
  GError *error = NULL;
 
8149
 
 
8150
  if(g_option_context_parse(context, argc_p, argv_p, &error) != TRUE){
 
8151
    g_option_context_free(context);
 
8152
    g_error("Failed to parse options: %s", error->message);
 
8153
  }
 
8154
 
 
8155
  g_option_context_free(context);
 
8156
  return should_run_tests != FALSE;
 
8157
}