/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to dracut-module/password-agent.c

  • Committer: teddy at recompile
  • Date: 2020-11-30 16:25:32 UTC
  • mto: This revision was merged to the branch mainline in revision 402.
  • Revision ID: teddy@recompile.se-20201130162532-b73s2tsihw3so6pw
Update Debian Policy version to 4.5.1; no other changes necessary.

* debian/control (Standards-Version): Change to "4.5.1".

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
/* -*- mode: c; coding: utf-8; after-save-hook: (lambda () (let* ((find-build-directory (lambda (try-directory &optional base-directory) (let ((base-directory (or base-directory try-directory))) (cond ((equal try-directory "/") base-directory) ((file-readable-p (concat (file-name-as-directory try-directory) "Makefile")) try-directory) ((funcall find-build-directory (directory-file-name (file-name-directory try-directory)) base-directory)))))) (build-directory (funcall find-build-directory (buffer-file-name))) (local-build-directory (if (fboundp 'file-local-name) (file-local-name build-directory) (or (file-remote-p build-directory 'localname) build-directory))) (command (file-relative-name (file-name-sans-extension (buffer-file-name)) build-directory))) (pcase (progn (if (get-buffer "*Test*") (kill-buffer "*Test*")) (process-file-shell-command (let ((qbdir (shell-quote-argument local-build-directory)) (qcmd (shell-quote-argument command))) (format "cd %s && CFLAGS=-Werror make --silent %s && %s --test --verbose" qbdir qcmd qcmd)) nil "*Test*")) (0 (let ((w (get-buffer-window "*Test*"))) (if w (delete-window w)))) (_ (with-current-buffer "*Test*" (compilation-mode) (cd-absolute build-directory)) (display-buffer "*Test*" '(display-buffer-in-side-window)))))); -*- */
 
2
/*
 
3
 * Mandos password agent - Simple password agent to run Mandos client
 
4
 *
 
5
 * Copyright © 2019-2020 Teddy Hogeborn
 
6
 * Copyright © 2019-2020 Björn Påhlsson
 
7
 * 
 
8
 * This file is part of Mandos.
 
9
 * 
 
10
 * Mandos is free software: you can redistribute it and/or modify it
 
11
 * under the terms of the GNU General Public License as published by
 
12
 * the Free Software Foundation, either version 3 of the License, or
 
13
 * (at your option) any later version.
 
14
 * 
 
15
 * Mandos is distributed in the hope that it will be useful, but
 
16
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 
17
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 
18
 * General Public License for more details.
 
19
 * 
 
20
 * You should have received a copy of the GNU General Public License
 
21
 * along with Mandos.  If not, see <http://www.gnu.org/licenses/>.
 
22
 * 
 
23
 * Contact the authors at <mandos@recompile.se>.
 
24
 */
 
25
 
 
26
#define _GNU_SOURCE
 
27
#include <inttypes.h>           /* uintmax_t, PRIuMAX, PRIdMAX,
 
28
                                   intmax_t, uint32_t, SCNx32,
 
29
                                   SCNuMAX, SCNxMAX */
 
30
#include <stddef.h>             /* size_t */
 
31
#include <sys/types.h>          /* pid_t, uid_t, gid_t, getuid(),
 
32
                                   getpid() */
 
33
#include <stdbool.h>            /* bool, true, false */
 
34
#include <signal.h>             /* struct sigaction, sigset_t,
 
35
                                   sigemptyset(), sigaddset(),
 
36
                                   SIGCHLD, pthread_sigmask(),
 
37
                                   SIG_BLOCK, SIG_SETMASK, SA_RESTART,
 
38
                                   SA_NOCLDSTOP, sigfillset(), kill(),
 
39
                                   SIGTERM, sigdelset(), SIGKILL,
 
40
                                   NSIG, sigismember(), SA_ONSTACK,
 
41
                                   SIG_DFL, SIG_IGN, SIGINT, SIGQUIT,
 
42
                                   SIGHUP, SIGSTOP, SIG_UNBLOCK */
 
43
#include <stdlib.h>             /* EXIT_SUCCESS, EXIT_FAILURE,
 
44
                                   malloc(), free(), strtoumax(),
 
45
                                   realloc(), setenv(), calloc(),
 
46
                                   mkdtemp(), mkostemp() */
 
47
#include <iso646.h>             /* not, or, and, xor */
 
48
#include <error.h>              /* error() */
 
49
#include <sysexits.h>           /* EX_USAGE, EX_OSERR, EX_OSFILE */
 
50
#include <errno.h>              /* errno, error_t, EACCES,
 
51
                                   ENAMETOOLONG, ENOENT, ENOTDIR,
 
52
                                   ENOMEM, EEXIST, ECHILD, EPERM,
 
53
                                   EAGAIN, EINTR, ENOBUFS, EADDRINUSE,
 
54
                                   ECONNREFUSED, ECONNRESET,
 
55
                                   ETOOMANYREFS, EMSGSIZE, EBADF,
 
56
                                   EINVAL */
 
57
#include <string.h>             /* strdup(), memcpy(),
 
58
                                   explicit_bzero(), memset(),
 
59
                                   strcmp(), strlen(), strncpy(),
 
60
                                   memcmp(), basename() */
 
61
#include <argz.h>               /* argz_create(), argz_count(),
 
62
                                   argz_extract(), argz_next(),
 
63
                                   argz_add() */
 
64
#include <sys/epoll.h>          /* epoll_create1(), EPOLL_CLOEXEC,
 
65
                                   epoll_ctl(), EPOLL_CTL_ADD,
 
66
                                   struct epoll_event, EPOLLIN,
 
67
                                   EPOLLRDHUP, EPOLLOUT,
 
68
                                   epoll_pwait() */
 
69
#include <time.h>               /* struct timespec, clock_gettime(),
 
70
                                   CLOCK_MONOTONIC */
 
71
#include <argp.h>               /* struct argp_option, OPTION_HIDDEN,
 
72
                                   OPTION_ALIAS, struct argp_state,
 
73
                                   ARGP_ERR_UNKNOWN, ARGP_KEY_ARGS,
 
74
                                   struct argp, argp_parse(),
 
75
                                   ARGP_NO_EXIT */
 
76
#include <stdint.h>             /* SIZE_MAX */
 
77
#include <unistd.h>             /* uid_t, gid_t, close(), pipe2(),
 
78
                                   fork(), _exit(), dup2(),
 
79
                                   STDOUT_FILENO, setresgid(),
 
80
                                   setresuid(), execv(), ssize_t,
 
81
                                   read(), dup3(), getuid(), dup(),
 
82
                                   STDERR_FILENO, pause(), write(),
 
83
                                   rmdir(), unlink(), getpid() */
 
84
#include <sys/mman.h>           /* munlock(), mlock() */
 
85
#include <fcntl.h>              /* O_CLOEXEC, O_NONBLOCK, fcntl(),
 
86
                                   F_GETFD, F_GETFL, FD_CLOEXEC,
 
87
                                   open(), O_WRONLY, O_NOCTTY,
 
88
                                   O_RDONLY, O_NOFOLLOW */
 
89
#include <sys/wait.h>           /* waitpid(), WNOHANG, WIFEXITED(),
 
90
                                   WEXITSTATUS() */
 
91
#include <limits.h>             /* PIPE_BUF, NAME_MAX, INT_MAX */
 
92
#include <sys/inotify.h>        /* inotify_init1(), IN_NONBLOCK,
 
93
                                   IN_CLOEXEC, inotify_add_watch(),
 
94
                                   IN_CLOSE_WRITE, IN_MOVED_TO,
 
95
                                   IN_MOVED_FROM, IN_DELETE,
 
96
                                   IN_EXCL_UNLINK, IN_ONLYDIR,
 
97
                                   struct inotify_event */
 
98
#include <fnmatch.h>            /* fnmatch(), FNM_FILE_NAME */
 
99
#include <stdio.h>              /* asprintf(), FILE, stderr, fopen(),
 
100
                                   fclose(), getline(), sscanf(),
 
101
                                   feof(), ferror(), rename(),
 
102
                                   fdopen(), fprintf(), fscanf() */
 
103
#include <glib.h>    /* GKeyFile, g_key_file_free(), g_key_file_new(),
 
104
                        GError, g_key_file_load_from_file(),
 
105
                        G_KEY_FILE_NONE, TRUE, G_FILE_ERROR_NOENT,
 
106
                        g_key_file_get_string(), guint64,
 
107
                        g_key_file_get_uint64(),
 
108
                        G_KEY_FILE_ERROR_KEY_NOT_FOUND, gconstpointer,
 
109
                        g_assert_true(), g_assert_nonnull(),
 
110
                        g_assert_null(), g_assert_false(),
 
111
                        g_assert_cmpint(), g_assert_cmpuint(),
 
112
                        g_test_skip(), g_assert_cmpstr(),
 
113
                        g_test_init(), g_test_add(), g_test_run(),
 
114
                        GOptionContext, g_option_context_new(),
 
115
                        g_option_context_set_help_enabled(), FALSE,
 
116
                        g_option_context_set_ignore_unknown_options(),
 
117
                        gboolean, GOptionEntry, G_OPTION_ARG_NONE,
 
118
                        g_option_context_add_main_entries(),
 
119
                        g_option_context_parse(),
 
120
                        g_option_context_free(), g_error() */
 
121
#include <sys/un.h>             /* struct sockaddr_un, SUN_LEN */
 
122
#include <sys/socket.h>         /* AF_LOCAL, socket(), PF_LOCAL,
 
123
                                   SOCK_DGRAM, SOCK_NONBLOCK,
 
124
                                   SOCK_CLOEXEC, connect(),
 
125
                                   struct sockaddr, socklen_t,
 
126
                                   shutdown(), SHUT_RD, send(),
 
127
                                   MSG_NOSIGNAL, bind(), recv(),
 
128
                                   socketpair() */
 
129
#include <glob.h>               /* globfree(), glob_t, glob(),
 
130
                                   GLOB_ERR, GLOB_NOSORT, GLOB_MARK,
 
131
                                   GLOB_ABORTED, GLOB_NOMATCH,
 
132
                                   GLOB_NOSPACE */
 
133
 
 
134
/* End of includes */
 
135
 
 
136
/* Start of declarations of private types and functions */
 
137
 
 
138
/* microseconds of CLOCK_MONOTONIC absolute time; 0 means unset */
 
139
typedef uintmax_t mono_microsecs;
 
140
 
 
141
/* "task_queue" - A queue of tasks to be run */
 
142
typedef struct {
 
143
  struct task_struct *tasks;    /* Tasks in this queue */
 
144
  size_t length;                /* Number of tasks */
 
145
  /* Memory allocated for "tasks", in bytes */
 
146
  size_t allocated;             
 
147
  /* Time when this queue should be run, at the latest */
 
148
  mono_microsecs next_run;
 
149
} __attribute__((designated_init)) task_queue;
 
150
 
 
151
/* "task_func" - A function type for task functions
 
152
 
 
153
   I.e. functions for the code which runs when a task is run, all have
 
154
   this type */
 
155
typedef void (task_func) (const struct task_struct,
 
156
                          task_queue *const)
 
157
  __attribute__((nonnull));
 
158
 
 
159
/* "buffer" - A data buffer for a growing array of bytes
 
160
 
 
161
   Used for the "password" variable */
 
162
typedef struct {
 
163
  char *data;
 
164
  size_t length;
 
165
  size_t allocated;
 
166
} __attribute__((designated_init)) buffer;
 
167
 
 
168
/* "string_set" - A set type which can contain strings
 
169
 
 
170
   Used by the "cancelled_filenames" variable */
 
171
typedef struct {
 
172
  char *argz;                   /* Do not access these except in */
 
173
  size_t argz_len;              /* the string_set_* functions */
 
174
} __attribute__((designated_init)) string_set;
 
175
 
 
176
/* "task_context" - local variables for tasks
 
177
 
 
178
   This data structure distinguishes between different tasks which are
 
179
   using the same function.  This data structure is passed to every
 
180
   task function when each task is run.
 
181
 
 
182
   Note that not every task uses every struct member. */
 
183
typedef struct task_struct {
 
184
  task_func *const func;         /* The function run by this task */
 
185
  char *const question_filename; /* The question file */
 
186
  const pid_t pid;               /* Mandos client process ID */
 
187
  const int epoll_fd;            /* The epoll set file descriptor */
 
188
  bool *const quit_now;          /* Set to true on fatal errors */
 
189
  const int fd;                  /* General purpose file descriptor */
 
190
  bool *const mandos_client_exited; /* Set true when client exits */
 
191
  buffer *const password;           /* As read from client process */
 
192
  bool *const password_is_read;     /* "password" is done growing */
 
193
  char *filename;                   /* General purpose file name */
 
194
  /* A set of strings of all the file names of questions which have
 
195
     been cancelled for any reason; tasks pertaining to these question
 
196
     files should not be run */
 
197
  string_set *const cancelled_filenames;
 
198
  const mono_microsecs notafter; /* "NotAfter" from question file */
 
199
  /* Updated before each queue run; is compared with queue.next_run */
 
200
  const mono_microsecs *const current_time;
 
201
} __attribute__((designated_init)) task_context;
 
202
 
 
203
/* Declare all our functions here so we can define them in any order
 
204
   below.  Note: test functions are *not* declared here, they are
 
205
   declared in the test section. */
 
206
__attribute__((warn_unused_result))
 
207
static bool should_only_run_tests(int *, char **[]);
 
208
__attribute__((warn_unused_result, cold))
 
209
static bool run_tests(int, char *[]);
 
210
static void handle_sigchld(__attribute__((unused)) int sig){}
 
211
__attribute__((warn_unused_result, malloc))
 
212
task_queue *create_queue(void);
 
213
__attribute__((nonnull, warn_unused_result))
 
214
bool add_to_queue(task_queue *const, const task_context);
 
215
__attribute__((nonnull))
 
216
void cleanup_task(const task_context *const);
 
217
__attribute__((nonnull))
 
218
void cleanup_queue(task_queue *const *const);
 
219
__attribute__((pure, nonnull, warn_unused_result))
 
220
bool queue_has_question(const task_queue *const);
 
221
__attribute__((nonnull))
 
222
void cleanup_close(const int *const);
 
223
__attribute__((nonnull))
 
224
void cleanup_string(char *const *const);
 
225
__attribute__((nonnull))
 
226
void cleanup_buffer(buffer *const);
 
227
__attribute__((pure, nonnull, warn_unused_result))
 
228
bool string_set_contains(const string_set, const char *const);
 
229
__attribute__((nonnull, warn_unused_result))
 
230
bool string_set_add(string_set *const, const char *const);
 
231
__attribute__((nonnull))
 
232
void string_set_clear(string_set *);
 
233
void string_set_swap(string_set *const, string_set *const);
 
234
__attribute__((nonnull, warn_unused_result))
 
235
bool start_mandos_client(task_queue *const, const int, bool *const,
 
236
                         bool *const, buffer *const, bool *const,
 
237
                         const struct sigaction *const,
 
238
                         const sigset_t, const char *const,
 
239
                         const uid_t, const gid_t,
 
240
                         const char *const *const);
 
241
__attribute__((nonnull))
 
242
task_func wait_for_mandos_client_exit;
 
243
__attribute__((nonnull))
 
244
task_func read_mandos_client_output;
 
245
__attribute__((warn_unused_result))
 
246
bool add_inotify_dir_watch(task_queue *const, const int, bool *const,
 
247
                           buffer *const, const char *const,
 
248
                           string_set *, const mono_microsecs *const,
 
249
                           bool *const, bool *const);
 
250
__attribute__((nonnull))
 
251
task_func read_inotify_event;
 
252
__attribute__((nonnull))
 
253
task_func open_and_parse_question;
 
254
__attribute__((nonnull))
 
255
task_func cancel_old_question;
 
256
__attribute__((nonnull))
 
257
task_func connect_question_socket;
 
258
__attribute__((nonnull))
 
259
task_func send_password_to_socket;
 
260
__attribute__((warn_unused_result))
 
261
bool add_existing_questions(task_queue *const, const int,
 
262
                            buffer *const, string_set *,
 
263
                            const mono_microsecs *const,
 
264
                            bool *const, bool *const,
 
265
                            const char *const);
 
266
__attribute__((nonnull, warn_unused_result))
 
267
bool wait_for_event(const int, const mono_microsecs,
 
268
                    const mono_microsecs);
 
269
bool run_queue(task_queue **const, string_set *const, bool *const);
 
270
bool clear_all_fds_from_epoll_set(const int);
 
271
mono_microsecs get_current_time(void);
 
272
__attribute__((nonnull, warn_unused_result))
 
273
bool setup_signal_handler(struct sigaction *const);
 
274
__attribute__((nonnull))
 
275
bool restore_signal_handler(const struct sigaction *const);
 
276
__attribute__((nonnull, warn_unused_result))
 
277
bool block_sigchld(sigset_t *const);
 
278
__attribute__((nonnull))
 
279
bool restore_sigmask(const sigset_t *const);
 
280
__attribute__((nonnull))
 
281
bool parse_arguments(int, char *[], const bool, char **, char **,
 
282
                     uid_t *const , gid_t *const, char **, size_t *);
 
283
 
 
284
/* End of declarations of private types and functions */
 
285
 
 
286
/* Start of "main" section; this section LACKS TESTS!
 
287
 
 
288
   Code here should be as simple as possible. */
 
289
 
 
290
/* These are required to be global by Argp */
 
291
const char *argp_program_version = "password-agent " VERSION;
 
292
const char *argp_program_bug_address = "<mandos@recompile.se>";
 
293
 
 
294
int main(int argc, char *argv[]){
 
295
 
 
296
  /* If the --test option is passed, skip all normal operations and
 
297
     instead only run the run_tests() function, which also does all
 
298
     its own option parsing, so we don't have to do anything here. */
 
299
  if(should_only_run_tests(&argc, &argv)){
 
300
    if(run_tests(argc, argv)){
 
301
      return EXIT_SUCCESS;      /* All tests successful */
 
302
    }
 
303
    return EXIT_FAILURE;        /* Some test(s) failed */
 
304
  }
 
305
 
 
306
  __attribute__((cleanup(cleanup_string)))
 
307
    char *agent_directory = NULL;
 
308
 
 
309
  __attribute__((cleanup(cleanup_string)))
 
310
    char *helper_directory = NULL;
 
311
 
 
312
  uid_t user = 0;
 
313
  gid_t group = 0;
 
314
 
 
315
  __attribute__((cleanup(cleanup_string)))
 
316
    char *mandos_argz = NULL;
 
317
  size_t mandos_argz_length = 0;
 
318
 
 
319
  if(not parse_arguments(argc, argv, true, &agent_directory,
 
320
                         &helper_directory, &user, &group,
 
321
                         &mandos_argz, &mandos_argz_length)){
 
322
    /* This should never happen, since "true" is passed as the third
 
323
       argument to parse_arguments() above, which should make
 
324
       argp_parse() call exit() if any parsing error occurs. */
 
325
    error(EX_USAGE, errno, "Failed to parse arguments");
 
326
  }
 
327
 
 
328
  const char default_agent_directory[] = "/run/systemd/ask-password";
 
329
  const char default_helper_directory[]
 
330
    = "/lib/mandos/plugin-helpers";
 
331
  const char *const default_argv[]
 
332
    = {"/lib/mandos/plugins.d/mandos-client", NULL };
 
333
 
 
334
  /* Set variables to default values if unset */
 
335
  if(agent_directory == NULL){
 
336
    agent_directory = strdup(default_agent_directory);
 
337
    if(agent_directory == NULL){
 
338
      error(EX_OSERR, errno, "Failed strdup()");
 
339
    }
 
340
  }
 
341
  if(helper_directory == NULL){
 
342
    helper_directory = strdup(default_helper_directory);
 
343
    if(helper_directory == NULL){
 
344
      error(EX_OSERR, errno, "Failed strdup()");
 
345
    }
 
346
  }
 
347
  if(user == 0){
 
348
    user = 65534;               /* nobody */
 
349
  }
 
350
  if(group == 0){
 
351
    group = 65534;              /* nogroup */
 
352
  }
 
353
  /* If parse_opt did not create an argz vector, create one with
 
354
     default values */
 
355
  if(mandos_argz == NULL){
 
356
#ifdef __GNUC__
 
357
#pragma GCC diagnostic push
 
358
    /* argz_create() takes a non-const argv for some unknown reason -
 
359
       argz_create() isn't modifying the strings, just copying them.
 
360
       Therefore, this cast to non-const should be safe. */
 
361
#pragma GCC diagnostic ignored "-Wcast-qual"
 
362
#endif
 
363
    errno = argz_create((char *const *)default_argv, &mandos_argz,
 
364
                        &mandos_argz_length);
 
365
#ifdef __GNUC__
 
366
#pragma GCC diagnostic pop
 
367
#endif
 
368
    if(errno != 0){
 
369
      error(EX_OSERR, errno, "Failed argz_create()");
 
370
    }
 
371
  }
 
372
  /* Use argz vector to create a normal argv, usable by execv() */
 
373
 
 
374
  char **mandos_argv = malloc((argz_count(mandos_argz,
 
375
                                          mandos_argz_length)
 
376
                               + 1) * sizeof(char *));
 
377
  if(mandos_argv == NULL){
 
378
    error_t saved_errno = errno;
 
379
    free(mandos_argz);
 
380
    error(EX_OSERR, saved_errno, "Failed malloc()");
 
381
  }
 
382
  argz_extract(mandos_argz, mandos_argz_length, mandos_argv);
 
383
 
 
384
  sigset_t orig_sigmask;
 
385
  if(not block_sigchld(&orig_sigmask)){
 
386
    return EX_OSERR;
 
387
  }
 
388
 
 
389
  struct sigaction old_sigchld_action;
 
390
  if(not setup_signal_handler(&old_sigchld_action)){
 
391
    return EX_OSERR;
 
392
  }
 
393
 
 
394
  mono_microsecs current_time = 0;
 
395
 
 
396
  bool mandos_client_exited = false;
 
397
  bool quit_now = false;
 
398
  __attribute__((cleanup(cleanup_close)))
 
399
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
400
  if(epoll_fd < 0){
 
401
    error(EX_OSERR, errno, "Failed to create epoll set fd");
 
402
  }
 
403
  __attribute__((cleanup(cleanup_queue)))
 
404
    task_queue *queue = create_queue();
 
405
  if(queue == NULL){
 
406
    error(EX_OSERR, errno, "Failed to create task queue");
 
407
  }
 
408
 
 
409
  __attribute__((cleanup(cleanup_buffer)))
 
410
    buffer password = {};
 
411
  bool password_is_read = false;
 
412
 
 
413
  __attribute__((cleanup(string_set_clear)))
 
414
    string_set cancelled_filenames = {};
 
415
 
 
416
  /* Add tasks to queue */
 
417
  if(not start_mandos_client(queue, epoll_fd, &mandos_client_exited,
 
418
                             &quit_now, &password, &password_is_read,
 
419
                             &old_sigchld_action, orig_sigmask,
 
420
                             helper_directory, user, group,
 
421
                             (const char *const *)mandos_argv)){
 
422
    return EX_OSERR;            /* Error has already been printed */
 
423
  }
 
424
  /* These variables were only for start_mandos_client() and are not
 
425
     needed anymore */
 
426
  free(mandos_argv);
 
427
  free(mandos_argz);
 
428
  mandos_argz = NULL;
 
429
  if(not add_inotify_dir_watch(queue, epoll_fd, &quit_now, &password,
 
430
                               agent_directory, &cancelled_filenames,
 
431
                               &current_time, &mandos_client_exited,
 
432
                               &password_is_read)){
 
433
    switch(errno){              /* Error has already been printed */
 
434
    case EACCES:
 
435
    case ENAMETOOLONG:
 
436
    case ENOENT:
 
437
    case ENOTDIR:
 
438
      return EX_OSFILE;
 
439
    default:
 
440
      return EX_OSERR;
 
441
    }
 
442
  }
 
443
  if(not add_existing_questions(queue, epoll_fd, &password,
 
444
                                &cancelled_filenames, &current_time,
 
445
                                &mandos_client_exited,
 
446
                                &password_is_read, agent_directory)){
 
447
    return EXIT_FAILURE;        /* Error has already been printed */
 
448
  }
 
449
 
 
450
  /* Run queue */
 
451
  do {
 
452
    current_time = get_current_time();
 
453
    if(not wait_for_event(epoll_fd, queue->next_run, current_time)){
 
454
      const error_t saved_errno = errno;
 
455
      error(EXIT_FAILURE, saved_errno, "Failure while waiting for"
 
456
            " events");
 
457
    }
 
458
 
 
459
    current_time = get_current_time();
 
460
    if(not run_queue(&queue, &cancelled_filenames, &quit_now)){
 
461
      const error_t saved_errno = errno;
 
462
      error(EXIT_FAILURE, saved_errno, "Failure while running queue");
 
463
    }
 
464
 
 
465
    /*  When no tasks about questions are left in the queue, break out
 
466
        of the loop (and implicitly exit the program) */
 
467
  } while(queue_has_question(queue));
 
468
 
 
469
  restore_signal_handler(&old_sigchld_action);
 
470
  restore_sigmask(&orig_sigmask);
 
471
 
 
472
  return EXIT_SUCCESS;
 
473
}
 
474
 
 
475
__attribute__((warn_unused_result))
 
476
mono_microsecs get_current_time(void){
 
477
  struct timespec currtime;
 
478
  if(clock_gettime(CLOCK_MONOTONIC, &currtime) != 0){
 
479
    error(0, errno, "Failed to get current time");
 
480
    return 0;
 
481
  }
 
482
  return ((mono_microsecs)currtime.tv_sec * 1000000) /* seconds */
 
483
    + ((mono_microsecs)currtime.tv_nsec / 1000);     /* nanoseconds */
 
484
}
 
485
 
 
486
/* End of "main" section */
 
487
 
 
488
/* Start of regular code section; ALL this code has tests */
 
489
 
 
490
__attribute__((nonnull))
 
491
bool parse_arguments(int argc, char *argv[], const bool exit_failure,
 
492
                     char **agent_directory, char **helper_directory,
 
493
                     uid_t *const user, gid_t *const group,
 
494
                     char **mandos_argz, size_t *mandos_argz_length){
 
495
 
 
496
  const struct argp_option options[] = {
 
497
    { .name="agent-directory",.key='d', .arg="DIRECTORY",
 
498
      .doc="Systemd password agent directory" },
 
499
    { .name="helper-directory",.key=128, .arg="DIRECTORY",
 
500
      .doc="Mandos Client password helper directory" },
 
501
    { .name="plugin-helper-dir", .key=129, /* From plugin-runner */
 
502
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
503
    { .name="user", .key='u', .arg="USERID",
 
504
      .doc="User ID the Mandos Client will use as its unprivileged"
 
505
      " user" },
 
506
    { .name="userid", .key=130, /* From plugin--runner */
 
507
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
508
    { .name="group", .key='g', .arg="GROUPID",
 
509
      .doc="Group ID the Mandos Client will use as its unprivileged"
 
510
      " group" },
 
511
    { .name="groupid", .key=131, /* From plugin--runner */
 
512
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
 
513
    { .name="test", .key=255, /* See should_only_run_tests() */
 
514
      .doc="Skip normal operation, and only run self-tests.  See"
 
515
      " --test --help.", .group=10, },
 
516
    { NULL },
 
517
  };
 
518
 
 
519
  __attribute__((nonnull(3)))
 
520
    error_t parse_opt(int key, char *arg, struct argp_state *state){
 
521
    errno = 0;
 
522
    switch(key){
 
523
    case 'd':                   /* --agent-directory */
 
524
      *agent_directory = strdup(arg);
 
525
      break;
 
526
    case 128:                   /* --helper-directory */
 
527
    case 129:                   /* --plugin-helper-dir */
 
528
      *helper_directory = strdup(arg);
 
529
      break;
 
530
    case 'u':                   /* --user */
 
531
    case 130:                   /* --userid */
 
532
      {
 
533
        char *tmp;
 
534
        uintmax_t tmp_id = 0;
 
535
        errno = 0;
 
536
        tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
 
537
        if(errno != 0 or tmp == arg or *tmp != '\0'
 
538
           or tmp_id != (uid_t)tmp_id or (uid_t)tmp_id == 0){
 
539
          return ARGP_ERR_UNKNOWN;
 
540
        }
 
541
        *user = (uid_t)tmp_id;
 
542
        errno = 0;
 
543
        break;
 
544
      }
 
545
    case 'g':                   /* --group */
 
546
    case 131:                   /* --groupid */
 
547
      {
 
548
        char *tmp;
 
549
        uintmax_t tmp_id = 0;
 
550
        errno = 0;
 
551
        tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
 
552
        if(errno != 0 or tmp == arg or *tmp != '\0'
 
553
           or tmp_id != (gid_t)tmp_id or (gid_t)tmp_id == 0){
 
554
          return ARGP_ERR_UNKNOWN;
 
555
        }
 
556
        *group = (gid_t)tmp_id;
 
557
        errno = 0;
 
558
        break;
 
559
      }
 
560
    case ARGP_KEY_ARGS:
 
561
      /* Copy arguments into argz vector */
 
562
      return argz_create(state->argv + state->next, mandos_argz,
 
563
                         mandos_argz_length);
 
564
    default:
 
565
      return ARGP_ERR_UNKNOWN;
 
566
    }
 
567
    return errno;
 
568
  }
 
569
 
 
570
  const struct argp argp = {
 
571
    .options=options,
 
572
    .parser=parse_opt,
 
573
    .args_doc="[MANDOS_CLIENT [OPTION...]]\n--test",
 
574
    .doc = "Mandos password agent -- runs Mandos client as a"
 
575
    " systemd password agent",
 
576
  };
 
577
 
 
578
  errno = argp_parse(&argp, argc, argv,
 
579
                     exit_failure ? 0 : ARGP_NO_EXIT, NULL, NULL);
 
580
 
 
581
  return errno == 0;
 
582
}
 
583
 
 
584
__attribute__((nonnull, warn_unused_result))
 
585
bool block_sigchld(sigset_t *const orig_sigmask){
 
586
  sigset_t sigchld_sigmask;
 
587
  if(sigemptyset(&sigchld_sigmask) < 0){
 
588
    error(0, errno, "Failed to empty signal set");
 
589
    return false;
 
590
  }
 
591
  if(sigaddset(&sigchld_sigmask, SIGCHLD) < 0){
 
592
    error(0, errno, "Failed to add SIGCHLD to signal set");
 
593
    return false;
 
594
  }
 
595
  if(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask, orig_sigmask) != 0){
 
596
    error(0, errno, "Failed to block SIGCHLD signal");
 
597
    return false;
 
598
  }
 
599
  return true;
 
600
}
 
601
 
 
602
__attribute__((nonnull, warn_unused_result, const))
 
603
bool restore_sigmask(const sigset_t *const orig_sigmask){
 
604
  if(pthread_sigmask(SIG_SETMASK, orig_sigmask, NULL) != 0){
 
605
    error(0, errno, "Failed to restore blocked signals");
 
606
    return false;
 
607
  }
 
608
  return true;
 
609
}
 
610
 
 
611
__attribute__((nonnull, warn_unused_result))
 
612
bool setup_signal_handler(struct sigaction *const old_sigchld_action){
 
613
  struct sigaction sigchld_action = {
 
614
    .sa_handler=handle_sigchld,
 
615
    .sa_flags=SA_RESTART | SA_NOCLDSTOP,
 
616
  };
 
617
  /* Set all signals in "sa_mask" struct member; this makes all
 
618
     signals automatically blocked during signal handler */
 
619
  if(sigfillset(&sigchld_action.sa_mask) != 0){
 
620
    error(0, errno, "Failed to do sigfillset()");
 
621
    return false;
 
622
  }
 
623
  if(sigaction(SIGCHLD, &sigchld_action, old_sigchld_action) != 0){
 
624
    error(0, errno, "Failed to set SIGCHLD signal handler");
 
625
    return false;
 
626
  }
 
627
  return true;
 
628
}
 
629
 
 
630
__attribute__((nonnull, warn_unused_result))
 
631
bool restore_signal_handler(const struct sigaction *const
 
632
                            old_sigchld_action){
 
633
  if(sigaction(SIGCHLD, old_sigchld_action, NULL) != 0){
 
634
    error(0, errno, "Failed to restore signal handler");
 
635
    return false;
 
636
  }
 
637
  return true;
 
638
}
 
639
 
 
640
__attribute__((warn_unused_result, malloc))
 
641
task_queue *create_queue(void){
 
642
  task_queue *queue = malloc(sizeof(task_queue));
 
643
  if(queue){
 
644
    queue->tasks = NULL;
 
645
    queue->length = 0;
 
646
    queue->allocated = 0;
 
647
    queue->next_run = 0;
 
648
  }
 
649
  return queue;
 
650
}
 
651
 
 
652
__attribute__((nonnull, warn_unused_result))
 
653
bool add_to_queue(task_queue *const queue, const task_context task){
 
654
  if((queue->length + 1) > (SIZE_MAX / sizeof(task_context))){
 
655
    /* overflow */
 
656
    error(0, ENOMEM, "Failed to allocate %" PRIuMAX
 
657
          " tasks for queue->tasks", (uintmax_t)(queue->length + 1));
 
658
    errno = ENOMEM;
 
659
    return false;
 
660
  }
 
661
  const size_t needed_size = sizeof(task_context)*(queue->length + 1);
 
662
  if(needed_size > (queue->allocated)){
 
663
    task_context *const new_tasks = realloc(queue->tasks,
 
664
                                            needed_size);
 
665
    if(new_tasks == NULL){
 
666
      error(0, errno, "Failed to allocate %" PRIuMAX
 
667
            " bytes for queue->tasks", (uintmax_t)needed_size);
 
668
      return false;
 
669
    }
 
670
    queue->tasks = new_tasks;
 
671
    queue->allocated = needed_size;
 
672
  }
 
673
  /* Using memcpy here is necessary because doing */
 
674
  /* queue->tasks[queue->length++] = task; */
 
675
  /* would violate const-ness of task members */
 
676
  memcpy(&(queue->tasks[queue->length++]), &task,
 
677
         sizeof(task_context));
 
678
  return true;
 
679
}
 
680
 
 
681
__attribute__((nonnull))
 
682
void cleanup_task(const task_context *const task){
 
683
  const error_t saved_errno = errno;
 
684
  /* free and close all task data */
 
685
  free(task->question_filename);
 
686
  if(task->filename != task->question_filename){
 
687
    free(task->filename);
 
688
  }
 
689
  if(task->pid > 0){
 
690
    kill(task->pid, SIGTERM);
 
691
  }
 
692
  if(task->fd > 0){
 
693
    close(task->fd);
 
694
  }
 
695
  errno = saved_errno;
 
696
}
 
697
 
 
698
__attribute__((nonnull))
 
699
void free_queue(task_queue *const queue){
 
700
  free(queue->tasks);
 
701
  free(queue);
 
702
}
 
703
 
 
704
__attribute__((nonnull))
 
705
void cleanup_queue(task_queue *const *const queue){
 
706
  if(*queue == NULL){
 
707
    return;
 
708
  }
 
709
  for(size_t i = 0; i < (*queue)->length; i++){
 
710
    const task_context *const task = ((*queue)->tasks)+i;
 
711
    cleanup_task(task);
 
712
  }
 
713
  free_queue(*queue);
 
714
}
 
715
 
 
716
__attribute__((pure, nonnull, warn_unused_result))
 
717
bool queue_has_question(const task_queue *const queue){
 
718
  for(size_t i=0; i < queue->length; i++){
 
719
    if(queue->tasks[i].question_filename != NULL){
 
720
      return true;
 
721
    }
 
722
  }
 
723
  return false;
 
724
}
 
725
 
 
726
__attribute__((nonnull))
 
727
void cleanup_close(const int *const fd){
 
728
  const error_t saved_errno = errno;
 
729
  close(*fd);
 
730
  errno = saved_errno;
 
731
}
 
732
 
 
733
__attribute__((nonnull))
 
734
void cleanup_string(char *const *const ptr){
 
735
  free(*ptr);
 
736
}
 
737
 
 
738
__attribute__((nonnull))
 
739
void cleanup_buffer(buffer *buf){
 
740
  if(buf->allocated > 0){
 
741
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
742
    explicit_bzero(buf->data, buf->allocated);
 
743
#else
 
744
    memset(buf->data, '\0', buf->allocated);
 
745
#endif
 
746
  }
 
747
  if(buf->data != NULL){
 
748
    if(munlock(buf->data, buf->allocated) != 0){
 
749
      error(0, errno, "Failed to unlock memory of old buffer");
 
750
    }
 
751
    free(buf->data);
 
752
    buf->data = NULL;
 
753
  }
 
754
  buf->length = 0;
 
755
  buf->allocated = 0;
 
756
}
 
757
 
 
758
__attribute__((pure, nonnull, warn_unused_result))
 
759
bool string_set_contains(const string_set set, const char *const str){
 
760
  for(const char *s = set.argz; s != NULL and set.argz_len > 0;
 
761
      s = argz_next(set.argz, set.argz_len, s)){
 
762
    if(strcmp(s, str) == 0){
 
763
      return true;
 
764
    }
 
765
  }
 
766
  return false;
 
767
}
 
768
 
 
769
__attribute__((nonnull, warn_unused_result))
 
770
bool string_set_add(string_set *const set, const char *const str){
 
771
  if(string_set_contains(*set, str)){
 
772
    return true;
 
773
  }
 
774
  error_t error = argz_add(&set->argz, &set->argz_len, str);
 
775
  if(error == 0){
 
776
    return true;
 
777
  }
 
778
  errno = error;
 
779
  return false;
 
780
}
 
781
 
 
782
__attribute__((nonnull))
 
783
void string_set_clear(string_set *set){
 
784
  free(set->argz);
 
785
  set->argz = NULL;
 
786
  set->argz_len = 0;
 
787
}
 
788
 
 
789
__attribute__((nonnull))
 
790
void string_set_swap(string_set *const set1, string_set *const set2){
 
791
  /* Swap contents of two string sets */
 
792
  {
 
793
    char *const tmp_argz = set1->argz;
 
794
    set1->argz = set2->argz;
 
795
    set2->argz = tmp_argz;
 
796
  }
 
797
  {
 
798
    const size_t tmp_argz_len = set1->argz_len;
 
799
    set1->argz_len = set2->argz_len;
 
800
    set2->argz_len = tmp_argz_len;
 
801
  }
 
802
}
 
803
 
 
804
__attribute__((nonnull, warn_unused_result))
 
805
bool start_mandos_client(task_queue *const queue,
 
806
                         const int epoll_fd,
 
807
                         bool *const mandos_client_exited,
 
808
                         bool *const quit_now, buffer *const password,
 
809
                         bool *const password_is_read,
 
810
                         const struct sigaction *const
 
811
                         old_sigchld_action, const sigset_t sigmask,
 
812
                         const char *const helper_directory,
 
813
                         const uid_t user, const gid_t group,
 
814
                         const char *const *const argv){
 
815
  int pipefds[2];
 
816
  if(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK) != 0){
 
817
    error(0, errno, "Failed to pipe2(..., O_CLOEXEC | O_NONBLOCK)");
 
818
    return false;
 
819
  }
 
820
 
 
821
  const pid_t pid = fork();
 
822
  if(pid == 0){
 
823
    if(not restore_signal_handler(old_sigchld_action)){
 
824
      _exit(EXIT_FAILURE);
 
825
    }
 
826
    if(not restore_sigmask(&sigmask)){
 
827
      _exit(EXIT_FAILURE);
 
828
    }
 
829
    if(close(pipefds[0]) != 0){
 
830
      error(0, errno, "Failed to close() parent pipe fd");
 
831
      _exit(EXIT_FAILURE);
 
832
    }
 
833
    if(dup2(pipefds[1], STDOUT_FILENO) == -1){
 
834
      error(0, errno, "Failed to dup2() pipe fd to stdout");
 
835
      _exit(EXIT_FAILURE);
 
836
    }
 
837
    if(close(pipefds[1]) != 0){
 
838
      error(0, errno, "Failed to close() old child pipe fd");
 
839
      _exit(EXIT_FAILURE);
 
840
    }
 
841
    if(setenv("MANDOSPLUGINHELPERDIR", helper_directory, 1) != 0){
 
842
      error(0, errno, "Failed to setenv(\"MANDOSPLUGINHELPERDIR\","
 
843
            " \"%s\", 1)", helper_directory);
 
844
      _exit(EXIT_FAILURE);
 
845
    }
 
846
    if(group != 0 and setresgid(group, 0, 0) == -1){
 
847
      error(0, errno, "Failed to setresgid(-1, %" PRIuMAX ", %"
 
848
            PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
 
849
      _exit(EXIT_FAILURE);
 
850
    }
 
851
    if(user != 0 and setresuid(user, 0, 0) == -1){
 
852
      error(0, errno, "Failed to setresuid(-1, %" PRIuMAX ", %"
 
853
            PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
 
854
      _exit(EXIT_FAILURE);
 
855
    }
 
856
#ifdef __GNUC__
 
857
#pragma GCC diagnostic push
 
858
    /* For historical reasons, the "argv" argument to execv() is not
 
859
       const, but it is safe to override this. */
 
860
#pragma GCC diagnostic ignored "-Wcast-qual"
 
861
#endif
 
862
    execv(argv[0], (char **)argv);
 
863
#ifdef __GNUC__
 
864
#pragma GCC diagnostic pop
 
865
#endif
 
866
    error(0, errno, "execv(\"%s\", ...) failed", argv[0]);
 
867
    _exit(EXIT_FAILURE);
 
868
  }
 
869
  close(pipefds[1]);
 
870
 
 
871
  if(pid == -1){
 
872
    error(0, errno, "Failed to fork()");
 
873
    close(pipefds[0]);
 
874
    return false;
 
875
  }
 
876
 
 
877
  if(not add_to_queue(queue, (task_context){
 
878
        .func=wait_for_mandos_client_exit,
 
879
        .pid=pid,
 
880
        .mandos_client_exited=mandos_client_exited,
 
881
        .quit_now=quit_now,
 
882
      })){
 
883
    error(0, errno, "Failed to add wait_for_mandos_client to queue");
 
884
    close(pipefds[0]);
 
885
    return false;
 
886
  }
 
887
 
 
888
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, pipefds[0],
 
889
                            &(struct epoll_event)
 
890
                            { .events=EPOLLIN | EPOLLRDHUP });
 
891
  if(ret != 0 and errno != EEXIST){
 
892
    error(0, errno, "Failed to add file descriptor to epoll set");
 
893
    close(pipefds[0]);
 
894
    return false;
 
895
  }
 
896
 
 
897
  return add_to_queue(queue, (task_context){
 
898
      .func=read_mandos_client_output,
 
899
      .epoll_fd=epoll_fd,
 
900
      .fd=pipefds[0],
 
901
      .quit_now=quit_now,
 
902
      .password=password,
 
903
      .password_is_read=password_is_read,
 
904
    });
 
905
}
 
906
 
 
907
__attribute__((nonnull))
 
908
void wait_for_mandos_client_exit(const task_context task,
 
909
                                 task_queue *const queue){
 
910
  const pid_t pid = task.pid;
 
911
  bool *const mandos_client_exited = task.mandos_client_exited;
 
912
  bool *const quit_now = task.quit_now;
 
913
 
 
914
  int status;
 
915
  switch(waitpid(pid, &status, WNOHANG)){
 
916
  case 0:                       /* Not exited yet */
 
917
    if(not add_to_queue(queue, task)){
 
918
      error(0, errno, "Failed to add myself to queue");
 
919
      *quit_now = true;
 
920
    }
 
921
    break;
 
922
  case -1:                      /* Error */
 
923
    error(0, errno, "waitpid(%" PRIdMAX ") failed", (intmax_t)pid);
 
924
    if(errno != ECHILD){
 
925
      kill(pid, SIGTERM);
 
926
    }
 
927
    *quit_now = true;
 
928
    break;
 
929
  default:                      /* Has exited */
 
930
    *mandos_client_exited = true;
 
931
    if((not WIFEXITED(status))
 
932
       or (WEXITSTATUS(status) != EXIT_SUCCESS)){
 
933
      error(0, 0, "Mandos client failed or was killed");
 
934
      *quit_now = true;
 
935
    }
 
936
  }
 
937
}
 
938
 
 
939
__attribute__((nonnull))
 
940
void read_mandos_client_output(const task_context task,
 
941
                               task_queue *const queue){
 
942
  buffer *const password = task.password;
 
943
  bool *const quit_now = task.quit_now;
 
944
  bool *const password_is_read = task.password_is_read;
 
945
  const int fd = task.fd;
 
946
  const int epoll_fd = task.epoll_fd;
 
947
 
 
948
  const size_t new_potential_size = (password->length + PIPE_BUF);
 
949
  if(password->allocated < new_potential_size){
 
950
    char *const new_buffer = calloc(new_potential_size, 1);
 
951
    if(new_buffer == NULL){
 
952
      error(0, errno, "Failed to allocate %" PRIuMAX
 
953
            " bytes for password", (uintmax_t)new_potential_size);
 
954
      *quit_now = true;
 
955
      close(fd);
 
956
      return;
 
957
    }
 
958
    if(mlock(new_buffer, new_potential_size) != 0){
 
959
      /* Warn but do not treat as fatal error */
 
960
      if(errno != EPERM and errno != ENOMEM){
 
961
        error(0, errno, "Failed to lock memory for password");
 
962
      }
 
963
    }
 
964
    if(password->length > 0){
 
965
      memcpy(new_buffer, password->data, password->length);
 
966
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
967
      explicit_bzero(password->data, password->allocated);
 
968
#else
 
969
      memset(password->data, '\0', password->allocated);
 
970
#endif
 
971
    }
 
972
    if(password->data != NULL){
 
973
      if(munlock(password->data, password->allocated) != 0){
 
974
        error(0, errno, "Failed to unlock memory of old buffer");
 
975
      }
 
976
      free(password->data);
 
977
    }
 
978
    password->data = new_buffer;
 
979
    password->allocated = new_potential_size;
 
980
  }
 
981
 
 
982
  const ssize_t read_length = read(fd, password->data
 
983
                                   + password->length, PIPE_BUF);
 
984
 
 
985
  if(read_length == 0){ /* EOF */
 
986
    *password_is_read = true;
 
987
    close(fd);
 
988
    return;
 
989
  }
 
990
  if(read_length < 0 and errno != EAGAIN){ /* Actual error */
 
991
    error(0, errno, "Failed to read password from Mandos client");
 
992
    *quit_now = true;
 
993
    close(fd);
 
994
    return;
 
995
  }
 
996
  if(read_length > 0){          /* Data has been read */
 
997
    password->length += (size_t)read_length;
 
998
  }
 
999
 
 
1000
  /* Either data was read, or EAGAIN was indicated, meaning no data
 
1001
     available yet */
 
1002
 
 
1003
  /* Re-add the fd to the epoll set */
 
1004
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1005
                            &(struct epoll_event)
 
1006
                            { .events=EPOLLIN | EPOLLRDHUP });
 
1007
  if(ret != 0 and errno != EEXIST){
 
1008
    error(0, errno, "Failed to re-add file descriptor to epoll set");
 
1009
    *quit_now = true;
 
1010
    close(fd);
 
1011
    return;
 
1012
  }
 
1013
 
 
1014
  /* Re-add myself to the queue */
 
1015
  if(not add_to_queue(queue, task)){
 
1016
    error(0, errno, "Failed to add myself to queue");
 
1017
    *quit_now = true;
 
1018
    close(fd);
 
1019
  }
 
1020
}
 
1021
 
 
1022
__attribute__((nonnull, warn_unused_result))
 
1023
bool add_inotify_dir_watch(task_queue *const queue,
 
1024
                           const int epoll_fd, bool *const quit_now,
 
1025
                           buffer *const password,
 
1026
                           const char *const dir,
 
1027
                           string_set *cancelled_filenames,
 
1028
                           const mono_microsecs *const current_time,
 
1029
                           bool *const mandos_client_exited,
 
1030
                           bool *const password_is_read){
 
1031
  const int fd = inotify_init1(IN_NONBLOCK | IN_CLOEXEC);
 
1032
  if(fd == -1){
 
1033
    error(0, errno, "Failed to create inotify instance");
 
1034
    return false;
 
1035
  }
 
1036
 
 
1037
  if(inotify_add_watch(fd, dir, IN_CLOSE_WRITE | IN_MOVED_TO
 
1038
                       | IN_MOVED_FROM| IN_DELETE | IN_EXCL_UNLINK
 
1039
                       | IN_ONLYDIR)
 
1040
     == -1){
 
1041
    error(0, errno, "Failed to create inotify watch on %s", dir);
 
1042
    return false;
 
1043
  }
 
1044
 
 
1045
  /* Add the inotify fd to the epoll set */
 
1046
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1047
                            &(struct epoll_event)
 
1048
                            { .events=EPOLLIN | EPOLLRDHUP });
 
1049
  if(ret != 0 and errno != EEXIST){
 
1050
    error(0, errno, "Failed to add file descriptor to epoll set");
 
1051
    close(fd);
 
1052
    return false;
 
1053
  }
 
1054
 
 
1055
  const task_context read_inotify_event_task = {
 
1056
    .func=read_inotify_event,
 
1057
    .epoll_fd=epoll_fd,
 
1058
    .quit_now=quit_now,
 
1059
    .password=password,
 
1060
    .fd=fd,
 
1061
    .filename=strdup(dir),
 
1062
    .cancelled_filenames=cancelled_filenames,
 
1063
    .current_time=current_time,
 
1064
    .mandos_client_exited=mandos_client_exited,
 
1065
    .password_is_read=password_is_read,
 
1066
  };
 
1067
  if(read_inotify_event_task.filename == NULL){
 
1068
    error(0, errno, "Failed to strdup(\"%s\")", dir);
 
1069
    close(fd);
 
1070
    return false;
 
1071
  }
 
1072
 
 
1073
  return add_to_queue(queue, read_inotify_event_task);
 
1074
}
 
1075
 
 
1076
__attribute__((nonnull))
 
1077
void read_inotify_event(const task_context task,
 
1078
                        task_queue *const queue){
 
1079
  const int fd = task.fd;
 
1080
  const int epoll_fd = task.epoll_fd;
 
1081
  char *const filename = task.filename;
 
1082
  bool *quit_now = task.quit_now;
 
1083
  buffer *const password = task.password;
 
1084
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1085
  const mono_microsecs *const current_time = task.current_time;
 
1086
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1087
  bool *const password_is_read = task.password_is_read;
 
1088
 
 
1089
  /* "sufficient to read at least one event." - inotify(7) */
 
1090
  const size_t ievent_size = (sizeof(struct inotify_event)
 
1091
                              + NAME_MAX + 1);
 
1092
  struct {
 
1093
    struct inotify_event event;
 
1094
    char name_buffer[NAME_MAX + 1];
 
1095
  } ievent_buffer;
 
1096
  struct inotify_event *const ievent = &ievent_buffer.event;
 
1097
 
 
1098
  const ssize_t read_length = read(fd, ievent, ievent_size);
 
1099
  if(read_length == 0){ /* EOF */
 
1100
    error(0, 0, "Got EOF from inotify fd for directory %s", filename);
 
1101
    *quit_now = true;
 
1102
    cleanup_task(&task);
 
1103
    return;
 
1104
  }
 
1105
  if(read_length < 0 and errno != EAGAIN){ /* Actual error */
 
1106
    error(0, errno, "Failed to read from inotify fd for directory %s",
 
1107
          filename);
 
1108
    *quit_now = true;
 
1109
    cleanup_task(&task);
 
1110
    return;
 
1111
  }
 
1112
  if(read_length > 0            /* Data has been read */
 
1113
     and fnmatch("ask.*", ievent->name, FNM_FILE_NAME) == 0){
 
1114
    char *question_filename = NULL;
 
1115
    const ssize_t question_filename_length
 
1116
      = asprintf(&question_filename, "%s/%s", filename, ievent->name);
 
1117
    if(question_filename_length < 0){
 
1118
      error(0, errno, "Failed to create file name from directory name"
 
1119
            " %s and file name %s", filename, ievent->name);
 
1120
    } else {
 
1121
      if(ievent->mask & (IN_CLOSE_WRITE | IN_MOVED_TO)){
 
1122
        if(not add_to_queue(queue, (task_context){
 
1123
              .func=open_and_parse_question,
 
1124
              .epoll_fd=epoll_fd,
 
1125
              .question_filename=question_filename,
 
1126
              .filename=question_filename,
 
1127
              .password=password,
 
1128
              .cancelled_filenames=cancelled_filenames,
 
1129
              .current_time=current_time,
 
1130
              .mandos_client_exited=mandos_client_exited,
 
1131
              .password_is_read=password_is_read,
 
1132
            })){
 
1133
          error(0, errno, "Failed to add open_and_parse_question task"
 
1134
                " for file name %s to queue", filename);
 
1135
        } else {
 
1136
          /* Force the added task (open_and_parse_question) to run
 
1137
             immediately */
 
1138
          queue->next_run = 1;
 
1139
        }
 
1140
      } else if(ievent->mask & (IN_MOVED_FROM | IN_DELETE)){
 
1141
        if(not string_set_add(cancelled_filenames,
 
1142
                              question_filename)){
 
1143
          error(0, errno, "Could not add question %s to"
 
1144
                " cancelled_questions", question_filename);
 
1145
          *quit_now = true;
 
1146
          free(question_filename);
 
1147
          cleanup_task(&task);
 
1148
          return;
 
1149
        }
 
1150
        free(question_filename);
 
1151
      }
 
1152
    }
 
1153
  }
 
1154
 
 
1155
  /* Either data was read, or EAGAIN was indicated, meaning no data
 
1156
     available yet */
 
1157
 
 
1158
  /* Re-add myself to the queue */
 
1159
  if(not add_to_queue(queue, task)){
 
1160
    error(0, errno, "Failed to re-add read_inotify_event(%s) to"
 
1161
          " queue", filename);
 
1162
    *quit_now = true;
 
1163
    cleanup_task(&task);
 
1164
    return;
 
1165
  }
 
1166
 
 
1167
  /* Re-add the fd to the epoll set */
 
1168
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1169
                            &(struct epoll_event)
 
1170
                            { .events=EPOLLIN | EPOLLRDHUP });
 
1171
  if(ret != 0 and errno != EEXIST){
 
1172
    error(0, errno, "Failed to re-add inotify file descriptor %d for"
 
1173
          " directory %s to epoll set", fd, filename);
 
1174
    /* Force the added task (read_inotify_event) to run again, at most
 
1175
       one second from now */
 
1176
    if((queue->next_run == 0)
 
1177
       or (queue->next_run > (*current_time + 1000000))){
 
1178
      queue->next_run = *current_time + 1000000;
 
1179
    }
 
1180
  }
 
1181
}
 
1182
 
 
1183
__attribute__((nonnull))
 
1184
void open_and_parse_question(const task_context task,
 
1185
                             task_queue *const queue){
 
1186
  __attribute__((cleanup(cleanup_string)))
 
1187
    char *question_filename = task.question_filename;
 
1188
  const int epoll_fd = task.epoll_fd;
 
1189
  buffer *const password = task.password;
 
1190
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1191
  const mono_microsecs *const current_time = task.current_time;
 
1192
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1193
  bool *const password_is_read = task.password_is_read;
 
1194
 
 
1195
  /* We use the GLib "Key-value file parser" functions to parse the
 
1196
     question file.  See <https://systemd.io/PASSWORD_AGENTS/> for
 
1197
     specification of contents */
 
1198
  __attribute__((nonnull))
 
1199
    void cleanup_g_key_file(GKeyFile **key_file){
 
1200
    if(*key_file != NULL){
 
1201
      g_key_file_free(*key_file);
 
1202
    }
 
1203
  }
 
1204
 
 
1205
  __attribute__((cleanup(cleanup_g_key_file)))
 
1206
    GKeyFile *key_file = g_key_file_new();
 
1207
  if(key_file == NULL){
 
1208
    error(0, errno, "Failed g_key_file_new() for \"%s\"",
 
1209
          question_filename);
 
1210
    return;
 
1211
  }
 
1212
  GError *glib_error = NULL;
 
1213
  if(g_key_file_load_from_file(key_file, question_filename,
 
1214
                               G_KEY_FILE_NONE, &glib_error) != TRUE){
 
1215
    /* If a file was removed, we should ignore it, so */
 
1216
    /* only show error message if file actually existed */
 
1217
    if(glib_error->code != G_FILE_ERROR_NOENT){
 
1218
      error(0, 0, "Failed to load question data from file \"%s\": %s",
 
1219
            question_filename, glib_error->message);
 
1220
    }
 
1221
    return;
 
1222
  }
 
1223
 
 
1224
  __attribute__((cleanup(cleanup_string)))
 
1225
    char *socket_name = g_key_file_get_string(key_file, "Ask",
 
1226
                                              "Socket",
 
1227
                                              &glib_error);
 
1228
  if(socket_name == NULL){
 
1229
    error(0, 0, "Question file \"%s\" did not contain \"Socket\": %s",
 
1230
          question_filename, glib_error->message);
 
1231
    return;
 
1232
  }
 
1233
 
 
1234
  if(strlen(socket_name) == 0){
 
1235
    error(0, 0, "Question file \"%s\" had empty \"Socket\" value",
 
1236
          question_filename);
 
1237
    return;
 
1238
  }
 
1239
 
 
1240
  const guint64 pid = g_key_file_get_uint64(key_file, "Ask", "PID",
 
1241
                                            &glib_error);
 
1242
  if(glib_error != NULL){
 
1243
    error(0, 0, "Question file \"%s\" contained bad \"PID\": %s",
 
1244
          question_filename, glib_error->message);
 
1245
    return;
 
1246
  }
 
1247
 
 
1248
  if((pid != (guint64)((pid_t)pid))
 
1249
     or (kill((pid_t)pid, 0) != 0)){
 
1250
    error(0, 0, "PID %" PRIuMAX " in question file \"%s\" is bad or"
 
1251
          " does not exist", (uintmax_t)pid, question_filename);
 
1252
    return;
 
1253
  }
 
1254
 
 
1255
  guint64 notafter = g_key_file_get_uint64(key_file, "Ask",
 
1256
                                           "NotAfter", &glib_error);
 
1257
  if(glib_error != NULL){
 
1258
    if(glib_error->code != G_KEY_FILE_ERROR_KEY_NOT_FOUND){
 
1259
      error(0, 0, "Question file \"%s\" contained bad \"NotAfter\":"
 
1260
            " %s", question_filename, glib_error->message);
 
1261
    }
 
1262
    notafter = 0;
 
1263
  }
 
1264
  if(notafter != 0){
 
1265
    if(queue->next_run == 0 or (queue->next_run > notafter)){
 
1266
      queue->next_run = notafter;
 
1267
    }
 
1268
    if(*current_time >= notafter){
 
1269
      return;
 
1270
    }
 
1271
  }
 
1272
 
 
1273
  const task_context connect_question_socket_task = {
 
1274
    .func=connect_question_socket,
 
1275
    .question_filename=strdup(question_filename),
 
1276
    .epoll_fd=epoll_fd,
 
1277
    .password=password,
 
1278
    .filename=strdup(socket_name),
 
1279
    .cancelled_filenames=task.cancelled_filenames,
 
1280
    .mandos_client_exited=mandos_client_exited,
 
1281
    .password_is_read=password_is_read,
 
1282
    .current_time=current_time,
 
1283
  };
 
1284
  if(connect_question_socket_task.question_filename == NULL
 
1285
     or connect_question_socket_task.filename == NULL
 
1286
     or not add_to_queue(queue, connect_question_socket_task)){
 
1287
    error(0, errno, "Failed to add connect_question_socket for socket"
 
1288
          " %s (from \"%s\") to queue", socket_name,
 
1289
          question_filename);
 
1290
    cleanup_task(&connect_question_socket_task);
 
1291
    return;
 
1292
  }
 
1293
  /* Force the added task (connect_question_socket) to run
 
1294
     immediately */
 
1295
  queue->next_run = 1;
 
1296
 
 
1297
  if(notafter > 0){
 
1298
    char *const dup_filename = strdup(question_filename);
 
1299
    const task_context cancel_old_question_task = {
 
1300
      .func=cancel_old_question,
 
1301
      .question_filename=dup_filename,
 
1302
      .notafter=notafter,
 
1303
      .filename=dup_filename,
 
1304
      .cancelled_filenames=cancelled_filenames,
 
1305
      .current_time=current_time,
 
1306
    };
 
1307
    if(cancel_old_question_task.question_filename == NULL
 
1308
       or not add_to_queue(queue, cancel_old_question_task)){
 
1309
      error(0, errno, "Failed to add cancel_old_question for file "
 
1310
            "\"%s\" to queue", question_filename);
 
1311
      cleanup_task(&cancel_old_question_task);
 
1312
      return;
 
1313
    }
 
1314
  }
 
1315
}
 
1316
 
 
1317
__attribute__((nonnull))
 
1318
void cancel_old_question(const task_context task,
 
1319
                         task_queue *const queue){
 
1320
  char *const question_filename = task.question_filename;
 
1321
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1322
  const mono_microsecs notafter = task.notafter;
 
1323
  const mono_microsecs *const current_time = task.current_time;
 
1324
 
 
1325
  if(*current_time >= notafter){
 
1326
    if(not string_set_add(cancelled_filenames, question_filename)){
 
1327
      error(0, errno, "Failed to cancel question for file %s",
 
1328
            question_filename);
 
1329
    }
 
1330
    cleanup_task(&task);
 
1331
    return;
 
1332
  }
 
1333
 
 
1334
  if(not add_to_queue(queue, task)){
 
1335
    error(0, errno, "Failed to add cancel_old_question for file "
 
1336
          "%s to queue", question_filename);
 
1337
    cleanup_task(&task);
 
1338
    return;
 
1339
  }
 
1340
 
 
1341
  if((queue->next_run == 0) or (queue->next_run > notafter)){
 
1342
    queue->next_run = notafter;
 
1343
  }
 
1344
}
 
1345
 
 
1346
__attribute__((nonnull))
 
1347
void connect_question_socket(const task_context task,
 
1348
                             task_queue *const queue){
 
1349
  char *const question_filename = task.question_filename;
 
1350
  char *const filename = task.filename;
 
1351
  const int epoll_fd = task.epoll_fd;
 
1352
  buffer *const password = task.password;
 
1353
  string_set *const cancelled_filenames = task.cancelled_filenames;
 
1354
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1355
  bool *const password_is_read = task.password_is_read;
 
1356
  const mono_microsecs *const current_time = task.current_time;
 
1357
 
 
1358
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
1359
 
 
1360
  if(sizeof(sock_name.sun_path) <= strlen(filename)){
 
1361
    error(0, 0, "Socket filename is larger than"
 
1362
          " sizeof(sockaddr_un.sun_path); %" PRIuMAX ": \"%s\"",
 
1363
          (uintmax_t)sizeof(sock_name.sun_path), filename);
 
1364
    if(not string_set_add(cancelled_filenames, question_filename)){
 
1365
      error(0, errno, "Failed to cancel question for file %s",
 
1366
            question_filename);
 
1367
    }
 
1368
    cleanup_task(&task);
 
1369
    return;
 
1370
  }
 
1371
 
 
1372
  const int fd = socket(PF_LOCAL, SOCK_DGRAM
 
1373
                        | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
1374
  if(fd < 0){
 
1375
    error(0, errno,
 
1376
          "Failed to create socket(PF_LOCAL, SOCK_DGRAM, 0)");
 
1377
    if(not add_to_queue(queue, task)){
 
1378
      error(0, errno, "Failed to add connect_question_socket for file"
 
1379
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1380
            filename);
 
1381
      cleanup_task(&task);
 
1382
    } else {
 
1383
      /* Force the added task (connect_question_socket) to run
 
1384
         immediately */
 
1385
      queue->next_run = 1;
 
1386
    }
 
1387
    return;
 
1388
  }
 
1389
 
 
1390
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
1391
  if(connect(fd, (struct sockaddr *)&sock_name,
 
1392
             (socklen_t)SUN_LEN(&sock_name)) != 0){
 
1393
    error(0, errno, "Failed to connect socket to \"%s\"", filename);
 
1394
    if(not add_to_queue(queue, task)){
 
1395
      error(0, errno, "Failed to add connect_question_socket for file"
 
1396
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1397
            filename);
 
1398
      cleanup_task(&task);
 
1399
    } else {
 
1400
      /* Force the added task (connect_question_socket) to run again,
 
1401
         at most one second from now */
 
1402
      if((queue->next_run == 0)
 
1403
         or (queue->next_run > (*current_time + 1000000))){
 
1404
        queue->next_run = *current_time + 1000000;
 
1405
      }
 
1406
    }
 
1407
    return;
 
1408
  }
 
1409
 
 
1410
  /* Not necessary, but we can try, and merely warn on failure */
 
1411
  if(shutdown(fd, SHUT_RD) != 0){
 
1412
    error(0, errno, "Failed to shutdown reading from socket \"%s\"",
 
1413
          filename);
 
1414
  }
 
1415
 
 
1416
  /* Add the fd to the epoll set */
 
1417
  if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1418
               &(struct epoll_event){ .events=EPOLLOUT })
 
1419
     != 0){
 
1420
    error(0, errno, "Failed to add inotify file descriptor %d for"
 
1421
          " socket %s to epoll set", fd, filename);
 
1422
    if(not add_to_queue(queue, task)){
 
1423
      error(0, errno, "Failed to add connect_question_socket for file"
 
1424
            " \"%s\" and socket \"%s\" to queue", question_filename,
 
1425
            filename);
 
1426
      cleanup_task(&task);
 
1427
    } else {
 
1428
      /* Force the added task (connect_question_socket) to run again,
 
1429
         at most one second from now */
 
1430
      if((queue->next_run == 0)
 
1431
         or (queue->next_run > (*current_time + 1000000))){
 
1432
        queue->next_run = *current_time + 1000000;
 
1433
      }
 
1434
    }
 
1435
    return;
 
1436
  }
 
1437
 
 
1438
  /* add task send_password_to_socket to queue */
 
1439
  const task_context send_password_to_socket_task = {
 
1440
    .func=send_password_to_socket,
 
1441
    .question_filename=question_filename,
 
1442
    .filename=filename,
 
1443
    .epoll_fd=epoll_fd,
 
1444
    .fd=fd,
 
1445
    .password=password,
 
1446
    .cancelled_filenames=cancelled_filenames,
 
1447
    .mandos_client_exited=mandos_client_exited,
 
1448
    .password_is_read=password_is_read,
 
1449
    .current_time=current_time,
 
1450
  };
 
1451
 
 
1452
  if(not add_to_queue(queue, send_password_to_socket_task)){
 
1453
    error(0, errno, "Failed to add send_password_to_socket for"
 
1454
          " file \"%s\" and socket \"%s\" to queue",
 
1455
          question_filename, filename);
 
1456
    cleanup_task(&send_password_to_socket_task);
 
1457
  }
 
1458
}
 
1459
 
 
1460
__attribute__((nonnull))
 
1461
void send_password_to_socket(const task_context task,
 
1462
                             task_queue *const queue){
 
1463
  char *const question_filename=task.question_filename;
 
1464
  char *const filename=task.filename;
 
1465
  const int epoll_fd=task.epoll_fd;
 
1466
  const int fd=task.fd;
 
1467
  buffer *const password=task.password;
 
1468
  string_set *const cancelled_filenames=task.cancelled_filenames;
 
1469
  bool *const mandos_client_exited = task.mandos_client_exited;
 
1470
  bool *const password_is_read = task.password_is_read;
 
1471
  const mono_microsecs *const current_time = task.current_time;
 
1472
 
 
1473
  if(*mandos_client_exited and *password_is_read){
 
1474
 
 
1475
    const size_t send_buffer_length = password->length + 2;
 
1476
    char *send_buffer = malloc(send_buffer_length);
 
1477
    if(send_buffer == NULL){
 
1478
      error(0, errno, "Failed to allocate send_buffer");
 
1479
    } else {
 
1480
      if(mlock(send_buffer, send_buffer_length) != 0){
 
1481
        /* Warn but do not treat as fatal error */
 
1482
        if(errno != EPERM and errno != ENOMEM){
 
1483
          error(0, errno, "Failed to lock memory for password"
 
1484
                " buffer");
 
1485
        }
 
1486
      }
 
1487
      /* “[…] send a single datagram to the socket consisting of the
 
1488
         password string either prefixed with "+" or with "-"
 
1489
         depending on whether the password entry was successful or
 
1490
         not. You may but don't have to include a final NUL byte in
 
1491
         your message.
 
1492
 
 
1493
         — <https://systemd.io/PASSWORD_AGENTS/> (Tue, 15 Sep 2020
 
1494
         14:24:20 GMT)
 
1495
      */
 
1496
      send_buffer[0] = '+';     /* Prefix with "+" */
 
1497
      /* Always add an extra NUL */
 
1498
      send_buffer[password->length + 1] = '\0';
 
1499
      if(password->length > 0){
 
1500
        memcpy(send_buffer + 1, password->data, password->length);
 
1501
      }
 
1502
      errno = 0;
 
1503
      ssize_t ssret = send(fd, send_buffer, send_buffer_length,
 
1504
                           MSG_NOSIGNAL);
 
1505
      const error_t saved_errno = (ssret < 0) ? errno : 0;
 
1506
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
 
1507
      explicit_bzero(send_buffer, send_buffer_length);
 
1508
#else
 
1509
      memset(send_buffer, '\0', send_buffer_length);
 
1510
#endif
 
1511
      if(munlock(send_buffer, send_buffer_length) != 0){
 
1512
        error(0, errno, "Failed to unlock memory of send buffer");
 
1513
      }
 
1514
      free(send_buffer);
 
1515
      if(ssret < 0 or ssret < (ssize_t)send_buffer_length){
 
1516
        switch(saved_errno){
 
1517
        case EINTR:
 
1518
        case ENOBUFS:
 
1519
        case ENOMEM:
 
1520
        case EADDRINUSE:
 
1521
        case ECONNREFUSED:
 
1522
        case ECONNRESET:
 
1523
        case ENOENT:
 
1524
        case ETOOMANYREFS:
 
1525
        case EAGAIN:
 
1526
          /* Retry, below */
 
1527
          break;
 
1528
        case EMSGSIZE:
 
1529
          error(0, saved_errno, "Password of size %" PRIuMAX
 
1530
                " is too big", (uintmax_t)password->length);
 
1531
#if __GNUC__ < 7
 
1532
          /* FALLTHROUGH */
 
1533
#else
 
1534
          __attribute__((fallthrough));
 
1535
#endif
 
1536
        case 0:
 
1537
          if(ssret >= 0 and ssret < (ssize_t)send_buffer_length){
 
1538
            error(0, 0, "Password only partially sent to socket %s: %"
 
1539
                  PRIuMAX " out of %" PRIuMAX " bytes sent", filename,
 
1540
                  (uintmax_t)ssret, (uintmax_t)send_buffer_length);
 
1541
          }
 
1542
#if __GNUC__ < 7
 
1543
          /* FALLTHROUGH */
 
1544
#else
 
1545
          __attribute__((fallthrough));
 
1546
#endif
 
1547
        default:
 
1548
          error(0, saved_errno, "Failed to send() to socket %s",
 
1549
                filename);
 
1550
          if(not string_set_add(cancelled_filenames,
 
1551
                                question_filename)){
 
1552
            error(0, errno, "Failed to cancel question for file %s",
 
1553
                  question_filename);
 
1554
          }
 
1555
          cleanup_task(&task);
 
1556
          return;
 
1557
        }
 
1558
      } else {
 
1559
        /* Success */
 
1560
        cleanup_task(&task);
 
1561
        return;
 
1562
      }
 
1563
    }
 
1564
  }
 
1565
 
 
1566
  /* We failed or are not ready yet; retry later */
 
1567
 
 
1568
  if(not add_to_queue(queue, task)){
 
1569
    error(0, errno, "Failed to add send_password_to_socket for"
 
1570
          " file %s and socket %s to queue", question_filename,
 
1571
          filename);
 
1572
    cleanup_task(&task);
 
1573
  }
 
1574
 
 
1575
  /* Add the fd to the epoll set */
 
1576
  if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
 
1577
               &(struct epoll_event){ .events=EPOLLOUT })
 
1578
     != 0){
 
1579
    error(0, errno, "Failed to add socket file descriptor %d for"
 
1580
          " socket %s to epoll set", fd, filename);
 
1581
    /* Force the added task (send_password_to_socket) to run again, at
 
1582
       most one second from now */
 
1583
    if((queue->next_run == 0)
 
1584
       or (queue->next_run > (*current_time + 1000000))){
 
1585
      queue->next_run = *current_time + 1000000;
 
1586
    }
 
1587
  }
 
1588
}
 
1589
 
 
1590
__attribute__((warn_unused_result))
 
1591
bool add_existing_questions(task_queue *const queue,
 
1592
                            const int epoll_fd,
 
1593
                            buffer *const password,
 
1594
                            string_set *cancelled_filenames,
 
1595
                            const mono_microsecs *const current_time,
 
1596
                            bool *const mandos_client_exited,
 
1597
                            bool *const password_is_read,
 
1598
                            const char *const dirname){
 
1599
  __attribute__((cleanup(cleanup_string)))
 
1600
    char *dir_pattern = NULL;
 
1601
  const int ret = asprintf(&dir_pattern, "%s/ask.*", dirname);
 
1602
  if(ret < 0 or dir_pattern == NULL){
 
1603
    error(0, errno, "Could not create glob pattern for directory %s",
 
1604
          dirname);
 
1605
    return false;
 
1606
  }
 
1607
  __attribute__((cleanup(globfree)))
 
1608
    glob_t question_filenames = {};
 
1609
  switch(glob(dir_pattern, GLOB_ERR | GLOB_NOSORT | GLOB_MARK,
 
1610
              NULL, &question_filenames)){
 
1611
  case GLOB_ABORTED:
 
1612
  default:
 
1613
    error(0, errno, "Failed to open directory %s", dirname);
 
1614
    return false;
 
1615
  case GLOB_NOMATCH:
 
1616
    error(0, errno, "There are no question files in %s", dirname);
 
1617
    return false;
 
1618
  case GLOB_NOSPACE:
 
1619
    error(0, errno, "Could not allocate memory for question file"
 
1620
          " names in %s", dirname);
 
1621
#if __GNUC__ < 7
 
1622
    /* FALLTHROUGH */
 
1623
#else
 
1624
    __attribute__((fallthrough));
 
1625
#endif
 
1626
  case 0:
 
1627
    for(size_t i = 0; i < question_filenames.gl_pathc; i++){
 
1628
      char *const question_filename = strdup(question_filenames
 
1629
                                             .gl_pathv[i]);
 
1630
      const task_context task = {
 
1631
        .func=open_and_parse_question,
 
1632
        .epoll_fd=epoll_fd,
 
1633
        .question_filename=question_filename,
 
1634
        .filename=question_filename,
 
1635
        .password=password,
 
1636
        .cancelled_filenames=cancelled_filenames,
 
1637
        .current_time=current_time,
 
1638
        .mandos_client_exited=mandos_client_exited,
 
1639
        .password_is_read=password_is_read,
 
1640
      };
 
1641
 
 
1642
      if(question_filename == NULL
 
1643
         or not add_to_queue(queue, task)){
 
1644
        error(0, errno, "Failed to add open_and_parse_question for"
 
1645
              " file %s to queue",
 
1646
              question_filenames.gl_pathv[i]);
 
1647
        free(question_filename);
 
1648
      } else {
 
1649
        queue->next_run = 1;
 
1650
      }
 
1651
    }
 
1652
    return true;
 
1653
  }
 
1654
}
 
1655
 
 
1656
__attribute__((nonnull, warn_unused_result))
 
1657
bool wait_for_event(const int epoll_fd,
 
1658
                    const mono_microsecs queue_next_run,
 
1659
                    const mono_microsecs current_time){
 
1660
  __attribute__((const))
 
1661
    int milliseconds_to_wait(const mono_microsecs currtime,
 
1662
                             const mono_microsecs nextrun){
 
1663
    if(currtime >= nextrun){
 
1664
      return 0;
 
1665
    }
 
1666
    const uintmax_t wait_time_ms = (nextrun - currtime) / 1000;
 
1667
    if(wait_time_ms > (uintmax_t)INT_MAX){
 
1668
      return INT_MAX;
 
1669
    }
 
1670
    return (int)wait_time_ms;
 
1671
  }
 
1672
 
 
1673
  const int wait_time_ms = milliseconds_to_wait(current_time,
 
1674
                                                queue_next_run);
 
1675
 
 
1676
  /* Prepare unblocking of SIGCHLD during epoll_pwait */
 
1677
  sigset_t temporary_unblocked_sigmask;
 
1678
  /* Get current signal mask */
 
1679
  if(pthread_sigmask(-1, NULL, &temporary_unblocked_sigmask) != 0){
 
1680
    return false;
 
1681
  }
 
1682
  /* Remove SIGCHLD from the signal mask */
 
1683
  if(sigdelset(&temporary_unblocked_sigmask, SIGCHLD) != 0){
 
1684
    return false;
 
1685
  }
 
1686
  struct epoll_event events[8]; /* Ignored */
 
1687
  int ret = epoll_pwait(epoll_fd, events,
 
1688
                        sizeof(events) / sizeof(struct epoll_event),
 
1689
                        queue_next_run == 0 ? -1 : (int)wait_time_ms,
 
1690
                        &temporary_unblocked_sigmask);
 
1691
  if(ret < 0 and errno != EINTR){
 
1692
    error(0, errno, "Failed epoll_pwait(epfd=%d, ..., timeout=%d,"
 
1693
          " ...", epoll_fd,
 
1694
          queue_next_run == 0 ? -1 : (int)wait_time_ms);
 
1695
    return false;
 
1696
  }
 
1697
  return clear_all_fds_from_epoll_set(epoll_fd);
 
1698
}
 
1699
 
 
1700
bool clear_all_fds_from_epoll_set(const int epoll_fd){
 
1701
  /* Create a new empty epoll set */
 
1702
  __attribute__((cleanup(cleanup_close)))
 
1703
    const int new_epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
1704
  if(new_epoll_fd < 0){
 
1705
    return false;
 
1706
  }
 
1707
  /* dup3() the new epoll set fd over the old one, replacing it */
 
1708
  if(dup3(new_epoll_fd, epoll_fd, O_CLOEXEC) < 0){
 
1709
    return false;
 
1710
  }
 
1711
  return true;
 
1712
}
 
1713
 
 
1714
__attribute__((nonnull, warn_unused_result))
 
1715
bool run_queue(task_queue **const queue,
 
1716
               string_set *const cancelled_filenames,
 
1717
               bool *const quit_now){
 
1718
 
 
1719
  task_queue *new_queue = create_queue();
 
1720
  if(new_queue == NULL){
 
1721
    return false;
 
1722
  }
 
1723
 
 
1724
  __attribute__((cleanup(string_set_clear)))
 
1725
    string_set old_cancelled_filenames = {};
 
1726
  string_set_swap(cancelled_filenames, &old_cancelled_filenames);
 
1727
 
 
1728
  /* Declare i outside the for loop, since we might need i after the
 
1729
     loop in case we aborted in the middle */
 
1730
  size_t i;
 
1731
  for(i=0; i < (*queue)->length and not *quit_now; i++){
 
1732
    task_context *const task = &((*queue)->tasks[i]);
 
1733
    const char *const question_filename = task->question_filename;
 
1734
    /* Skip any task referencing a cancelled question filename */
 
1735
    if(question_filename != NULL
 
1736
       and string_set_contains(old_cancelled_filenames,
 
1737
                               question_filename)){
 
1738
      cleanup_task(task);
 
1739
      continue;
 
1740
    }
 
1741
    task->func(*task, new_queue);
 
1742
  }
 
1743
 
 
1744
  if(*quit_now){
 
1745
    /* we might be in the middle of the queue, so clean up any
 
1746
       remaining tasks in the current queue */
 
1747
    for(; i < (*queue)->length; i++){
 
1748
      cleanup_task(&((*queue)->tasks[i]));
 
1749
    }
 
1750
    free_queue(*queue);
 
1751
    *queue = new_queue;
 
1752
    new_queue = NULL;
 
1753
    return false;
 
1754
  }
 
1755
  free_queue(*queue);
 
1756
  *queue = new_queue;
 
1757
  new_queue = NULL;
 
1758
 
 
1759
  return true;
 
1760
}
 
1761
 
 
1762
/* End of regular code section */
 
1763
 
 
1764
/* Start of tests section; here are the tests for the above code */
 
1765
 
 
1766
/* This "fixture" data structure is used by the test setup and
 
1767
   teardown functions */
 
1768
typedef struct {
 
1769
  struct sigaction orig_sigaction;
 
1770
  sigset_t orig_sigmask;
 
1771
} test_fixture;
 
1772
 
 
1773
static void test_setup(test_fixture *fixture,
 
1774
                       __attribute__((unused))
 
1775
                       gconstpointer user_data){
 
1776
  g_assert_true(setup_signal_handler(&fixture->orig_sigaction));
 
1777
  g_assert_true(block_sigchld(&fixture->orig_sigmask));
 
1778
}
 
1779
 
 
1780
static void test_teardown(test_fixture *fixture,
 
1781
                          __attribute__((unused))
 
1782
                          gconstpointer user_data){
 
1783
  g_assert_true(restore_signal_handler(&fixture->orig_sigaction));
 
1784
  g_assert_true(restore_sigmask(&fixture->orig_sigmask));
 
1785
}
 
1786
 
 
1787
/* Utility function used by tests to search queue for matching task */
 
1788
__attribute__((pure, nonnull, warn_unused_result))
 
1789
static task_context *find_matching_task(const task_queue *const queue,
 
1790
                                        const task_context task){
 
1791
  /* The argument "task" structure is a pattern to match; 0 in any
 
1792
     member means any value matches, otherwise the value must match.
 
1793
     The filename strings are compared by strcmp(), not by pointer. */
 
1794
  for(size_t i = 0; i < queue->length; i++){
 
1795
    task_context *const current_task = queue->tasks+i;
 
1796
    /* Check all members of task_context, if set to a non-zero value.
 
1797
       If a member does not match, continue to next task in queue */
 
1798
 
 
1799
    /* task_func *const func */
 
1800
    if(task.func != NULL and current_task->func != task.func){
 
1801
      continue;
 
1802
    }
 
1803
    /* char *const question_filename; */
 
1804
    if(task.question_filename != NULL
 
1805
       and (current_task->question_filename == NULL
 
1806
            or strcmp(current_task->question_filename,
 
1807
                      task.question_filename) != 0)){
 
1808
      continue;
 
1809
    }
 
1810
    /* const pid_t pid; */
 
1811
    if(task.pid != 0 and current_task->pid != task.pid){
 
1812
      continue;
 
1813
    }
 
1814
    /* const int epoll_fd; */
 
1815
    if(task.epoll_fd != 0
 
1816
       and current_task->epoll_fd != task.epoll_fd){
 
1817
      continue;
 
1818
    }
 
1819
    /* bool *const quit_now; */
 
1820
    if(task.quit_now != NULL
 
1821
       and current_task->quit_now != task.quit_now){
 
1822
      continue;
 
1823
    }
 
1824
    /* const int fd; */
 
1825
    if(task.fd != 0 and current_task->fd != task.fd){
 
1826
      continue;
 
1827
    }
 
1828
    /* bool *const mandos_client_exited; */
 
1829
    if(task.mandos_client_exited != NULL
 
1830
       and current_task->mandos_client_exited
 
1831
       != task.mandos_client_exited){
 
1832
      continue;
 
1833
    }
 
1834
    /* buffer *const password; */
 
1835
    if(task.password != NULL
 
1836
       and current_task->password != task.password){
 
1837
      continue;
 
1838
    }
 
1839
    /* bool *const password_is_read; */
 
1840
    if(task.password_is_read != NULL
 
1841
       and current_task->password_is_read != task.password_is_read){
 
1842
      continue;
 
1843
    }
 
1844
    /* char *filename; */
 
1845
    if(task.filename != NULL
 
1846
       and (current_task->filename == NULL
 
1847
            or strcmp(current_task->filename, task.filename) != 0)){
 
1848
      continue;
 
1849
    }
 
1850
    /* string_set *const cancelled_filenames; */
 
1851
    if(task.cancelled_filenames != NULL
 
1852
       and current_task->cancelled_filenames
 
1853
       != task.cancelled_filenames){
 
1854
      continue;
 
1855
    }
 
1856
    /* const mono_microsecs notafter; */
 
1857
    if(task.notafter != 0
 
1858
       and current_task->notafter != task.notafter){
 
1859
      continue;
 
1860
    }
 
1861
    /* const mono_microsecs *const current_time; */
 
1862
    if(task.current_time != NULL
 
1863
       and current_task->current_time != task.current_time){
 
1864
      continue;
 
1865
    }
 
1866
    /* Current task matches all members; return it */
 
1867
    return current_task;
 
1868
  }
 
1869
  /* No task in queue matches passed pattern task */
 
1870
  return NULL;
 
1871
}
 
1872
 
 
1873
static void test_create_queue(__attribute__((unused))
 
1874
                              test_fixture *fixture,
 
1875
                              __attribute__((unused))
 
1876
                              gconstpointer user_data){
 
1877
  __attribute__((cleanup(cleanup_queue)))
 
1878
    task_queue *const queue = create_queue();
 
1879
  g_assert_nonnull(queue);
 
1880
  g_assert_null(queue->tasks);
 
1881
  g_assert_true(queue->length == 0);
 
1882
  g_assert_true(queue->next_run == 0);
 
1883
}
 
1884
 
 
1885
static task_func dummy_func;
 
1886
 
 
1887
static void test_add_to_queue(__attribute__((unused))
 
1888
                              test_fixture *fixture,
 
1889
                              __attribute__((unused))
 
1890
                              gconstpointer user_data){
 
1891
  __attribute__((cleanup(cleanup_queue)))
 
1892
    task_queue *queue = create_queue();
 
1893
  g_assert_nonnull(queue);
 
1894
 
 
1895
  g_assert_true(add_to_queue(queue,
 
1896
                             (task_context){ .func=dummy_func }));
 
1897
  g_assert_true(queue->length == 1);
 
1898
  g_assert_nonnull(queue->tasks);
 
1899
  g_assert_true(queue->tasks[0].func == dummy_func);
 
1900
}
 
1901
 
 
1902
static void test_add_to_queue_overflow(__attribute__((unused))
 
1903
                                       test_fixture *fixture,
 
1904
                                       __attribute__((unused))
 
1905
                                       gconstpointer user_data){
 
1906
  __attribute__((cleanup(cleanup_queue)))
 
1907
    task_queue *queue = create_queue();
 
1908
  g_assert_nonnull(queue);
 
1909
  g_assert_true(queue->length == 0);
 
1910
  queue->length = SIZE_MAX / sizeof(task_context); /* fake max size */
 
1911
 
 
1912
  FILE *real_stderr = stderr;
 
1913
  FILE *devnull = fopen("/dev/null", "we");
 
1914
  g_assert_nonnull(devnull);
 
1915
  stderr = devnull;
 
1916
  const bool ret = add_to_queue(queue,
 
1917
                                (task_context){ .func=dummy_func });
 
1918
  g_assert_true(errno == ENOMEM);
 
1919
  g_assert_false(ret);
 
1920
  stderr = real_stderr;
 
1921
  g_assert_cmpint(fclose(devnull), ==, 0);
 
1922
  queue->length = 0;            /* Restore real size */
 
1923
}
 
1924
 
 
1925
static void dummy_func(__attribute__((unused))
 
1926
                       const task_context task,
 
1927
                       __attribute__((unused))
 
1928
                       task_queue *const queue){
 
1929
}
 
1930
 
 
1931
static void test_queue_has_question_empty(__attribute__((unused))
 
1932
                                          test_fixture *fixture,
 
1933
                                          __attribute__((unused))
 
1934
                                          gconstpointer user_data){
 
1935
  __attribute__((cleanup(cleanup_queue)))
 
1936
    task_queue *queue = create_queue();
 
1937
  g_assert_nonnull(queue);
 
1938
  g_assert_false(queue_has_question(queue));
 
1939
}
 
1940
 
 
1941
static void test_queue_has_question_false(__attribute__((unused))
 
1942
                                          test_fixture *fixture,
 
1943
                                          __attribute__((unused))
 
1944
                                          gconstpointer user_data){
 
1945
  __attribute__((cleanup(cleanup_queue)))
 
1946
    task_queue *queue = create_queue();
 
1947
  g_assert_nonnull(queue);
 
1948
  g_assert_true(add_to_queue(queue,
 
1949
                             (task_context){ .func=dummy_func }));
 
1950
  g_assert_false(queue_has_question(queue));
 
1951
}
 
1952
 
 
1953
static void test_queue_has_question_true(__attribute__((unused))
 
1954
                                         test_fixture *fixture,
 
1955
                                         __attribute__((unused))
 
1956
                                         gconstpointer user_data){
 
1957
  __attribute__((cleanup(cleanup_queue)))
 
1958
    task_queue *queue = create_queue();
 
1959
  g_assert_nonnull(queue);
 
1960
  char *const question_filename
 
1961
    = strdup("/nonexistent/question_filename");
 
1962
  g_assert_nonnull(question_filename);
 
1963
  task_context task = {
 
1964
    .func=dummy_func,
 
1965
    .question_filename=question_filename,
 
1966
  };
 
1967
  g_assert_true(add_to_queue(queue, task));
 
1968
  g_assert_true(queue_has_question(queue));
 
1969
}
 
1970
 
 
1971
static void test_queue_has_question_false2(__attribute__((unused))
 
1972
                                           test_fixture *fixture,
 
1973
                                           __attribute__((unused))
 
1974
                                           gconstpointer user_data){
 
1975
  __attribute__((cleanup(cleanup_queue)))
 
1976
    task_queue *queue = create_queue();
 
1977
  g_assert_nonnull(queue);
 
1978
  task_context task = { .func=dummy_func };
 
1979
  g_assert_true(add_to_queue(queue, task));
 
1980
  g_assert_true(add_to_queue(queue, task));
 
1981
  g_assert_cmpint((int)queue->length, ==, 2);
 
1982
  g_assert_false(queue_has_question(queue));
 
1983
}
 
1984
 
 
1985
static void test_queue_has_question_true2(__attribute__((unused))
 
1986
                                          test_fixture *fixture,
 
1987
                                          __attribute__((unused))
 
1988
                                          gconstpointer user_data){
 
1989
  __attribute__((cleanup(cleanup_queue)))
 
1990
    task_queue *queue = create_queue();
 
1991
  g_assert_nonnull(queue);
 
1992
  task_context task1 = { .func=dummy_func };
 
1993
  g_assert_true(add_to_queue(queue, task1));
 
1994
  char *const question_filename
 
1995
    = strdup("/nonexistent/question_filename");
 
1996
  g_assert_nonnull(question_filename);
 
1997
  task_context task2 = {
 
1998
    .func=dummy_func,
 
1999
    .question_filename=question_filename,
 
2000
  };
 
2001
  g_assert_true(add_to_queue(queue, task2));
 
2002
  g_assert_cmpint((int)queue->length, ==, 2);
 
2003
  g_assert_true(queue_has_question(queue));
 
2004
}
 
2005
 
 
2006
static void test_cleanup_buffer(__attribute__((unused))
 
2007
                                test_fixture *fixture,
 
2008
                                __attribute__((unused))
 
2009
                                gconstpointer user_data){
 
2010
  buffer buf = {};
 
2011
 
 
2012
  const size_t buffersize = 10;
 
2013
 
 
2014
  buf.data = malloc(buffersize);
 
2015
  g_assert_nonnull(buf.data);
 
2016
  if(mlock(buf.data, buffersize) != 0){
 
2017
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
2018
  }
 
2019
 
 
2020
  cleanup_buffer(&buf);
 
2021
  g_assert_null(buf.data);
 
2022
}
 
2023
 
 
2024
static
 
2025
void test_string_set_new_set_contains_nothing(__attribute__((unused))
 
2026
                                              test_fixture *fixture,
 
2027
                                              __attribute__((unused))
 
2028
                                              gconstpointer
 
2029
                                              user_data){
 
2030
  __attribute__((cleanup(string_set_clear)))
 
2031
    string_set set = {};
 
2032
  g_assert_false(string_set_contains(set, "")); /* Empty string */
 
2033
  g_assert_false(string_set_contains(set, "test_string"));
 
2034
}
 
2035
 
 
2036
static void
 
2037
test_string_set_with_added_string_contains_it(__attribute__((unused))
 
2038
                                              test_fixture *fixture,
 
2039
                                              __attribute__((unused))
 
2040
                                              gconstpointer
 
2041
                                              user_data){
 
2042
  __attribute__((cleanup(string_set_clear)))
 
2043
    string_set set = {};
 
2044
  g_assert_true(string_set_add(&set, "test_string"));
 
2045
  g_assert_true(string_set_contains(set, "test_string"));
 
2046
}
 
2047
 
 
2048
static void
 
2049
test_string_set_cleared_does_not_contain_str(__attribute__((unused))
 
2050
                                             test_fixture *fixture,
 
2051
                                             __attribute__((unused))
 
2052
                                             gconstpointer user_data){
 
2053
  __attribute__((cleanup(string_set_clear)))
 
2054
    string_set set = {};
 
2055
  g_assert_true(string_set_add(&set, "test_string"));
 
2056
  string_set_clear(&set);
 
2057
  g_assert_false(string_set_contains(set, "test_string"));
 
2058
}
 
2059
 
 
2060
static
 
2061
void test_string_set_swap_one_with_empty(__attribute__((unused))
 
2062
                                         test_fixture *fixture,
 
2063
                                         __attribute__((unused))
 
2064
                                         gconstpointer user_data){
 
2065
  __attribute__((cleanup(string_set_clear)))
 
2066
    string_set set1 = {};
 
2067
  __attribute__((cleanup(string_set_clear)))
 
2068
    string_set set2 = {};
 
2069
  g_assert_true(string_set_add(&set1, "test_string1"));
 
2070
  string_set_swap(&set1, &set2);
 
2071
  g_assert_false(string_set_contains(set1, "test_string1"));
 
2072
  g_assert_true(string_set_contains(set2, "test_string1"));
 
2073
}
 
2074
 
 
2075
static
 
2076
void test_string_set_swap_empty_with_one(__attribute__((unused))
 
2077
                                         test_fixture *fixture,
 
2078
                                         __attribute__((unused))
 
2079
                                         gconstpointer user_data){
 
2080
  __attribute__((cleanup(string_set_clear)))
 
2081
    string_set set1 = {};
 
2082
  __attribute__((cleanup(string_set_clear)))
 
2083
    string_set set2 = {};
 
2084
  g_assert_true(string_set_add(&set2, "test_string2"));
 
2085
  string_set_swap(&set1, &set2);
 
2086
  g_assert_true(string_set_contains(set1, "test_string2"));
 
2087
  g_assert_false(string_set_contains(set2, "test_string2"));
 
2088
}
 
2089
 
 
2090
static void test_string_set_swap_one_with_one(__attribute__((unused))
 
2091
                                              test_fixture *fixture,
 
2092
                                              __attribute__((unused))
 
2093
                                              gconstpointer
 
2094
                                              user_data){
 
2095
  __attribute__((cleanup(string_set_clear)))
 
2096
    string_set set1 = {};
 
2097
  __attribute__((cleanup(string_set_clear)))
 
2098
    string_set set2 = {};
 
2099
  g_assert_true(string_set_add(&set1, "test_string1"));
 
2100
  g_assert_true(string_set_add(&set2, "test_string2"));
 
2101
  string_set_swap(&set1, &set2);
 
2102
  g_assert_false(string_set_contains(set1, "test_string1"));
 
2103
  g_assert_true(string_set_contains(set1, "test_string2"));
 
2104
  g_assert_false(string_set_contains(set2, "test_string2"));
 
2105
  g_assert_true(string_set_contains(set2, "test_string1"));
 
2106
}
 
2107
 
 
2108
static bool fd_has_cloexec_and_nonblock(const int);
 
2109
 
 
2110
static bool epoll_set_contains(int, int, uint32_t);
 
2111
 
 
2112
static void test_start_mandos_client(test_fixture *fixture,
 
2113
                                     __attribute__((unused))
 
2114
                                     gconstpointer user_data){
 
2115
 
 
2116
  bool mandos_client_exited = false;
 
2117
  bool quit_now = false;
 
2118
  __attribute__((cleanup(cleanup_close)))
 
2119
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2120
  g_assert_cmpint(epoll_fd, >=, 0);
 
2121
  __attribute__((cleanup(cleanup_queue)))
 
2122
    task_queue *queue = create_queue();
 
2123
  g_assert_nonnull(queue);
 
2124
  buffer password = {};
 
2125
  bool password_is_read = false;
 
2126
  const char helper_directory[] = "/nonexistent";
 
2127
  const char *const argv[] = { "/bin/true", NULL };
 
2128
 
 
2129
  g_assert_true(start_mandos_client(queue, epoll_fd,
 
2130
                                    &mandos_client_exited, &quit_now,
 
2131
                                    &password, &password_is_read,
 
2132
                                    &fixture->orig_sigaction,
 
2133
                                    fixture->orig_sigmask,
 
2134
                                    helper_directory, 0, 0, argv));
 
2135
 
 
2136
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
2137
 
 
2138
  const task_context *const added_wait_task
 
2139
    = find_matching_task(queue, (task_context){
 
2140
        .func=wait_for_mandos_client_exit,
 
2141
        .mandos_client_exited=&mandos_client_exited,
 
2142
        .quit_now=&quit_now,
 
2143
      });
 
2144
  g_assert_nonnull(added_wait_task);
 
2145
  g_assert_cmpint(added_wait_task->pid, >, 0);
 
2146
  g_assert_cmpint(kill(added_wait_task->pid, SIGKILL), ==, 0);
 
2147
  waitpid(added_wait_task->pid, NULL, 0);
 
2148
 
 
2149
  const task_context *const added_read_task
 
2150
    = find_matching_task(queue, (task_context){
 
2151
        .func=read_mandos_client_output,
 
2152
        .epoll_fd=epoll_fd,
 
2153
        .password=&password,
 
2154
        .password_is_read=&password_is_read,
 
2155
        .quit_now=&quit_now,
 
2156
      });
 
2157
  g_assert_nonnull(added_read_task);
 
2158
  g_assert_cmpint(added_read_task->fd, >, 2);
 
2159
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
2160
  g_assert_true(epoll_set_contains(epoll_fd, added_read_task->fd,
 
2161
                                   EPOLLIN | EPOLLRDHUP));
 
2162
}
 
2163
 
 
2164
static bool fd_has_cloexec_and_nonblock(const int fd){
 
2165
  const int socket_fd_flags = fcntl(fd, F_GETFD, 0);
 
2166
  const int socket_file_flags = fcntl(fd, F_GETFL, 0);
 
2167
  return ((socket_fd_flags >= 0)
 
2168
          and (socket_fd_flags & FD_CLOEXEC)
 
2169
          and (socket_file_flags >= 0)
 
2170
          and (socket_file_flags & O_NONBLOCK));
 
2171
}
 
2172
 
 
2173
__attribute__((const))
 
2174
bool is_privileged(void){
 
2175
  uid_t user = getuid() + 1;
 
2176
  if(user == 0){                /* Overflow check */
 
2177
    user++;
 
2178
  }
 
2179
  gid_t group = getuid() + 1;
 
2180
  if(group == 0){               /* Overflow check */
 
2181
    group++;
 
2182
  }
 
2183
  const pid_t pid = fork();
 
2184
  if(pid == 0){                 /* Child */
 
2185
    if(setresgid((uid_t)-1, group, group) == -1){
 
2186
      if(errno != EPERM){
 
2187
        error(EXIT_FAILURE, errno, "Failed to setresgid(-1, %" PRIuMAX
 
2188
              ", %" PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
 
2189
      }
 
2190
      exit(EXIT_FAILURE);
 
2191
    }
 
2192
    if(setresuid((uid_t)-1, user, user) == -1){
 
2193
      if(errno != EPERM){
 
2194
        error(EXIT_FAILURE, errno, "Failed to setresuid(-1, %" PRIuMAX
 
2195
              ", %" PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
 
2196
      }
 
2197
      exit(EXIT_FAILURE);
 
2198
    }
 
2199
    exit(EXIT_SUCCESS);
 
2200
  }
 
2201
  if(pid == -1){
 
2202
    error(EXIT_FAILURE, errno, "Failed to fork()");
 
2203
  }
 
2204
 
 
2205
  int status;
 
2206
  waitpid(pid, &status, 0);
 
2207
  if(WIFEXITED(status) and (WEXITSTATUS(status) == EXIT_SUCCESS)){
 
2208
    return true;
 
2209
  }
 
2210
  return false;
 
2211
}
 
2212
 
 
2213
static bool epoll_set_contains(int epoll_fd, int fd, uint32_t events){
 
2214
  /* Only scan for events in this eventmask */
 
2215
  const uint32_t eventmask = EPOLLIN | EPOLLOUT | EPOLLRDHUP;
 
2216
  __attribute__((cleanup(cleanup_string)))
 
2217
    char *fdinfo_name = NULL;
 
2218
  int ret = asprintf(&fdinfo_name, "/proc/self/fdinfo/%d", epoll_fd);
 
2219
  g_assert_cmpint(ret, >, 0);
 
2220
  g_assert_nonnull(fdinfo_name);
 
2221
 
 
2222
  FILE *fdinfo = fopen(fdinfo_name, "r");
 
2223
  g_assert_nonnull(fdinfo);
 
2224
  uint32_t reported_events;
 
2225
  buffer line = {};
 
2226
  int found_fd = -1;
 
2227
 
 
2228
  do {
 
2229
    if(getline(&line.data, &line.allocated, fdinfo) < 0){
 
2230
      break;
 
2231
    }
 
2232
    /* See proc(5) for format of /proc/PID/fdinfo/FD for epoll fd's */
 
2233
    if(sscanf(line.data, "tfd: %d events: %" SCNx32 " ",
 
2234
              &found_fd, &reported_events) == 2){
 
2235
      if(found_fd == fd){
 
2236
        break;
 
2237
      }
 
2238
    }
 
2239
  } while(not feof(fdinfo) and not ferror(fdinfo));
 
2240
  g_assert_cmpint(fclose(fdinfo), ==, 0);
 
2241
  free(line.data);
 
2242
  if(found_fd != fd){
 
2243
    return false;
 
2244
  }
 
2245
 
 
2246
  if(events == 0){
 
2247
    /* Don't check events if none are given */
 
2248
    return true;
 
2249
  }
 
2250
  return (reported_events & eventmask) == (events & eventmask);
 
2251
}
 
2252
 
 
2253
static void test_start_mandos_client_execv(test_fixture *fixture,
 
2254
                                           __attribute__((unused))
 
2255
                                           gconstpointer user_data){
 
2256
  bool mandos_client_exited = false;
 
2257
  bool quit_now = false;
 
2258
  __attribute__((cleanup(cleanup_close)))
 
2259
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2260
  g_assert_cmpint(epoll_fd, >=, 0);
 
2261
  __attribute__((cleanup(cleanup_queue)))
 
2262
    task_queue *queue = create_queue();
 
2263
  g_assert_nonnull(queue);
 
2264
  __attribute__((cleanup(cleanup_buffer)))
 
2265
    buffer password = {};
 
2266
  const char helper_directory[] = "/nonexistent";
 
2267
  /* Can't execv("/", ...), so this should fail */
 
2268
  const char *const argv[] = { "/", NULL };
 
2269
 
 
2270
  {
 
2271
    __attribute__((cleanup(cleanup_close)))
 
2272
      const int devnull_fd = open("/dev/null",
 
2273
                                  O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2274
    g_assert_cmpint(devnull_fd, >=, 0);
 
2275
    __attribute__((cleanup(cleanup_close)))
 
2276
      const int real_stderr_fd = dup(STDERR_FILENO);
 
2277
    g_assert_cmpint(real_stderr_fd, >=, 0);
 
2278
    dup2(devnull_fd, STDERR_FILENO);
 
2279
 
 
2280
    const bool success = start_mandos_client(queue, epoll_fd,
 
2281
                                             &mandos_client_exited,
 
2282
                                             &quit_now,
 
2283
                                             &password,
 
2284
                                             (bool[]){false},
 
2285
                                             &fixture->orig_sigaction,
 
2286
                                             fixture->orig_sigmask,
 
2287
                                             helper_directory, 0, 0,
 
2288
                                             argv);
 
2289
    dup2(real_stderr_fd, STDERR_FILENO);
 
2290
    g_assert_true(success);
 
2291
  }
 
2292
  g_assert_cmpuint((unsigned int)queue->length, ==, 2);
 
2293
 
 
2294
  struct timespec starttime, currtime;
 
2295
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2296
  do {
 
2297
    queue->next_run = 0;
 
2298
    string_set cancelled_filenames = {};
 
2299
 
 
2300
    {
 
2301
      __attribute__((cleanup(cleanup_close)))
 
2302
        const int devnull_fd = open("/dev/null",
 
2303
                                    O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2304
      g_assert_cmpint(devnull_fd, >=, 0);
 
2305
      __attribute__((cleanup(cleanup_close)))
 
2306
        const int real_stderr_fd = dup(STDERR_FILENO);
 
2307
      g_assert_cmpint(real_stderr_fd, >=, 0);
 
2308
      g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2309
      dup2(devnull_fd, STDERR_FILENO);
 
2310
      const bool success = run_queue(&queue, &cancelled_filenames,
 
2311
                                     &quit_now);
 
2312
      dup2(real_stderr_fd, STDERR_FILENO);
 
2313
      if(not success){
 
2314
        break;
 
2315
      }
 
2316
    }
 
2317
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2318
  } while(((queue->length) > 0)
 
2319
          and (not quit_now)
 
2320
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2321
 
 
2322
  g_assert_true(quit_now);
 
2323
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2324
  g_assert_true(mandos_client_exited);
 
2325
}
 
2326
 
 
2327
static void test_start_mandos_client_suid_euid(test_fixture *fixture,
 
2328
                                               __attribute__((unused))
 
2329
                                               gconstpointer
 
2330
                                               user_data){
 
2331
  if(not is_privileged()){
 
2332
    g_test_skip("Not privileged");
 
2333
    return;
 
2334
  }
 
2335
 
 
2336
  bool mandos_client_exited = false;
 
2337
  bool quit_now = false;
 
2338
  __attribute__((cleanup(cleanup_close)))
 
2339
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2340
  g_assert_cmpint(epoll_fd, >=, 0);
 
2341
  __attribute__((cleanup(cleanup_queue)))
 
2342
    task_queue *queue = create_queue();
 
2343
  g_assert_nonnull(queue);
 
2344
  __attribute__((cleanup(cleanup_buffer)))
 
2345
    buffer password = {};
 
2346
  bool password_is_read = false;
 
2347
  const char helper_directory[] = "/nonexistent";
 
2348
  const char *const argv[] = { "/usr/bin/id", "--user", NULL };
 
2349
  uid_t user = 1000;
 
2350
  gid_t group = 1001;
 
2351
 
 
2352
  const bool success = start_mandos_client(queue, epoll_fd,
 
2353
                                           &mandos_client_exited,
 
2354
                                           &quit_now, &password,
 
2355
                                           &password_is_read,
 
2356
                                           &fixture->orig_sigaction,
 
2357
                                           fixture->orig_sigmask,
 
2358
                                           helper_directory, user,
 
2359
                                           group, argv);
 
2360
  g_assert_true(success);
 
2361
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2362
 
 
2363
  struct timespec starttime, currtime;
 
2364
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2365
  do {
 
2366
    queue->next_run = 0;
 
2367
    string_set cancelled_filenames = {};
 
2368
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2369
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2370
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2371
  } while(((queue->length) > 0)
 
2372
          and (not quit_now)
 
2373
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2374
 
 
2375
  g_assert_false(quit_now);
 
2376
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2377
  g_assert_true(mandos_client_exited);
 
2378
 
 
2379
  g_assert_true(password_is_read);
 
2380
  g_assert_nonnull(password.data);
 
2381
 
 
2382
  uintmax_t id;
 
2383
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2384
                  ==, 1);
 
2385
  g_assert_true((uid_t)id == id);
 
2386
 
 
2387
  g_assert_cmpuint((unsigned int)id, ==, 0);
 
2388
}
 
2389
 
 
2390
static void test_start_mandos_client_suid_egid(test_fixture *fixture,
 
2391
                                               __attribute__((unused))
 
2392
                                               gconstpointer
 
2393
                                               user_data){
 
2394
  if(not is_privileged()){
 
2395
    g_test_skip("Not privileged");
 
2396
    return;
 
2397
  }
 
2398
 
 
2399
  bool mandos_client_exited = false;
 
2400
  bool quit_now = false;
 
2401
  __attribute__((cleanup(cleanup_close)))
 
2402
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2403
  g_assert_cmpint(epoll_fd, >=, 0);
 
2404
  __attribute__((cleanup(cleanup_queue)))
 
2405
    task_queue *queue = create_queue();
 
2406
  g_assert_nonnull(queue);
 
2407
  __attribute__((cleanup(cleanup_buffer)))
 
2408
    buffer password = {};
 
2409
  bool password_is_read = false;
 
2410
  const char helper_directory[] = "/nonexistent";
 
2411
  const char *const argv[] = { "/usr/bin/id", "--group", NULL };
 
2412
  uid_t user = 1000;
 
2413
  gid_t group = 1001;
 
2414
 
 
2415
  const bool success = start_mandos_client(queue, epoll_fd,
 
2416
                                           &mandos_client_exited,
 
2417
                                           &quit_now, &password,
 
2418
                                           &password_is_read,
 
2419
                                           &fixture->orig_sigaction,
 
2420
                                           fixture->orig_sigmask,
 
2421
                                           helper_directory, user,
 
2422
                                           group, argv);
 
2423
  g_assert_true(success);
 
2424
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2425
 
 
2426
  struct timespec starttime, currtime;
 
2427
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2428
  do {
 
2429
    queue->next_run = 0;
 
2430
    string_set cancelled_filenames = {};
 
2431
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2432
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2433
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2434
  } while(((queue->length) > 0)
 
2435
          and (not quit_now)
 
2436
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2437
 
 
2438
  g_assert_false(quit_now);
 
2439
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2440
  g_assert_true(mandos_client_exited);
 
2441
 
 
2442
  g_assert_true(password_is_read);
 
2443
  g_assert_nonnull(password.data);
 
2444
 
 
2445
  uintmax_t id;
 
2446
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2447
                  ==, 1);
 
2448
  g_assert_true((gid_t)id == id);
 
2449
 
 
2450
  g_assert_cmpuint((unsigned int)id, ==, 0);
 
2451
}
 
2452
 
 
2453
static void test_start_mandos_client_suid_ruid(test_fixture *fixture,
 
2454
                                               __attribute__((unused))
 
2455
                                               gconstpointer
 
2456
                                               user_data){
 
2457
  if(not is_privileged()){
 
2458
    g_test_skip("Not privileged");
 
2459
    return;
 
2460
  }
 
2461
 
 
2462
  bool mandos_client_exited = false;
 
2463
  bool quit_now = false;
 
2464
  __attribute__((cleanup(cleanup_close)))
 
2465
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2466
  g_assert_cmpint(epoll_fd, >=, 0);
 
2467
  __attribute__((cleanup(cleanup_queue)))
 
2468
    task_queue *queue = create_queue();
 
2469
  g_assert_nonnull(queue);
 
2470
  __attribute__((cleanup(cleanup_buffer)))
 
2471
    buffer password = {};
 
2472
  bool password_is_read = false;
 
2473
  const char helper_directory[] = "/nonexistent";
 
2474
  const char *const argv[] = { "/usr/bin/id", "--user", "--real",
 
2475
    NULL };
 
2476
  uid_t user = 1000;
 
2477
  gid_t group = 1001;
 
2478
 
 
2479
  const bool success = start_mandos_client(queue, epoll_fd,
 
2480
                                           &mandos_client_exited,
 
2481
                                           &quit_now, &password,
 
2482
                                           &password_is_read,
 
2483
                                           &fixture->orig_sigaction,
 
2484
                                           fixture->orig_sigmask,
 
2485
                                           helper_directory, user,
 
2486
                                           group, argv);
 
2487
  g_assert_true(success);
 
2488
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2489
 
 
2490
  struct timespec starttime, currtime;
 
2491
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2492
  do {
 
2493
    queue->next_run = 0;
 
2494
    string_set cancelled_filenames = {};
 
2495
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2496
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2497
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2498
  } while(((queue->length) > 0)
 
2499
          and (not quit_now)
 
2500
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2501
 
 
2502
  g_assert_false(quit_now);
 
2503
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2504
  g_assert_true(mandos_client_exited);
 
2505
 
 
2506
  g_assert_true(password_is_read);
 
2507
  g_assert_nonnull(password.data);
 
2508
 
 
2509
  uintmax_t id;
 
2510
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2511
                  ==, 1);
 
2512
  g_assert_true((uid_t)id == id);
 
2513
 
 
2514
  g_assert_cmpuint((unsigned int)id, ==, user);
 
2515
}
 
2516
 
 
2517
static void test_start_mandos_client_suid_rgid(test_fixture *fixture,
 
2518
                                               __attribute__((unused))
 
2519
                                               gconstpointer
 
2520
                                               user_data){
 
2521
  if(not is_privileged()){
 
2522
    g_test_skip("Not privileged");
 
2523
    return;
 
2524
  }
 
2525
 
 
2526
  bool mandos_client_exited = false;
 
2527
  bool quit_now = false;
 
2528
  __attribute__((cleanup(cleanup_close)))
 
2529
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2530
  g_assert_cmpint(epoll_fd, >=, 0);
 
2531
  __attribute__((cleanup(cleanup_queue)))
 
2532
    task_queue *queue = create_queue();
 
2533
  g_assert_nonnull(queue);
 
2534
  __attribute__((cleanup(cleanup_buffer)))
 
2535
    buffer password = {};
 
2536
  bool password_is_read = false;
 
2537
  const char helper_directory[] = "/nonexistent";
 
2538
  const char *const argv[] = { "/usr/bin/id", "--group", "--real",
 
2539
    NULL };
 
2540
  uid_t user = 1000;
 
2541
  gid_t group = 1001;
 
2542
 
 
2543
  const bool success = start_mandos_client(queue, epoll_fd,
 
2544
                                           &mandos_client_exited,
 
2545
                                           &quit_now, &password,
 
2546
                                           &password_is_read,
 
2547
                                           &fixture->orig_sigaction,
 
2548
                                           fixture->orig_sigmask,
 
2549
                                           helper_directory, user,
 
2550
                                           group, argv);
 
2551
  g_assert_true(success);
 
2552
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2553
 
 
2554
  struct timespec starttime, currtime;
 
2555
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2556
  do {
 
2557
    queue->next_run = 0;
 
2558
    string_set cancelled_filenames = {};
 
2559
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2560
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2561
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2562
  } while(((queue->length) > 0)
 
2563
          and (not quit_now)
 
2564
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2565
 
 
2566
  g_assert_false(quit_now);
 
2567
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2568
  g_assert_true(mandos_client_exited);
 
2569
 
 
2570
  g_assert_true(password_is_read);
 
2571
  g_assert_nonnull(password.data);
 
2572
 
 
2573
  uintmax_t id;
 
2574
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
 
2575
                  ==, 1);
 
2576
  g_assert_true((gid_t)id == id);
 
2577
 
 
2578
  g_assert_cmpuint((unsigned int)id, ==, group);
 
2579
}
 
2580
 
 
2581
static void test_start_mandos_client_read(test_fixture *fixture,
 
2582
                                          __attribute__((unused))
 
2583
                                          gconstpointer user_data){
 
2584
  bool mandos_client_exited = false;
 
2585
  bool quit_now = false;
 
2586
  __attribute__((cleanup(cleanup_close)))
 
2587
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2588
  g_assert_cmpint(epoll_fd, >=, 0);
 
2589
  __attribute__((cleanup(cleanup_queue)))
 
2590
    task_queue *queue = create_queue();
 
2591
  g_assert_nonnull(queue);
 
2592
  __attribute__((cleanup(cleanup_buffer)))
 
2593
    buffer password = {};
 
2594
  bool password_is_read = false;
 
2595
  const char dummy_test_password[] = "dummy test password";
 
2596
  const char helper_directory[] = "/nonexistent";
 
2597
  const char *const argv[] = { "/bin/echo", "-n", dummy_test_password,
 
2598
    NULL };
 
2599
 
 
2600
  const bool success = start_mandos_client(queue, epoll_fd,
 
2601
                                           &mandos_client_exited,
 
2602
                                           &quit_now, &password,
 
2603
                                           &password_is_read,
 
2604
                                           &fixture->orig_sigaction,
 
2605
                                           fixture->orig_sigmask,
 
2606
                                           helper_directory, 0, 0,
 
2607
                                           argv);
 
2608
  g_assert_true(success);
 
2609
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2610
 
 
2611
  struct timespec starttime, currtime;
 
2612
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2613
  do {
 
2614
    queue->next_run = 0;
 
2615
    string_set cancelled_filenames = {};
 
2616
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2617
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2618
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2619
  } while(((queue->length) > 0)
 
2620
          and (not quit_now)
 
2621
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2622
 
 
2623
  g_assert_false(quit_now);
 
2624
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2625
  g_assert_true(mandos_client_exited);
 
2626
 
 
2627
  g_assert_true(password_is_read);
 
2628
  g_assert_cmpint((int)password.length, ==,
 
2629
                  sizeof(dummy_test_password)-1);
 
2630
  g_assert_nonnull(password.data);
 
2631
  g_assert_cmpint(memcmp(dummy_test_password, password.data,
 
2632
                         sizeof(dummy_test_password)-1), ==, 0);
 
2633
}
 
2634
 
 
2635
static
 
2636
void test_start_mandos_client_helper_directory(test_fixture *fixture,
 
2637
                                               __attribute__((unused))
 
2638
                                               gconstpointer
 
2639
                                               user_data){
 
2640
  bool mandos_client_exited = false;
 
2641
  bool quit_now = false;
 
2642
  __attribute__((cleanup(cleanup_close)))
 
2643
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2644
  g_assert_cmpint(epoll_fd, >=, 0);
 
2645
  __attribute__((cleanup(cleanup_queue)))
 
2646
    task_queue *queue = create_queue();
 
2647
  g_assert_nonnull(queue);
 
2648
  __attribute__((cleanup(cleanup_buffer)))
 
2649
    buffer password = {};
 
2650
  bool password_is_read = false;
 
2651
  const char helper_directory[] = "/nonexistent";
 
2652
  const char *const argv[] = { "/bin/sh", "-c",
 
2653
    "echo -n ${MANDOSPLUGINHELPERDIR}", NULL };
 
2654
 
 
2655
  const bool success = start_mandos_client(queue, epoll_fd,
 
2656
                                           &mandos_client_exited,
 
2657
                                           &quit_now, &password,
 
2658
                                           &password_is_read,
 
2659
                                           &fixture->orig_sigaction,
 
2660
                                           fixture->orig_sigmask,
 
2661
                                           helper_directory, 0, 0,
 
2662
                                           argv);
 
2663
  g_assert_true(success);
 
2664
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
2665
 
 
2666
  struct timespec starttime, currtime;
 
2667
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2668
  do {
 
2669
    queue->next_run = 0;
 
2670
    string_set cancelled_filenames = {};
 
2671
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2672
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2673
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2674
  } while(((queue->length) > 0)
 
2675
          and (not quit_now)
 
2676
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2677
 
 
2678
  g_assert_false(quit_now);
 
2679
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2680
  g_assert_true(mandos_client_exited);
 
2681
 
 
2682
  g_assert_true(password_is_read);
 
2683
  g_assert_cmpint((int)password.length, ==,
 
2684
                  sizeof(helper_directory)-1);
 
2685
  g_assert_nonnull(password.data);
 
2686
  g_assert_cmpint(memcmp(helper_directory, password.data,
 
2687
                         sizeof(helper_directory)-1), ==, 0);
 
2688
}
 
2689
 
 
2690
__attribute__((nonnull, warn_unused_result))
 
2691
static bool proc_status_sigblk_to_sigset(const char *const,
 
2692
                                         sigset_t *const);
 
2693
 
 
2694
static void test_start_mandos_client_sigmask(test_fixture *fixture,
 
2695
                                             __attribute__((unused))
 
2696
                                             gconstpointer user_data){
 
2697
  bool mandos_client_exited = false;
 
2698
  bool quit_now = false;
 
2699
  __attribute__((cleanup(cleanup_close)))
 
2700
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2701
  g_assert_cmpint(epoll_fd, >=, 0);
 
2702
  __attribute__((cleanup(cleanup_queue)))
 
2703
    task_queue *queue = create_queue();
 
2704
  g_assert_nonnull(queue);
 
2705
  __attribute__((cleanup(cleanup_buffer)))
 
2706
    buffer password = {};
 
2707
  bool password_is_read = false;
 
2708
  const char helper_directory[] = "/nonexistent";
 
2709
  /* see proc(5) for format of /proc/self/status */
 
2710
  const char *const argv[] = { "/usr/bin/awk",
 
2711
    "$1==\"SigBlk:\"{ print $2 }", "/proc/self/status", NULL };
 
2712
 
 
2713
  g_assert_true(start_mandos_client(queue, epoll_fd,
 
2714
                                    &mandos_client_exited, &quit_now,
 
2715
                                    &password, &password_is_read,
 
2716
                                    &fixture->orig_sigaction,
 
2717
                                    fixture->orig_sigmask,
 
2718
                                    helper_directory, 0, 0, argv));
 
2719
 
 
2720
  struct timespec starttime, currtime;
 
2721
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2722
  do {
 
2723
    queue->next_run = 0;
 
2724
    string_set cancelled_filenames = {};
 
2725
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2726
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
2727
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2728
  } while((not (mandos_client_exited and password_is_read))
 
2729
          and (not quit_now)
 
2730
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2731
  g_assert_true(mandos_client_exited);
 
2732
  g_assert_true(password_is_read);
 
2733
 
 
2734
  sigset_t parsed_sigmask;
 
2735
  g_assert_true(proc_status_sigblk_to_sigset(password.data,
 
2736
                                             &parsed_sigmask));
 
2737
 
 
2738
  for(int signum = 1; signum < NSIG; signum++){
 
2739
    const bool has_signal = sigismember(&parsed_sigmask, signum);
 
2740
    if(sigismember(&fixture->orig_sigmask, signum)){
 
2741
      g_assert_true(has_signal);
 
2742
    } else {
 
2743
      g_assert_false(has_signal);
 
2744
    }
 
2745
  }
 
2746
}
 
2747
 
 
2748
__attribute__((nonnull, warn_unused_result))
 
2749
static bool proc_status_sigblk_to_sigset(const char *const sigblk,
 
2750
                                         sigset_t *const sigmask){
 
2751
  /* parse /proc/PID/status SigBlk value and convert to a sigset_t */
 
2752
  uintmax_t scanned_sigmask;
 
2753
  if(sscanf(sigblk, "%" SCNxMAX " ", &scanned_sigmask) != 1){
 
2754
    return false;
 
2755
  }
 
2756
  if(sigemptyset(sigmask) != 0){
 
2757
    return false;
 
2758
  }
 
2759
  for(int signum = 1; signum < NSIG; signum++){
 
2760
    if(scanned_sigmask & ((uintmax_t)1 << (signum-1))){
 
2761
      if(sigaddset(sigmask, signum) != 0){
 
2762
        return false;
 
2763
      }
 
2764
    }
 
2765
  }
 
2766
  return true;
 
2767
}
 
2768
 
 
2769
static void run_task_with_stderr_to_dev_null(const task_context task,
 
2770
                                             task_queue *const queue);
 
2771
 
 
2772
static
 
2773
void test_wait_for_mandos_client_exit_badpid(__attribute__((unused))
 
2774
                                             test_fixture *fixture,
 
2775
                                             __attribute__((unused))
 
2776
                                             gconstpointer user_data){
 
2777
 
 
2778
  bool mandos_client_exited = false;
 
2779
  bool quit_now = false;
 
2780
 
 
2781
  __attribute__((cleanup(cleanup_queue)))
 
2782
    task_queue *queue = create_queue();
 
2783
  g_assert_nonnull(queue);
 
2784
  const task_context task = {
 
2785
    .func=wait_for_mandos_client_exit,
 
2786
    .pid=1,
 
2787
    .mandos_client_exited=&mandos_client_exited,
 
2788
    .quit_now=&quit_now,
 
2789
  };
 
2790
  run_task_with_stderr_to_dev_null(task, queue);
 
2791
 
 
2792
  g_assert_false(mandos_client_exited);
 
2793
  g_assert_true(quit_now);
 
2794
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2795
}
 
2796
 
 
2797
static void run_task_with_stderr_to_dev_null(const task_context task,
 
2798
                                             task_queue *const queue){
 
2799
  FILE *real_stderr = stderr;
 
2800
  FILE *devnull = fopen("/dev/null", "we");
 
2801
  g_assert_nonnull(devnull);
 
2802
 
 
2803
  stderr = devnull;
 
2804
  task.func(task, queue);
 
2805
  stderr = real_stderr;
 
2806
 
 
2807
  g_assert_cmpint(fclose(devnull), ==, 0);
 
2808
}
 
2809
 
 
2810
static
 
2811
void test_wait_for_mandos_client_exit_noexit(test_fixture *fixture,
 
2812
                                             __attribute__((unused))
 
2813
                                             gconstpointer user_data){
 
2814
  bool mandos_client_exited = false;
 
2815
  bool quit_now = false;
 
2816
 
 
2817
  pid_t create_eternal_process(void){
 
2818
    const pid_t pid = fork();
 
2819
    if(pid == 0){               /* Child */
 
2820
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2821
        _exit(EXIT_FAILURE);
 
2822
      }
 
2823
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2824
        _exit(EXIT_FAILURE);
 
2825
      }
 
2826
      while(true){
 
2827
        pause();
 
2828
      }
 
2829
    }
 
2830
    return pid;
 
2831
  }
 
2832
  pid_t pid = create_eternal_process();
 
2833
  g_assert_true(pid != -1);
 
2834
 
 
2835
  __attribute__((cleanup(cleanup_queue)))
 
2836
    task_queue *queue = create_queue();
 
2837
  g_assert_nonnull(queue);
 
2838
  const task_context task = {
 
2839
    .func=wait_for_mandos_client_exit,
 
2840
    .pid=pid,
 
2841
    .mandos_client_exited=&mandos_client_exited,
 
2842
    .quit_now=&quit_now,
 
2843
  };
 
2844
  task.func(task, queue);
 
2845
 
 
2846
  g_assert_false(mandos_client_exited);
 
2847
  g_assert_false(quit_now);
 
2848
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
2849
 
 
2850
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
2851
        .func=wait_for_mandos_client_exit,
 
2852
        .pid=task.pid,
 
2853
        .mandos_client_exited=&mandos_client_exited,
 
2854
        .quit_now=&quit_now,
 
2855
      }));
 
2856
}
 
2857
 
 
2858
static
 
2859
void test_wait_for_mandos_client_exit_success(test_fixture *fixture,
 
2860
                                              __attribute__((unused))
 
2861
                                              gconstpointer
 
2862
                                              user_data){
 
2863
  bool mandos_client_exited = false;
 
2864
  bool quit_now = false;
 
2865
 
 
2866
  pid_t create_successful_process(void){
 
2867
    const pid_t pid = fork();
 
2868
    if(pid == 0){               /* Child */
 
2869
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2870
        _exit(EXIT_FAILURE);
 
2871
      }
 
2872
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2873
        _exit(EXIT_FAILURE);
 
2874
      }
 
2875
      exit(EXIT_SUCCESS);
 
2876
    }
 
2877
    return pid;
 
2878
  }
 
2879
  const pid_t pid = create_successful_process();
 
2880
  g_assert_true(pid != -1);
 
2881
 
 
2882
  __attribute__((cleanup(cleanup_queue)))
 
2883
    task_queue *queue = create_queue();
 
2884
  g_assert_nonnull(queue);
 
2885
  const task_context initial_task = {
 
2886
    .func=wait_for_mandos_client_exit,
 
2887
    .pid=pid,
 
2888
    .mandos_client_exited=&mandos_client_exited,
 
2889
    .quit_now=&quit_now,
 
2890
  };
 
2891
  g_assert_true(add_to_queue(queue, initial_task));
 
2892
 
 
2893
  struct timespec starttime, currtime;
 
2894
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2895
  __attribute__((cleanup(cleanup_close)))
 
2896
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2897
  do {
 
2898
    queue->next_run = 0;
 
2899
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2900
    g_assert_true(run_queue(&queue, (string_set[]){{}}, &quit_now));
 
2901
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2902
  } while((not mandos_client_exited)
 
2903
          and (not quit_now)
 
2904
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2905
 
 
2906
  g_assert_true(mandos_client_exited);
 
2907
  g_assert_false(quit_now);
 
2908
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2909
}
 
2910
 
 
2911
static
 
2912
void test_wait_for_mandos_client_exit_failure(test_fixture *fixture,
 
2913
                                              __attribute__((unused))
 
2914
                                              gconstpointer
 
2915
                                              user_data){
 
2916
  bool mandos_client_exited = false;
 
2917
  bool quit_now = false;
 
2918
 
 
2919
  pid_t create_failing_process(void){
 
2920
    const pid_t pid = fork();
 
2921
    if(pid == 0){               /* Child */
 
2922
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2923
        _exit(EXIT_FAILURE);
 
2924
      }
 
2925
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2926
        _exit(EXIT_FAILURE);
 
2927
      }
 
2928
      exit(EXIT_FAILURE);
 
2929
    }
 
2930
    return pid;
 
2931
  }
 
2932
  const pid_t pid = create_failing_process();
 
2933
  g_assert_true(pid != -1);
 
2934
 
 
2935
  __attribute__((cleanup(string_set_clear)))
 
2936
    string_set cancelled_filenames = {};
 
2937
  __attribute__((cleanup(cleanup_close)))
 
2938
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
2939
  g_assert_cmpint(epoll_fd, >=, 0);
 
2940
  __attribute__((cleanup(cleanup_queue)))
 
2941
    task_queue *queue = create_queue();
 
2942
  g_assert_nonnull(queue);
 
2943
  g_assert_true(add_to_queue(queue, (task_context){
 
2944
        .func=wait_for_mandos_client_exit,
 
2945
        .pid=pid,
 
2946
        .mandos_client_exited=&mandos_client_exited,
 
2947
        .quit_now=&quit_now,
 
2948
      }));
 
2949
 
 
2950
  g_assert_true(sigismember(&fixture->orig_sigmask, SIGCHLD) == 0);
 
2951
 
 
2952
  __attribute__((cleanup(cleanup_close)))
 
2953
    const int devnull_fd = open("/dev/null",
 
2954
                                O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
2955
  g_assert_cmpint(devnull_fd, >=, 0);
 
2956
  __attribute__((cleanup(cleanup_close)))
 
2957
    const int real_stderr_fd = dup(STDERR_FILENO);
 
2958
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
2959
 
 
2960
  struct timespec starttime, currtime;
 
2961
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
2962
  do {
 
2963
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
2964
    dup2(devnull_fd, STDERR_FILENO);
 
2965
    const bool success = run_queue(&queue, &cancelled_filenames,
 
2966
                                   &quit_now);
 
2967
    dup2(real_stderr_fd, STDERR_FILENO);
 
2968
    if(not success){
 
2969
      break;
 
2970
    }
 
2971
 
 
2972
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
2973
  } while((not mandos_client_exited)
 
2974
          and (not quit_now)
 
2975
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
2976
 
 
2977
  g_assert_true(quit_now);
 
2978
  g_assert_true(mandos_client_exited);
 
2979
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
2980
}
 
2981
 
 
2982
static
 
2983
void test_wait_for_mandos_client_exit_killed(test_fixture *fixture,
 
2984
                                             __attribute__((unused))
 
2985
                                             gconstpointer user_data){
 
2986
  bool mandos_client_exited = false;
 
2987
  bool quit_now = false;
 
2988
 
 
2989
  pid_t create_killed_process(void){
 
2990
    const pid_t pid = fork();
 
2991
    if(pid == 0){               /* Child */
 
2992
      if(not restore_signal_handler(&fixture->orig_sigaction)){
 
2993
        _exit(EXIT_FAILURE);
 
2994
      }
 
2995
      if(not restore_sigmask(&fixture->orig_sigmask)){
 
2996
        _exit(EXIT_FAILURE);
 
2997
      }
 
2998
      while(true){
 
2999
        pause();
 
3000
      }
 
3001
    }
 
3002
    kill(pid, SIGKILL);
 
3003
    return pid;
 
3004
  }
 
3005
  const pid_t pid = create_killed_process();
 
3006
  g_assert_true(pid != -1);
 
3007
 
 
3008
  __attribute__((cleanup(string_set_clear)))
 
3009
    string_set cancelled_filenames = {};
 
3010
  __attribute__((cleanup(cleanup_close)))
 
3011
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3012
  g_assert_cmpint(epoll_fd, >=, 0);
 
3013
  __attribute__((cleanup(cleanup_queue)))
 
3014
    task_queue *queue = create_queue();
 
3015
  g_assert_nonnull(queue);
 
3016
  g_assert_true(add_to_queue(queue, (task_context){
 
3017
        .func=wait_for_mandos_client_exit,
 
3018
        .pid=pid,
 
3019
        .mandos_client_exited=&mandos_client_exited,
 
3020
        .quit_now=&quit_now,
 
3021
      }));
 
3022
 
 
3023
  __attribute__((cleanup(cleanup_close)))
 
3024
    const int devnull_fd = open("/dev/null",
 
3025
                                O_WRONLY | O_CLOEXEC, O_NOCTTY);
 
3026
  g_assert_cmpint(devnull_fd, >=, 0);
 
3027
  __attribute__((cleanup(cleanup_close)))
 
3028
    const int real_stderr_fd = dup(STDERR_FILENO);
 
3029
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
3030
 
 
3031
  struct timespec starttime, currtime;
 
3032
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
 
3033
  do {
 
3034
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
 
3035
    dup2(devnull_fd, STDERR_FILENO);
 
3036
    const bool success = run_queue(&queue, &cancelled_filenames,
 
3037
                                   &quit_now);
 
3038
    dup2(real_stderr_fd, STDERR_FILENO);
 
3039
    if(not success){
 
3040
      break;
 
3041
    }
 
3042
 
 
3043
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
 
3044
  } while((not mandos_client_exited)
 
3045
          and (not quit_now)
 
3046
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
 
3047
 
 
3048
  g_assert_true(mandos_client_exited);
 
3049
  g_assert_true(quit_now);
 
3050
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3051
}
 
3052
 
 
3053
static bool epoll_set_does_not_contain(int, int);
 
3054
 
 
3055
static
 
3056
void test_read_mandos_client_output_readerror(__attribute__((unused))
 
3057
                                              test_fixture *fixture,
 
3058
                                              __attribute__((unused))
 
3059
                                              gconstpointer
 
3060
                                              user_data){
 
3061
  __attribute__((cleanup(cleanup_close)))
 
3062
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3063
  g_assert_cmpint(epoll_fd, >=, 0);
 
3064
 
 
3065
  __attribute__((cleanup(cleanup_buffer)))
 
3066
    buffer password = {};
 
3067
 
 
3068
  /* Reading /proc/self/mem from offset 0 will always give EIO */
 
3069
  const int fd = open("/proc/self/mem",
 
3070
                      O_RDONLY | O_CLOEXEC | O_NOCTTY);
 
3071
 
 
3072
  bool password_is_read = false;
 
3073
  bool quit_now = false;
 
3074
  __attribute__((cleanup(cleanup_queue)))
 
3075
    task_queue *queue = create_queue();
 
3076
  g_assert_nonnull(queue);
 
3077
 
 
3078
  task_context task = {
 
3079
    .func=read_mandos_client_output,
 
3080
    .epoll_fd=epoll_fd,
 
3081
    .fd=fd,
 
3082
    .password=&password,
 
3083
    .password_is_read=&password_is_read,
 
3084
    .quit_now=&quit_now,
 
3085
  };
 
3086
  run_task_with_stderr_to_dev_null(task, queue);
 
3087
  g_assert_false(password_is_read);
 
3088
  g_assert_cmpint((int)password.length, ==, 0);
 
3089
  g_assert_true(quit_now);
 
3090
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3091
 
 
3092
  g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
 
3093
 
 
3094
  g_assert_cmpint(close(fd), ==, -1);
 
3095
}
 
3096
 
 
3097
static bool epoll_set_does_not_contain(int epoll_fd, int fd){
 
3098
  return not epoll_set_contains(epoll_fd, fd, 0);
 
3099
}
 
3100
 
 
3101
static
 
3102
void test_read_mandos_client_output_nodata(__attribute__((unused))
 
3103
                                           test_fixture *fixture,
 
3104
                                           __attribute__((unused))
 
3105
                                           gconstpointer user_data){
 
3106
  __attribute__((cleanup(cleanup_close)))
 
3107
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3108
  g_assert_cmpint(epoll_fd, >=, 0);
 
3109
 
 
3110
  int pipefds[2];
 
3111
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3112
 
 
3113
  __attribute__((cleanup(cleanup_buffer)))
 
3114
    buffer password = {};
 
3115
 
 
3116
  bool password_is_read = false;
 
3117
  bool quit_now = false;
 
3118
  __attribute__((cleanup(cleanup_queue)))
 
3119
    task_queue *queue = create_queue();
 
3120
  g_assert_nonnull(queue);
 
3121
 
 
3122
  task_context task = {
 
3123
    .func=read_mandos_client_output,
 
3124
    .epoll_fd=epoll_fd,
 
3125
    .fd=pipefds[0],
 
3126
    .password=&password,
 
3127
    .password_is_read=&password_is_read,
 
3128
    .quit_now=&quit_now,
 
3129
  };
 
3130
  task.func(task, queue);
 
3131
  g_assert_false(password_is_read);
 
3132
  g_assert_cmpint((int)password.length, ==, 0);
 
3133
  g_assert_false(quit_now);
 
3134
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3135
 
 
3136
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3137
        .func=read_mandos_client_output,
 
3138
        .epoll_fd=epoll_fd,
 
3139
        .fd=pipefds[0],
 
3140
        .password=&password,
 
3141
        .password_is_read=&password_is_read,
 
3142
        .quit_now=&quit_now,
 
3143
      }));
 
3144
 
 
3145
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3146
                                   EPOLLIN | EPOLLRDHUP));
 
3147
 
 
3148
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3149
}
 
3150
 
 
3151
static void test_read_mandos_client_output_eof(__attribute__((unused))
 
3152
                                               test_fixture *fixture,
 
3153
                                               __attribute__((unused))
 
3154
                                               gconstpointer
 
3155
                                               user_data){
 
3156
  __attribute__((cleanup(cleanup_close)))
 
3157
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3158
  g_assert_cmpint(epoll_fd, >=, 0);
 
3159
 
 
3160
  int pipefds[2];
 
3161
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3162
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3163
 
 
3164
  __attribute__((cleanup(cleanup_buffer)))
 
3165
    buffer password = {};
 
3166
 
 
3167
  bool password_is_read = false;
 
3168
  bool quit_now = false;
 
3169
  __attribute__((cleanup(cleanup_queue)))
 
3170
    task_queue *queue = create_queue();
 
3171
  g_assert_nonnull(queue);
 
3172
 
 
3173
  task_context task = {
 
3174
    .func=read_mandos_client_output,
 
3175
    .epoll_fd=epoll_fd,
 
3176
    .fd=pipefds[0],
 
3177
    .password=&password,
 
3178
    .password_is_read=&password_is_read,
 
3179
    .quit_now=&quit_now,
 
3180
  };
 
3181
  task.func(task, queue);
 
3182
  g_assert_true(password_is_read);
 
3183
  g_assert_cmpint((int)password.length, ==, 0);
 
3184
  g_assert_false(quit_now);
 
3185
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3186
 
 
3187
  g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
 
3188
 
 
3189
  g_assert_cmpint(close(pipefds[0]), ==, -1);
 
3190
}
 
3191
 
 
3192
static
 
3193
void test_read_mandos_client_output_once(__attribute__((unused))
 
3194
                                         test_fixture *fixture,
 
3195
                                         __attribute__((unused))
 
3196
                                         gconstpointer user_data){
 
3197
  __attribute__((cleanup(cleanup_close)))
 
3198
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3199
  g_assert_cmpint(epoll_fd, >=, 0);
 
3200
 
 
3201
  int pipefds[2];
 
3202
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3203
 
 
3204
  const char dummy_test_password[] = "dummy test password";
 
3205
  /* Start with a pre-allocated buffer */
 
3206
  __attribute__((cleanup(cleanup_buffer)))
 
3207
    buffer password = {
 
3208
    .data=malloc(sizeof(dummy_test_password)),
 
3209
    .length=0,
 
3210
    .allocated=sizeof(dummy_test_password),
 
3211
  };
 
3212
  g_assert_nonnull(password.data);
 
3213
  if(mlock(password.data, password.allocated) != 0){
 
3214
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
3215
  }
 
3216
 
 
3217
  bool password_is_read = false;
 
3218
  bool quit_now = false;
 
3219
  __attribute__((cleanup(cleanup_queue)))
 
3220
    task_queue *queue = create_queue();
 
3221
  g_assert_nonnull(queue);
 
3222
 
 
3223
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3224
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3225
                             sizeof(dummy_test_password)),
 
3226
                  ==, (int)sizeof(dummy_test_password));
 
3227
 
 
3228
  task_context task = {
 
3229
    .func=read_mandos_client_output,
 
3230
    .epoll_fd=epoll_fd,
 
3231
    .fd=pipefds[0],
 
3232
    .password=&password,
 
3233
    .password_is_read=&password_is_read,
 
3234
    .quit_now=&quit_now,
 
3235
  };
 
3236
  task.func(task, queue);
 
3237
 
 
3238
  g_assert_false(password_is_read);
 
3239
  g_assert_cmpint((int)password.length, ==,
 
3240
                  (int)sizeof(dummy_test_password));
 
3241
  g_assert_nonnull(password.data);
 
3242
  g_assert_cmpint(memcmp(password.data, dummy_test_password,
 
3243
                         sizeof(dummy_test_password)), ==, 0);
 
3244
 
 
3245
  g_assert_false(quit_now);
 
3246
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3247
 
 
3248
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3249
        .func=read_mandos_client_output,
 
3250
        .epoll_fd=epoll_fd,
 
3251
        .fd=pipefds[0],
 
3252
        .password=&password,
 
3253
        .password_is_read=&password_is_read,
 
3254
        .quit_now=&quit_now,
 
3255
      }));
 
3256
 
 
3257
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3258
                                   EPOLLIN | EPOLLRDHUP));
 
3259
 
 
3260
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3261
}
 
3262
 
 
3263
static
 
3264
void test_read_mandos_client_output_malloc(__attribute__((unused))
 
3265
                                           test_fixture *fixture,
 
3266
                                           __attribute__((unused))
 
3267
                                           gconstpointer user_data){
 
3268
  __attribute__((cleanup(cleanup_close)))
 
3269
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3270
  g_assert_cmpint(epoll_fd, >=, 0);
 
3271
 
 
3272
  int pipefds[2];
 
3273
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3274
 
 
3275
  const char dummy_test_password[] = "dummy test password";
 
3276
  /* Start with an empty buffer */
 
3277
  __attribute__((cleanup(cleanup_buffer)))
 
3278
    buffer password = {};
 
3279
 
 
3280
  bool password_is_read = false;
 
3281
  bool quit_now = false;
 
3282
  __attribute__((cleanup(cleanup_queue)))
 
3283
    task_queue *queue = create_queue();
 
3284
  g_assert_nonnull(queue);
 
3285
 
 
3286
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3287
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3288
                             sizeof(dummy_test_password)),
 
3289
                  ==, (int)sizeof(dummy_test_password));
 
3290
 
 
3291
  task_context task = {
 
3292
    .func=read_mandos_client_output,
 
3293
    .epoll_fd=epoll_fd,
 
3294
    .fd=pipefds[0],
 
3295
    .password=&password,
 
3296
    .password_is_read=&password_is_read,
 
3297
    .quit_now=&quit_now,
 
3298
  };
 
3299
  task.func(task, queue);
 
3300
 
 
3301
  g_assert_false(password_is_read);
 
3302
  g_assert_cmpint((int)password.length, ==,
 
3303
                  (int)sizeof(dummy_test_password));
 
3304
  g_assert_nonnull(password.data);
 
3305
  g_assert_cmpint(memcmp(password.data, dummy_test_password,
 
3306
                         sizeof(dummy_test_password)), ==, 0);
 
3307
 
 
3308
  g_assert_false(quit_now);
 
3309
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3310
 
 
3311
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3312
        .func=read_mandos_client_output,
 
3313
        .epoll_fd=epoll_fd,
 
3314
        .fd=pipefds[0],
 
3315
        .password=&password,
 
3316
        .password_is_read=&password_is_read,
 
3317
        .quit_now=&quit_now,
 
3318
      }));
 
3319
 
 
3320
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3321
                                   EPOLLIN | EPOLLRDHUP));
 
3322
 
 
3323
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
3324
}
 
3325
 
 
3326
static
 
3327
void test_read_mandos_client_output_append(__attribute__((unused))
 
3328
                                           test_fixture *fixture,
 
3329
                                           __attribute__((unused))
 
3330
                                           gconstpointer user_data){
 
3331
  __attribute__((cleanup(cleanup_close)))
 
3332
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3333
  g_assert_cmpint(epoll_fd, >=, 0);
 
3334
 
 
3335
  int pipefds[2];
 
3336
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
3337
 
 
3338
  const char dummy_test_password[] = "dummy test password";
 
3339
  __attribute__((cleanup(cleanup_buffer)))
 
3340
    buffer password = {
 
3341
    .data=malloc(PIPE_BUF),
 
3342
    .length=PIPE_BUF,
 
3343
    .allocated=PIPE_BUF,
 
3344
  };
 
3345
  g_assert_nonnull(password.data);
 
3346
  if(mlock(password.data, password.allocated) != 0){
 
3347
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
3348
  }
 
3349
 
 
3350
  memset(password.data, 'x', PIPE_BUF);
 
3351
  char password_expected[PIPE_BUF];
 
3352
  memcpy(password_expected, password.data, PIPE_BUF);
 
3353
 
 
3354
  bool password_is_read = false;
 
3355
  bool quit_now = false;
 
3356
  __attribute__((cleanup(cleanup_queue)))
 
3357
    task_queue *queue = create_queue();
 
3358
  g_assert_nonnull(queue);
 
3359
 
 
3360
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
 
3361
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
 
3362
                             sizeof(dummy_test_password)),
 
3363
                  ==, (int)sizeof(dummy_test_password));
 
3364
 
 
3365
  task_context task = {
 
3366
    .func=read_mandos_client_output,
 
3367
    .epoll_fd=epoll_fd,
 
3368
    .fd=pipefds[0],
 
3369
    .password=&password,
 
3370
    .password_is_read=&password_is_read,
 
3371
    .quit_now=&quit_now,
 
3372
  };
 
3373
  task.func(task, queue);
 
3374
 
 
3375
  g_assert_false(password_is_read);
 
3376
  g_assert_cmpint((int)password.length, ==,
 
3377
                  PIPE_BUF + sizeof(dummy_test_password));
 
3378
  g_assert_nonnull(password.data);
 
3379
  g_assert_cmpint(memcmp(password_expected, password.data, PIPE_BUF),
 
3380
                  ==, 0);
 
3381
  g_assert_cmpint(memcmp(password.data + PIPE_BUF,
 
3382
                         dummy_test_password,
 
3383
                         sizeof(dummy_test_password)), ==, 0);
 
3384
  g_assert_false(quit_now);
 
3385
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
3386
 
 
3387
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
3388
        .func=read_mandos_client_output,
 
3389
        .epoll_fd=epoll_fd,
 
3390
        .fd=pipefds[0],
 
3391
        .password=&password,
 
3392
        .password_is_read=&password_is_read,
 
3393
        .quit_now=&quit_now,
 
3394
      }));
 
3395
 
 
3396
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
3397
                                   EPOLLIN | EPOLLRDHUP));
 
3398
}
 
3399
 
 
3400
static char *make_temporary_directory(void);
 
3401
 
 
3402
static void test_add_inotify_dir_watch(__attribute__((unused))
 
3403
                                       test_fixture *fixture,
 
3404
                                       __attribute__((unused))
 
3405
                                       gconstpointer user_data){
 
3406
  __attribute__((cleanup(cleanup_close)))
 
3407
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3408
  g_assert_cmpint(epoll_fd, >=, 0);
 
3409
  __attribute__((cleanup(cleanup_queue)))
 
3410
    task_queue *queue = create_queue();
 
3411
  g_assert_nonnull(queue);
 
3412
  __attribute__((cleanup(string_set_clear)))
 
3413
    string_set cancelled_filenames = {};
 
3414
  const mono_microsecs current_time = 0;
 
3415
 
 
3416
  bool quit_now = false;
 
3417
  buffer password = {};
 
3418
  bool mandos_client_exited = false;
 
3419
  bool password_is_read = false;
 
3420
 
 
3421
  __attribute__((cleanup(cleanup_string)))
 
3422
    char *tempdir = make_temporary_directory();
 
3423
  g_assert_nonnull(tempdir);
 
3424
 
 
3425
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3426
                                      &password, tempdir,
 
3427
                                      &cancelled_filenames,
 
3428
                                      &current_time,
 
3429
                                      &mandos_client_exited,
 
3430
                                      &password_is_read));
 
3431
 
 
3432
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3433
 
 
3434
  const task_context *const added_read_task
 
3435
    = find_matching_task(queue, (task_context){
 
3436
        .func=read_inotify_event,
 
3437
        .epoll_fd=epoll_fd,
 
3438
        .quit_now=&quit_now,
 
3439
        .password=&password,
 
3440
        .filename=tempdir,
 
3441
        .cancelled_filenames=&cancelled_filenames,
 
3442
        .current_time=&current_time,
 
3443
        .mandos_client_exited=&mandos_client_exited,
 
3444
        .password_is_read=&password_is_read,
 
3445
      });
 
3446
  g_assert_nonnull(added_read_task);
 
3447
 
 
3448
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3449
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3450
  g_assert_true(epoll_set_contains(added_read_task->epoll_fd,
 
3451
                                   added_read_task->fd,
 
3452
                                   EPOLLIN | EPOLLRDHUP));
 
3453
 
 
3454
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3455
}
 
3456
 
 
3457
static char *make_temporary_directory(void){
 
3458
  char *name = strdup("/tmp/mandosXXXXXX");
 
3459
  g_assert_nonnull(name);
 
3460
  char *result = mkdtemp(name);
 
3461
  if(result == NULL){
 
3462
    free(name);
 
3463
  }
 
3464
  return result;
 
3465
}
 
3466
 
 
3467
static void test_add_inotify_dir_watch_fail(__attribute__((unused))
 
3468
                                            test_fixture *fixture,
 
3469
                                            __attribute__((unused))
 
3470
                                            gconstpointer user_data){
 
3471
  __attribute__((cleanup(cleanup_close)))
 
3472
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3473
  g_assert_cmpint(epoll_fd, >=, 0);
 
3474
  __attribute__((cleanup(cleanup_queue)))
 
3475
    task_queue *queue = create_queue();
 
3476
  g_assert_nonnull(queue);
 
3477
  __attribute__((cleanup(string_set_clear)))
 
3478
    string_set cancelled_filenames = {};
 
3479
  const mono_microsecs current_time = 0;
 
3480
 
 
3481
  bool quit_now = false;
 
3482
  buffer password = {};
 
3483
  bool mandos_client_exited = false;
 
3484
  bool password_is_read = false;
 
3485
 
 
3486
  const char nonexistent_dir[] = "/nonexistent";
 
3487
 
 
3488
  FILE *real_stderr = stderr;
 
3489
  FILE *devnull = fopen("/dev/null", "we");
 
3490
  g_assert_nonnull(devnull);
 
3491
  stderr = devnull;
 
3492
  g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3493
                                       &password, nonexistent_dir,
 
3494
                                       &cancelled_filenames,
 
3495
                                       &current_time,
 
3496
                                       &mandos_client_exited,
 
3497
                                       &password_is_read));
 
3498
  stderr = real_stderr;
 
3499
  g_assert_cmpint(fclose(devnull), ==, 0);
 
3500
 
 
3501
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3502
}
 
3503
 
 
3504
static void test_add_inotify_dir_watch_nondir(__attribute__((unused))
 
3505
                                              test_fixture *fixture,
 
3506
                                            __attribute__((unused))
 
3507
                                              gconstpointer
 
3508
                                              user_data){
 
3509
  __attribute__((cleanup(cleanup_close)))
 
3510
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3511
  g_assert_cmpint(epoll_fd, >=, 0);
 
3512
  __attribute__((cleanup(cleanup_queue)))
 
3513
    task_queue *queue = create_queue();
 
3514
  g_assert_nonnull(queue);
 
3515
  __attribute__((cleanup(string_set_clear)))
 
3516
    string_set cancelled_filenames = {};
 
3517
  const mono_microsecs current_time = 0;
 
3518
 
 
3519
  bool quit_now = false;
 
3520
  buffer password = {};
 
3521
  bool mandos_client_exited = false;
 
3522
  bool password_is_read = false;
 
3523
 
 
3524
  const char not_a_directory[] = "/dev/tty";
 
3525
 
 
3526
  FILE *real_stderr = stderr;
 
3527
  FILE *devnull = fopen("/dev/null", "we");
 
3528
  g_assert_nonnull(devnull);
 
3529
  stderr = devnull;
 
3530
  g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3531
                                       &password, not_a_directory,
 
3532
                                       &cancelled_filenames,
 
3533
                                       &current_time,
 
3534
                                       &mandos_client_exited,
 
3535
                                       &password_is_read));
 
3536
  stderr = real_stderr;
 
3537
  g_assert_cmpint(fclose(devnull), ==, 0);
 
3538
 
 
3539
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
3540
}
 
3541
 
 
3542
static void test_add_inotify_dir_watch_EAGAIN(__attribute__((unused))
 
3543
                                              test_fixture *fixture,
 
3544
                                              __attribute__((unused))
 
3545
                                              gconstpointer
 
3546
                                              user_data){
 
3547
  __attribute__((cleanup(cleanup_close)))
 
3548
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3549
  g_assert_cmpint(epoll_fd, >=, 0);
 
3550
  __attribute__((cleanup(cleanup_queue)))
 
3551
    task_queue *queue = create_queue();
 
3552
  g_assert_nonnull(queue);
 
3553
  __attribute__((cleanup(string_set_clear)))
 
3554
    string_set cancelled_filenames = {};
 
3555
  const mono_microsecs current_time = 0;
 
3556
 
 
3557
  bool quit_now = false;
 
3558
  buffer password = {};
 
3559
  bool mandos_client_exited = false;
 
3560
  bool password_is_read = false;
 
3561
 
 
3562
  __attribute__((cleanup(cleanup_string)))
 
3563
    char *tempdir = make_temporary_directory();
 
3564
  g_assert_nonnull(tempdir);
 
3565
 
 
3566
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3567
                                      &password, tempdir,
 
3568
                                      &cancelled_filenames,
 
3569
                                      &current_time,
 
3570
                                      &mandos_client_exited,
 
3571
                                      &password_is_read));
 
3572
 
 
3573
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3574
 
 
3575
  const task_context *const added_read_task
 
3576
    = find_matching_task(queue,
 
3577
                         (task_context){ .func=read_inotify_event });
 
3578
  g_assert_nonnull(added_read_task);
 
3579
 
 
3580
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3581
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3582
 
 
3583
  /* "sufficient to read at least one event." - inotify(7) */
 
3584
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3585
                              + NAME_MAX + 1);
 
3586
  struct inotify_event *ievent = malloc(ievent_size);
 
3587
  g_assert_nonnull(ievent);
 
3588
 
 
3589
  g_assert_cmpint(read(added_read_task->fd, ievent, ievent_size), ==,
 
3590
                  -1);
 
3591
  g_assert_cmpint(errno, ==, EAGAIN);
 
3592
 
 
3593
  free(ievent);
 
3594
 
 
3595
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3596
}
 
3597
 
 
3598
static char *make_temporary_file_in_directory(const char
 
3599
                                              *const dir);
 
3600
 
 
3601
static
 
3602
void test_add_inotify_dir_watch_IN_CLOSE_WRITE(__attribute__((unused))
 
3603
                                               test_fixture *fixture,
 
3604
                                               __attribute__((unused))
 
3605
                                               gconstpointer
 
3606
                                               user_data){
 
3607
  __attribute__((cleanup(cleanup_close)))
 
3608
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3609
  g_assert_cmpint(epoll_fd, >=, 0);
 
3610
  __attribute__((cleanup(cleanup_queue)))
 
3611
    task_queue *queue = create_queue();
 
3612
  g_assert_nonnull(queue);
 
3613
  __attribute__((cleanup(string_set_clear)))
 
3614
    string_set cancelled_filenames = {};
 
3615
  const mono_microsecs current_time = 0;
 
3616
 
 
3617
  bool quit_now = false;
 
3618
  buffer password = {};
 
3619
  bool mandos_client_exited = false;
 
3620
  bool password_is_read = false;
 
3621
 
 
3622
  __attribute__((cleanup(cleanup_string)))
 
3623
    char *tempdir = make_temporary_directory();
 
3624
  g_assert_nonnull(tempdir);
 
3625
 
 
3626
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3627
                                      &password, tempdir,
 
3628
                                      &cancelled_filenames,
 
3629
                                      &current_time,
 
3630
                                      &mandos_client_exited,
 
3631
                                      &password_is_read));
 
3632
 
 
3633
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3634
 
 
3635
  const task_context *const added_read_task
 
3636
    = find_matching_task(queue,
 
3637
                         (task_context){ .func=read_inotify_event });
 
3638
  g_assert_nonnull(added_read_task);
 
3639
 
 
3640
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3641
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3642
 
 
3643
  __attribute__((cleanup(cleanup_string)))
 
3644
    char *filename = make_temporary_file_in_directory(tempdir);
 
3645
  g_assert_nonnull(filename);
 
3646
 
 
3647
  /* "sufficient to read at least one event." - inotify(7) */
 
3648
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3649
                              + NAME_MAX + 1);
 
3650
  struct inotify_event *ievent = malloc(ievent_size);
 
3651
  g_assert_nonnull(ievent);
 
3652
 
 
3653
  ssize_t read_size = 0;
 
3654
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3655
 
 
3656
  g_assert_cmpint((int)read_size, >, 0);
 
3657
  g_assert_true(ievent->mask & IN_CLOSE_WRITE);
 
3658
  g_assert_cmpstr(ievent->name, ==, basename(filename));
 
3659
 
 
3660
  free(ievent);
 
3661
 
 
3662
  g_assert_cmpint(unlink(filename), ==, 0);
 
3663
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3664
}
 
3665
 
 
3666
static char *make_temporary_prefixed_file_in_directory(const char
 
3667
                                                       *const prefix,
 
3668
                                                       const char
 
3669
                                                       *const dir){
 
3670
  char *filename = NULL;
 
3671
  g_assert_cmpint(asprintf(&filename, "%s/%sXXXXXX", dir, prefix),
 
3672
                  >, 0);
 
3673
  g_assert_nonnull(filename);
 
3674
  const int fd = mkostemp(filename, O_CLOEXEC);
 
3675
  g_assert_cmpint(fd, >=, 0);
 
3676
  g_assert_cmpint(close(fd), ==, 0);
 
3677
  return filename;
 
3678
}
 
3679
 
 
3680
static char *make_temporary_file_in_directory(const char
 
3681
                                              *const dir){
 
3682
  return make_temporary_prefixed_file_in_directory("temp", dir);
 
3683
}
 
3684
 
 
3685
static
 
3686
void test_add_inotify_dir_watch_IN_MOVED_TO(__attribute__((unused))
 
3687
                                            test_fixture *fixture,
 
3688
                                            __attribute__((unused))
 
3689
                                            gconstpointer user_data){
 
3690
  __attribute__((cleanup(cleanup_close)))
 
3691
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3692
  g_assert_cmpint(epoll_fd, >=, 0);
 
3693
  __attribute__((cleanup(cleanup_queue)))
 
3694
    task_queue *queue = create_queue();
 
3695
  g_assert_nonnull(queue);
 
3696
  __attribute__((cleanup(string_set_clear)))
 
3697
    string_set cancelled_filenames = {};
 
3698
  const mono_microsecs current_time = 0;
 
3699
 
 
3700
  bool quit_now = false;
 
3701
  buffer password = {};
 
3702
  bool mandos_client_exited = false;
 
3703
  bool password_is_read = false;
 
3704
 
 
3705
  __attribute__((cleanup(cleanup_string)))
 
3706
    char *watchdir = make_temporary_directory();
 
3707
  g_assert_nonnull(watchdir);
 
3708
 
 
3709
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3710
                                      &password, watchdir,
 
3711
                                      &cancelled_filenames,
 
3712
                                      &current_time,
 
3713
                                      &mandos_client_exited,
 
3714
                                      &password_is_read));
 
3715
 
 
3716
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3717
 
 
3718
  const task_context *const added_read_task
 
3719
    = find_matching_task(queue,
 
3720
                         (task_context){ .func=read_inotify_event });
 
3721
  g_assert_nonnull(added_read_task);
 
3722
 
 
3723
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3724
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3725
 
 
3726
  char *sourcedir = make_temporary_directory();
 
3727
  g_assert_nonnull(sourcedir);
 
3728
 
 
3729
  __attribute__((cleanup(cleanup_string)))
 
3730
    char *filename = make_temporary_file_in_directory(sourcedir);
 
3731
  g_assert_nonnull(filename);
 
3732
 
 
3733
  __attribute__((cleanup(cleanup_string)))
 
3734
    char *targetfilename = NULL;
 
3735
  g_assert_cmpint(asprintf(&targetfilename, "%s/%s", watchdir,
 
3736
                           basename(filename)), >, 0);
 
3737
  g_assert_nonnull(targetfilename);
 
3738
 
 
3739
  g_assert_cmpint(rename(filename, targetfilename), ==, 0);
 
3740
  g_assert_cmpint(rmdir(sourcedir), ==, 0);
 
3741
  free(sourcedir);
 
3742
 
 
3743
  /* "sufficient to read at least one event." - inotify(7) */
 
3744
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3745
                              + NAME_MAX + 1);
 
3746
  struct inotify_event *ievent = malloc(ievent_size);
 
3747
  g_assert_nonnull(ievent);
 
3748
 
 
3749
  ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
 
3750
 
 
3751
  g_assert_cmpint((int)read_size, >, 0);
 
3752
  g_assert_true(ievent->mask & IN_MOVED_TO);
 
3753
  g_assert_cmpstr(ievent->name, ==, basename(targetfilename));
 
3754
 
 
3755
  free(ievent);
 
3756
 
 
3757
  g_assert_cmpint(unlink(targetfilename), ==, 0);
 
3758
  g_assert_cmpint(rmdir(watchdir), ==, 0);
 
3759
}
 
3760
 
 
3761
static
 
3762
void test_add_inotify_dir_watch_IN_MOVED_FROM(__attribute__((unused))
 
3763
                                              test_fixture *fixture,
 
3764
                                              __attribute__((unused))
 
3765
                                              gconstpointer
 
3766
                                              user_data){
 
3767
  __attribute__((cleanup(cleanup_close)))
 
3768
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3769
  g_assert_cmpint(epoll_fd, >=, 0);
 
3770
  __attribute__((cleanup(cleanup_queue)))
 
3771
    task_queue *queue = create_queue();
 
3772
  g_assert_nonnull(queue);
 
3773
  __attribute__((cleanup(string_set_clear)))
 
3774
    string_set cancelled_filenames = {};
 
3775
  const mono_microsecs current_time = 0;
 
3776
 
 
3777
  bool quit_now = false;
 
3778
  buffer password = {};
 
3779
  bool mandos_client_exited = false;
 
3780
  bool password_is_read = false;
 
3781
 
 
3782
  __attribute__((cleanup(cleanup_string)))
 
3783
    char *tempdir = make_temporary_directory();
 
3784
  g_assert_nonnull(tempdir);
 
3785
 
 
3786
  __attribute__((cleanup(cleanup_string)))
 
3787
    char *tempfilename = make_temporary_file_in_directory(tempdir);
 
3788
  g_assert_nonnull(tempfilename);
 
3789
 
 
3790
  __attribute__((cleanup(cleanup_string)))
 
3791
    char *targetdir = make_temporary_directory();
 
3792
  g_assert_nonnull(targetdir);
 
3793
 
 
3794
  __attribute__((cleanup(cleanup_string)))
 
3795
    char *targetfilename = NULL;
 
3796
  g_assert_cmpint(asprintf(&targetfilename, "%s/%s", targetdir,
 
3797
                           basename(tempfilename)), >, 0);
 
3798
  g_assert_nonnull(targetfilename);
 
3799
 
 
3800
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3801
                                      &password, tempdir,
 
3802
                                      &cancelled_filenames,
 
3803
                                      &current_time,
 
3804
                                      &mandos_client_exited,
 
3805
                                      &password_is_read));
 
3806
 
 
3807
  g_assert_cmpint(rename(tempfilename, targetfilename), ==, 0);
 
3808
 
 
3809
  const task_context *const added_read_task
 
3810
    = find_matching_task(queue,
 
3811
                         (task_context){ .func=read_inotify_event });
 
3812
  g_assert_nonnull(added_read_task);
 
3813
 
 
3814
  /* "sufficient to read at least one event." - inotify(7) */
 
3815
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3816
                              + NAME_MAX + 1);
 
3817
  struct inotify_event *ievent = malloc(ievent_size);
 
3818
  g_assert_nonnull(ievent);
 
3819
 
 
3820
  ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
 
3821
 
 
3822
  g_assert_cmpint((int)read_size, >, 0);
 
3823
  g_assert_true(ievent->mask & IN_MOVED_FROM);
 
3824
  g_assert_cmpstr(ievent->name, ==, basename(tempfilename));
 
3825
 
 
3826
  free(ievent);
 
3827
 
 
3828
  g_assert_cmpint(unlink(targetfilename), ==, 0);
 
3829
  g_assert_cmpint(rmdir(targetdir), ==, 0);
 
3830
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3831
}
 
3832
 
 
3833
static
 
3834
void test_add_inotify_dir_watch_IN_DELETE(__attribute__((unused))
 
3835
                                          test_fixture *fixture,
 
3836
                                          __attribute__((unused))
 
3837
                                          gconstpointer user_data){
 
3838
  __attribute__((cleanup(cleanup_close)))
 
3839
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3840
  g_assert_cmpint(epoll_fd, >=, 0);
 
3841
  __attribute__((cleanup(cleanup_queue)))
 
3842
    task_queue *queue = create_queue();
 
3843
  g_assert_nonnull(queue);
 
3844
  __attribute__((cleanup(string_set_clear)))
 
3845
    string_set cancelled_filenames = {};
 
3846
  const mono_microsecs current_time = 0;
 
3847
 
 
3848
  bool quit_now = false;
 
3849
  buffer password = {};
 
3850
  bool mandos_client_exited = false;
 
3851
  bool password_is_read = false;
 
3852
 
 
3853
  __attribute__((cleanup(cleanup_string)))
 
3854
    char *tempdir = make_temporary_directory();
 
3855
  g_assert_nonnull(tempdir);
 
3856
 
 
3857
  __attribute__((cleanup(cleanup_string)))
 
3858
    char *tempfile = make_temporary_file_in_directory(tempdir);
 
3859
  g_assert_nonnull(tempfile);
 
3860
 
 
3861
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3862
                                      &password, tempdir,
 
3863
                                      &cancelled_filenames,
 
3864
                                      &current_time,
 
3865
                                      &mandos_client_exited,
 
3866
                                      &password_is_read));
 
3867
  g_assert_cmpint(unlink(tempfile), ==, 0);
 
3868
 
 
3869
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3870
 
 
3871
  const task_context *const added_read_task
 
3872
    = find_matching_task(queue,
 
3873
                         (task_context){ .func=read_inotify_event });
 
3874
  g_assert_nonnull(added_read_task);
 
3875
 
 
3876
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3877
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3878
 
 
3879
  /* "sufficient to read at least one event." - inotify(7) */
 
3880
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3881
                              + NAME_MAX + 1);
 
3882
  struct inotify_event *ievent = malloc(ievent_size);
 
3883
  g_assert_nonnull(ievent);
 
3884
 
 
3885
  ssize_t read_size = 0;
 
3886
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3887
 
 
3888
  g_assert_cmpint((int)read_size, >, 0);
 
3889
  g_assert_true(ievent->mask & IN_DELETE);
 
3890
  g_assert_cmpstr(ievent->name, ==, basename(tempfile));
 
3891
 
 
3892
  free(ievent);
 
3893
 
 
3894
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3895
}
 
3896
 
 
3897
static
 
3898
void test_add_inotify_dir_watch_IN_EXCL_UNLINK(__attribute__((unused))
 
3899
                                               test_fixture *fixture,
 
3900
                                               __attribute__((unused))
 
3901
                                               gconstpointer
 
3902
                                               user_data){
 
3903
  __attribute__((cleanup(cleanup_close)))
 
3904
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3905
  g_assert_cmpint(epoll_fd, >=, 0);
 
3906
  __attribute__((cleanup(cleanup_queue)))
 
3907
    task_queue *queue = create_queue();
 
3908
  g_assert_nonnull(queue);
 
3909
  __attribute__((cleanup(string_set_clear)))
 
3910
    string_set cancelled_filenames = {};
 
3911
  const mono_microsecs current_time = 0;
 
3912
 
 
3913
  bool quit_now = false;
 
3914
  buffer password = {};
 
3915
  bool mandos_client_exited = false;
 
3916
  bool password_is_read = false;
 
3917
 
 
3918
  __attribute__((cleanup(cleanup_string)))
 
3919
    char *tempdir = make_temporary_directory();
 
3920
  g_assert_nonnull(tempdir);
 
3921
 
 
3922
  __attribute__((cleanup(cleanup_string)))
 
3923
    char *tempfile = make_temporary_file_in_directory(tempdir);
 
3924
  g_assert_nonnull(tempfile);
 
3925
  int tempfile_fd = open(tempfile, O_WRONLY | O_CLOEXEC | O_NOCTTY
 
3926
                         | O_NOFOLLOW);
 
3927
  g_assert_cmpint(tempfile_fd, >, 2);
 
3928
 
 
3929
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
 
3930
                                      &password, tempdir,
 
3931
                                      &cancelled_filenames,
 
3932
                                      &current_time,
 
3933
                                      &mandos_client_exited,
 
3934
                                      &password_is_read));
 
3935
  g_assert_cmpint(unlink(tempfile), ==, 0);
 
3936
 
 
3937
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
 
3938
 
 
3939
  const task_context *const added_read_task
 
3940
    = find_matching_task(queue,
 
3941
                         (task_context){ .func=read_inotify_event });
 
3942
  g_assert_nonnull(added_read_task);
 
3943
 
 
3944
  g_assert_cmpint(added_read_task->fd, >, 2);
 
3945
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
 
3946
 
 
3947
  /* "sufficient to read at least one event." - inotify(7) */
 
3948
  const size_t ievent_size = (sizeof(struct inotify_event)
 
3949
                              + NAME_MAX + 1);
 
3950
  struct inotify_event *ievent = malloc(ievent_size);
 
3951
  g_assert_nonnull(ievent);
 
3952
 
 
3953
  ssize_t read_size = 0;
 
3954
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3955
 
 
3956
  g_assert_cmpint((int)read_size, >, 0);
 
3957
  g_assert_true(ievent->mask & IN_DELETE);
 
3958
  g_assert_cmpstr(ievent->name, ==, basename(tempfile));
 
3959
 
 
3960
  g_assert_cmpint(close(tempfile_fd), ==, 0);
 
3961
 
 
3962
  /* IN_EXCL_UNLINK should make the closing of the previously unlinked
 
3963
     file not appear as an ievent, so we should not see it now. */
 
3964
  read_size = read(added_read_task->fd, ievent, ievent_size);
 
3965
  g_assert_cmpint((int)read_size, ==, -1);
 
3966
  g_assert_true(errno == EAGAIN);
 
3967
 
 
3968
  free(ievent);
 
3969
 
 
3970
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
3971
}
 
3972
 
 
3973
static void test_read_inotify_event_readerror(__attribute__((unused))
 
3974
                                              test_fixture *fixture,
 
3975
                                              __attribute__((unused))
 
3976
                                              gconstpointer
 
3977
                                              user_data){
 
3978
  __attribute__((cleanup(cleanup_close)))
 
3979
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
3980
  g_assert_cmpint(epoll_fd, >=, 0);
 
3981
  const mono_microsecs current_time = 0;
 
3982
 
 
3983
  /* Reading /proc/self/mem from offset 0 will always result in EIO */
 
3984
  const int fd = open("/proc/self/mem",
 
3985
                      O_RDONLY | O_CLOEXEC | O_NOCTTY);
 
3986
 
 
3987
  bool quit_now = false;
 
3988
  __attribute__((cleanup(cleanup_queue)))
 
3989
    task_queue *queue = create_queue();
 
3990
  g_assert_nonnull(queue);
 
3991
 
 
3992
  task_context task = {
 
3993
    .func=read_inotify_event,
 
3994
    .epoll_fd=epoll_fd,
 
3995
    .fd=fd,
 
3996
    .quit_now=&quit_now,
 
3997
    .filename=strdup("/nonexistent"),
 
3998
    .cancelled_filenames = &(string_set){},
 
3999
    .notafter=0,
 
4000
    .current_time=&current_time,
 
4001
  };
 
4002
  g_assert_nonnull(task.filename);
 
4003
  run_task_with_stderr_to_dev_null(task, queue);
 
4004
  g_assert_true(quit_now);
 
4005
  g_assert_true(queue->next_run == 0);
 
4006
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4007
 
 
4008
  g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
 
4009
 
 
4010
  g_assert_cmpint(close(fd), ==, -1);
 
4011
}
 
4012
 
 
4013
static void test_read_inotify_event_bad_epoll(__attribute__((unused))
 
4014
                                              test_fixture *fixture,
 
4015
                                              __attribute__((unused))
 
4016
                                              gconstpointer
 
4017
                                              user_data){
 
4018
  const mono_microsecs current_time = 17;
 
4019
 
 
4020
  int pipefds[2];
 
4021
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4022
  const int epoll_fd = pipefds[0]; /* This will obviously fail */
 
4023
 
 
4024
  bool quit_now = false;
 
4025
  buffer password = {};
 
4026
  bool mandos_client_exited = false;
 
4027
  bool password_is_read = false;
 
4028
  __attribute__((cleanup(cleanup_queue)))
 
4029
    task_queue *queue = create_queue();
 
4030
  g_assert_nonnull(queue);
 
4031
 
 
4032
  task_context task = {
 
4033
    .func=read_inotify_event,
 
4034
    .epoll_fd=epoll_fd,
 
4035
    .fd=pipefds[0],
 
4036
    .quit_now=&quit_now,
 
4037
    .password=&password,
 
4038
    .filename=strdup("/nonexistent"),
 
4039
    .cancelled_filenames = &(string_set){},
 
4040
    .notafter=0,
 
4041
    .current_time=&current_time,
 
4042
    .mandos_client_exited=&mandos_client_exited,
 
4043
    .password_is_read=&password_is_read,
 
4044
  };
 
4045
  g_assert_nonnull(task.filename);
 
4046
  run_task_with_stderr_to_dev_null(task, queue);
 
4047
 
 
4048
  g_assert_nonnull(find_matching_task(queue, task));
 
4049
  g_assert_true(queue->next_run == 1000000 + current_time);
 
4050
 
 
4051
  g_assert_cmpint(close(pipefds[0]), ==, 0);
 
4052
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4053
}
 
4054
 
 
4055
static void test_read_inotify_event_nodata(__attribute__((unused))
 
4056
                                           test_fixture *fixture,
 
4057
                                           __attribute__((unused))
 
4058
                                           gconstpointer user_data){
 
4059
  __attribute__((cleanup(cleanup_close)))
 
4060
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4061
  g_assert_cmpint(epoll_fd, >=, 0);
 
4062
  const mono_microsecs current_time = 0;
 
4063
 
 
4064
  int pipefds[2];
 
4065
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4066
 
 
4067
  bool quit_now = false;
 
4068
  buffer password = {};
 
4069
  bool mandos_client_exited = false;
 
4070
  bool password_is_read = false;
 
4071
  __attribute__((cleanup(cleanup_queue)))
 
4072
    task_queue *queue = create_queue();
 
4073
  g_assert_nonnull(queue);
 
4074
 
 
4075
  task_context task = {
 
4076
    .func=read_inotify_event,
 
4077
    .epoll_fd=epoll_fd,
 
4078
    .fd=pipefds[0],
 
4079
    .quit_now=&quit_now,
 
4080
    .password=&password,
 
4081
    .filename=strdup("/nonexistent"),
 
4082
    .cancelled_filenames = &(string_set){},
 
4083
    .notafter=0,
 
4084
    .current_time=&current_time,
 
4085
    .mandos_client_exited=&mandos_client_exited,
 
4086
    .password_is_read=&password_is_read,
 
4087
  };
 
4088
  g_assert_nonnull(task.filename);
 
4089
  task.func(task, queue);
 
4090
  g_assert_false(quit_now);
 
4091
  g_assert_true(queue->next_run == 0);
 
4092
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4093
 
 
4094
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4095
        .func=read_inotify_event,
 
4096
        .epoll_fd=epoll_fd,
 
4097
        .fd=pipefds[0],
 
4098
        .quit_now=&quit_now,
 
4099
        .password=&password,
 
4100
        .filename=task.filename,
 
4101
        .cancelled_filenames=task.cancelled_filenames,
 
4102
        .current_time=&current_time,
 
4103
        .mandos_client_exited=&mandos_client_exited,
 
4104
        .password_is_read=&password_is_read,
 
4105
      }));
 
4106
 
 
4107
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4108
                                   EPOLLIN | EPOLLRDHUP));
 
4109
 
 
4110
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4111
}
 
4112
 
 
4113
static void test_read_inotify_event_eof(__attribute__((unused))
 
4114
                                        test_fixture *fixture,
 
4115
                                        __attribute__((unused))
 
4116
                                        gconstpointer user_data){
 
4117
  __attribute__((cleanup(cleanup_close)))
 
4118
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4119
  g_assert_cmpint(epoll_fd, >=, 0);
 
4120
  const mono_microsecs current_time = 0;
 
4121
 
 
4122
  int pipefds[2];
 
4123
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4124
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4125
 
 
4126
  bool quit_now = false;
 
4127
  buffer password = {};
 
4128
  __attribute__((cleanup(cleanup_queue)))
 
4129
    task_queue *queue = create_queue();
 
4130
  g_assert_nonnull(queue);
 
4131
 
 
4132
  task_context task = {
 
4133
    .func=read_inotify_event,
 
4134
    .epoll_fd=epoll_fd,
 
4135
    .fd=pipefds[0],
 
4136
    .quit_now=&quit_now,
 
4137
    .password=&password,
 
4138
    .filename=strdup("/nonexistent"),
 
4139
    .cancelled_filenames = &(string_set){},
 
4140
    .notafter=0,
 
4141
    .current_time=&current_time,
 
4142
  };
 
4143
  run_task_with_stderr_to_dev_null(task, queue);
 
4144
  g_assert_true(quit_now);
 
4145
  g_assert_true(queue->next_run == 0);
 
4146
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4147
 
 
4148
  g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
 
4149
 
 
4150
  g_assert_cmpint(close(pipefds[0]), ==, -1);
 
4151
}
 
4152
 
 
4153
static
 
4154
void test_read_inotify_event_IN_CLOSE_WRITE(__attribute__((unused))
 
4155
                                            test_fixture *fixture,
 
4156
                                            __attribute__((unused))
 
4157
                                            gconstpointer user_data){
 
4158
  __attribute__((cleanup(cleanup_close)))
 
4159
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4160
  g_assert_cmpint(epoll_fd, >=, 0);
 
4161
  const mono_microsecs current_time = 0;
 
4162
 
 
4163
  int pipefds[2];
 
4164
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4165
 
 
4166
  /* "sufficient to read at least one event." - inotify(7) */
 
4167
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4168
                                  + NAME_MAX + 1);
 
4169
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4170
  struct {
 
4171
    struct inotify_event event;
 
4172
    char name_buffer[NAME_MAX + 1];
 
4173
  } ievent_buffer;
 
4174
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4175
 
 
4176
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4177
  ievent->mask = IN_CLOSE_WRITE;
 
4178
  ievent->len = sizeof(dummy_file_name);
 
4179
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4180
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4181
                              + sizeof(dummy_file_name));
 
4182
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4183
                  ==, ievent_size);
 
4184
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4185
 
 
4186
  bool quit_now = false;
 
4187
  buffer password = {};
 
4188
  bool mandos_client_exited = false;
 
4189
  bool password_is_read = false;
 
4190
  __attribute__((cleanup(cleanup_queue)))
 
4191
    task_queue *queue = create_queue();
 
4192
  g_assert_nonnull(queue);
 
4193
 
 
4194
  task_context task = {
 
4195
    .func=read_inotify_event,
 
4196
    .epoll_fd=epoll_fd,
 
4197
    .fd=pipefds[0],
 
4198
    .quit_now=&quit_now,
 
4199
    .password=&password,
 
4200
    .filename=strdup("/nonexistent"),
 
4201
    .cancelled_filenames = &(string_set){},
 
4202
    .notafter=0,
 
4203
    .current_time=&current_time,
 
4204
    .mandos_client_exited=&mandos_client_exited,
 
4205
    .password_is_read=&password_is_read,
 
4206
  };
 
4207
  task.func(task, queue);
 
4208
  g_assert_false(quit_now);
 
4209
  g_assert_true(queue->next_run != 0);
 
4210
  g_assert_cmpuint((unsigned int)queue->length, >=, 1);
 
4211
 
 
4212
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4213
        .func=read_inotify_event,
 
4214
        .epoll_fd=epoll_fd,
 
4215
        .fd=pipefds[0],
 
4216
        .quit_now=&quit_now,
 
4217
        .password=&password,
 
4218
        .filename=task.filename,
 
4219
        .cancelled_filenames=task.cancelled_filenames,
 
4220
        .current_time=&current_time,
 
4221
        .mandos_client_exited=&mandos_client_exited,
 
4222
        .password_is_read=&password_is_read,
 
4223
      }));
 
4224
 
 
4225
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4226
                                   EPOLLIN | EPOLLRDHUP));
 
4227
 
 
4228
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
4229
 
 
4230
  __attribute__((cleanup(cleanup_string)))
 
4231
    char *filename = NULL;
 
4232
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4233
                           dummy_file_name), >, 0);
 
4234
  g_assert_nonnull(filename);
 
4235
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4236
        .func=open_and_parse_question,
 
4237
        .epoll_fd=epoll_fd,
 
4238
        .filename=filename,
 
4239
        .question_filename=filename,
 
4240
        .password=&password,
 
4241
        .cancelled_filenames=task.cancelled_filenames,
 
4242
        .current_time=&current_time,
 
4243
        .mandos_client_exited=&mandos_client_exited,
 
4244
        .password_is_read=&password_is_read,
 
4245
      }));
 
4246
}
 
4247
 
 
4248
static
 
4249
void test_read_inotify_event_IN_MOVED_TO(__attribute__((unused))
 
4250
                                         test_fixture *fixture,
 
4251
                                         __attribute__((unused))
 
4252
                                         gconstpointer user_data){
 
4253
  __attribute__((cleanup(cleanup_close)))
 
4254
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4255
  g_assert_cmpint(epoll_fd, >=, 0);
 
4256
  const mono_microsecs current_time = 0;
 
4257
 
 
4258
  int pipefds[2];
 
4259
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4260
 
 
4261
  /* "sufficient to read at least one event." - inotify(7) */
 
4262
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4263
                                  + NAME_MAX + 1);
 
4264
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4265
  struct {
 
4266
    struct inotify_event event;
 
4267
    char name_buffer[NAME_MAX + 1];
 
4268
  } ievent_buffer;
 
4269
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4270
 
 
4271
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4272
  ievent->mask = IN_MOVED_TO;
 
4273
  ievent->len = sizeof(dummy_file_name);
 
4274
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4275
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4276
                              + sizeof(dummy_file_name));
 
4277
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4278
                  ==, ievent_size);
 
4279
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4280
 
 
4281
  bool quit_now = false;
 
4282
  buffer password = {};
 
4283
  bool mandos_client_exited = false;
 
4284
  bool password_is_read = false;
 
4285
  __attribute__((cleanup(cleanup_queue)))
 
4286
    task_queue *queue = create_queue();
 
4287
  g_assert_nonnull(queue);
 
4288
 
 
4289
  task_context task = {
 
4290
    .func=read_inotify_event,
 
4291
    .epoll_fd=epoll_fd,
 
4292
    .fd=pipefds[0],
 
4293
    .quit_now=&quit_now,
 
4294
    .password=&password,
 
4295
    .filename=strdup("/nonexistent"),
 
4296
    .cancelled_filenames = &(string_set){},
 
4297
    .notafter=0,
 
4298
    .current_time=&current_time,
 
4299
    .mandos_client_exited=&mandos_client_exited,
 
4300
    .password_is_read=&password_is_read,
 
4301
  };
 
4302
  task.func(task, queue);
 
4303
  g_assert_false(quit_now);
 
4304
  g_assert_true(queue->next_run != 0);
 
4305
  g_assert_cmpuint((unsigned int)queue->length, >=, 1);
 
4306
 
 
4307
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4308
        .func=read_inotify_event,
 
4309
        .epoll_fd=epoll_fd,
 
4310
        .fd=pipefds[0],
 
4311
        .quit_now=&quit_now,
 
4312
        .password=&password,
 
4313
        .filename=task.filename,
 
4314
        .cancelled_filenames=task.cancelled_filenames,
 
4315
        .current_time=&current_time,
 
4316
        .mandos_client_exited=&mandos_client_exited,
 
4317
        .password_is_read=&password_is_read,
 
4318
      }));
 
4319
 
 
4320
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4321
                                   EPOLLIN | EPOLLRDHUP));
 
4322
 
 
4323
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
 
4324
 
 
4325
  __attribute__((cleanup(cleanup_string)))
 
4326
    char *filename = NULL;
 
4327
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4328
                           dummy_file_name), >, 0);
 
4329
  g_assert_nonnull(filename);
 
4330
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4331
        .func=open_and_parse_question,
 
4332
        .epoll_fd=epoll_fd,
 
4333
        .filename=filename,
 
4334
        .question_filename=filename,
 
4335
        .password=&password,
 
4336
        .cancelled_filenames=task.cancelled_filenames,
 
4337
        .current_time=&current_time,
 
4338
        .mandos_client_exited=&mandos_client_exited,
 
4339
        .password_is_read=&password_is_read,
 
4340
      }));
 
4341
}
 
4342
 
 
4343
static
 
4344
void test_read_inotify_event_IN_MOVED_FROM(__attribute__((unused))
 
4345
                                           test_fixture *fixture,
 
4346
                                           __attribute__((unused))
 
4347
                                           gconstpointer user_data){
 
4348
  __attribute__((cleanup(cleanup_close)))
 
4349
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4350
  g_assert_cmpint(epoll_fd, >=, 0);
 
4351
  __attribute__((cleanup(string_set_clear)))
 
4352
    string_set cancelled_filenames = {};
 
4353
  const mono_microsecs current_time = 0;
 
4354
 
 
4355
  int pipefds[2];
 
4356
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4357
 
 
4358
  /* "sufficient to read at least one event." - inotify(7) */
 
4359
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4360
                                  + NAME_MAX + 1);
 
4361
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4362
  struct {
 
4363
    struct inotify_event event;
 
4364
    char name_buffer[NAME_MAX + 1];
 
4365
  } ievent_buffer;
 
4366
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4367
 
 
4368
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4369
  ievent->mask = IN_MOVED_FROM;
 
4370
  ievent->len = sizeof(dummy_file_name);
 
4371
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4372
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4373
                              + sizeof(dummy_file_name));
 
4374
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4375
                  ==, ievent_size);
 
4376
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4377
 
 
4378
  bool quit_now = false;
 
4379
  buffer password = {};
 
4380
  bool mandos_client_exited = false;
 
4381
  bool password_is_read = false;
 
4382
  __attribute__((cleanup(cleanup_queue)))
 
4383
    task_queue *queue = create_queue();
 
4384
  g_assert_nonnull(queue);
 
4385
 
 
4386
  task_context task = {
 
4387
    .func=read_inotify_event,
 
4388
    .epoll_fd=epoll_fd,
 
4389
    .fd=pipefds[0],
 
4390
    .quit_now=&quit_now,
 
4391
    .password=&password,
 
4392
    .filename=strdup("/nonexistent"),
 
4393
    .cancelled_filenames=&cancelled_filenames,
 
4394
    .current_time=&current_time,
 
4395
    .mandos_client_exited=&mandos_client_exited,
 
4396
    .password_is_read=&password_is_read,
 
4397
  };
 
4398
  task.func(task, queue);
 
4399
  g_assert_false(quit_now);
 
4400
  g_assert_true(queue->next_run == 0);
 
4401
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4402
 
 
4403
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4404
        .func=read_inotify_event,
 
4405
        .epoll_fd=epoll_fd,
 
4406
        .fd=pipefds[0],
 
4407
        .quit_now=&quit_now,
 
4408
        .password=&password,
 
4409
        .filename=task.filename,
 
4410
        .cancelled_filenames=&cancelled_filenames,
 
4411
        .current_time=&current_time,
 
4412
        .mandos_client_exited=&mandos_client_exited,
 
4413
        .password_is_read=&password_is_read,
 
4414
      }));
 
4415
 
 
4416
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4417
                                   EPOLLIN | EPOLLRDHUP));
 
4418
 
 
4419
  __attribute__((cleanup(cleanup_string)))
 
4420
    char *filename = NULL;
 
4421
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4422
                           dummy_file_name), >, 0);
 
4423
  g_assert_nonnull(filename);
 
4424
  g_assert_true(string_set_contains(*task.cancelled_filenames,
 
4425
                                    filename));
 
4426
}
 
4427
 
 
4428
static void test_read_inotify_event_IN_DELETE(__attribute__((unused))
 
4429
                                              test_fixture *fixture,
 
4430
                                              __attribute__((unused))
 
4431
                                              gconstpointer
 
4432
                                              user_data){
 
4433
  __attribute__((cleanup(cleanup_close)))
 
4434
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4435
  g_assert_cmpint(epoll_fd, >=, 0);
 
4436
  __attribute__((cleanup(string_set_clear)))
 
4437
    string_set cancelled_filenames = {};
 
4438
  const mono_microsecs current_time = 0;
 
4439
 
 
4440
  int pipefds[2];
 
4441
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4442
 
 
4443
  /* "sufficient to read at least one event." - inotify(7) */
 
4444
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4445
                                  + NAME_MAX + 1);
 
4446
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4447
  struct {
 
4448
    struct inotify_event event;
 
4449
    char name_buffer[NAME_MAX + 1];
 
4450
  } ievent_buffer;
 
4451
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4452
 
 
4453
  const char dummy_file_name[] = "ask.dummy_file_name";
 
4454
  ievent->mask = IN_DELETE;
 
4455
  ievent->len = sizeof(dummy_file_name);
 
4456
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4457
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4458
                              + sizeof(dummy_file_name));
 
4459
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4460
                  ==, ievent_size);
 
4461
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4462
 
 
4463
  bool quit_now = false;
 
4464
  buffer password = {};
 
4465
  bool mandos_client_exited = false;
 
4466
  bool password_is_read = false;
 
4467
  __attribute__((cleanup(cleanup_queue)))
 
4468
    task_queue *queue = create_queue();
 
4469
  g_assert_nonnull(queue);
 
4470
 
 
4471
  task_context task = {
 
4472
    .func=read_inotify_event,
 
4473
    .epoll_fd=epoll_fd,
 
4474
    .fd=pipefds[0],
 
4475
    .quit_now=&quit_now,
 
4476
    .password=&password,
 
4477
    .filename=strdup("/nonexistent"),
 
4478
    .cancelled_filenames=&cancelled_filenames,
 
4479
    .current_time=&current_time,
 
4480
    .mandos_client_exited=&mandos_client_exited,
 
4481
    .password_is_read=&password_is_read,
 
4482
  };
 
4483
  task.func(task, queue);
 
4484
  g_assert_false(quit_now);
 
4485
  g_assert_true(queue->next_run == 0);
 
4486
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4487
 
 
4488
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4489
        .func=read_inotify_event,
 
4490
        .epoll_fd=epoll_fd,
 
4491
        .fd=pipefds[0],
 
4492
        .quit_now=&quit_now,
 
4493
        .password=&password,
 
4494
        .filename=task.filename,
 
4495
        .cancelled_filenames=&cancelled_filenames,
 
4496
        .current_time=&current_time,
 
4497
        .mandos_client_exited=&mandos_client_exited,
 
4498
        .password_is_read=&password_is_read,
 
4499
      }));
 
4500
 
 
4501
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4502
                                   EPOLLIN | EPOLLRDHUP));
 
4503
 
 
4504
  __attribute__((cleanup(cleanup_string)))
 
4505
    char *filename = NULL;
 
4506
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4507
                           dummy_file_name), >, 0);
 
4508
  g_assert_nonnull(filename);
 
4509
  g_assert_true(string_set_contains(*task.cancelled_filenames,
 
4510
                                    filename));
 
4511
}
 
4512
 
 
4513
static void
 
4514
test_read_inotify_event_IN_CLOSE_WRITE_badname(__attribute__((unused))
 
4515
                                               test_fixture *fixture,
 
4516
                                               __attribute__((unused))
 
4517
                                               gconstpointer
 
4518
                                               user_data){
 
4519
  __attribute__((cleanup(cleanup_close)))
 
4520
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4521
  g_assert_cmpint(epoll_fd, >=, 0);
 
4522
  const mono_microsecs current_time = 0;
 
4523
 
 
4524
  int pipefds[2];
 
4525
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4526
 
 
4527
  /* "sufficient to read at least one event." - inotify(7) */
 
4528
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4529
                                  + NAME_MAX + 1);
 
4530
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4531
  struct {
 
4532
    struct inotify_event event;
 
4533
    char name_buffer[NAME_MAX + 1];
 
4534
  } ievent_buffer;
 
4535
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4536
 
 
4537
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4538
  ievent->mask = IN_CLOSE_WRITE;
 
4539
  ievent->len = sizeof(dummy_file_name);
 
4540
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4541
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4542
                              + sizeof(dummy_file_name));
 
4543
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4544
                  ==, ievent_size);
 
4545
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4546
 
 
4547
  bool quit_now = false;
 
4548
  buffer password = {};
 
4549
  bool mandos_client_exited = false;
 
4550
  bool password_is_read = false;
 
4551
  __attribute__((cleanup(cleanup_queue)))
 
4552
    task_queue *queue = create_queue();
 
4553
  g_assert_nonnull(queue);
 
4554
 
 
4555
  task_context task = {
 
4556
    .func=read_inotify_event,
 
4557
    .epoll_fd=epoll_fd,
 
4558
    .fd=pipefds[0],
 
4559
    .quit_now=&quit_now,
 
4560
    .password=&password,
 
4561
    .filename=strdup("/nonexistent"),
 
4562
    .cancelled_filenames = &(string_set){},
 
4563
    .notafter=0,
 
4564
    .current_time=&current_time,
 
4565
    .mandos_client_exited=&mandos_client_exited,
 
4566
    .password_is_read=&password_is_read,
 
4567
  };
 
4568
  task.func(task, queue);
 
4569
  g_assert_false(quit_now);
 
4570
  g_assert_true(queue->next_run == 0);
 
4571
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4572
 
 
4573
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4574
        .func=read_inotify_event,
 
4575
        .epoll_fd=epoll_fd,
 
4576
        .fd=pipefds[0],
 
4577
        .quit_now=&quit_now,
 
4578
        .password=&password,
 
4579
        .filename=task.filename,
 
4580
        .cancelled_filenames=task.cancelled_filenames,
 
4581
        .current_time=&current_time,
 
4582
        .mandos_client_exited=&mandos_client_exited,
 
4583
        .password_is_read=&password_is_read,
 
4584
      }));
 
4585
 
 
4586
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4587
                                   EPOLLIN | EPOLLRDHUP));
 
4588
}
 
4589
 
 
4590
static void
 
4591
test_read_inotify_event_IN_MOVED_TO_badname(__attribute__((unused))
 
4592
                                            test_fixture *fixture,
 
4593
                                            __attribute__((unused))
 
4594
                                            gconstpointer user_data){
 
4595
  __attribute__((cleanup(cleanup_close)))
 
4596
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4597
  g_assert_cmpint(epoll_fd, >=, 0);
 
4598
  const mono_microsecs current_time = 0;
 
4599
 
 
4600
  int pipefds[2];
 
4601
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4602
 
 
4603
  /* "sufficient to read at least one event." - inotify(7) */
 
4604
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4605
                                  + NAME_MAX + 1);
 
4606
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4607
  struct {
 
4608
    struct inotify_event event;
 
4609
    char name_buffer[NAME_MAX + 1];
 
4610
  } ievent_buffer;
 
4611
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4612
 
 
4613
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4614
  ievent->mask = IN_MOVED_TO;
 
4615
  ievent->len = sizeof(dummy_file_name);
 
4616
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4617
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4618
                              + sizeof(dummy_file_name));
 
4619
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4620
                  ==, ievent_size);
 
4621
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4622
 
 
4623
  bool quit_now = false;
 
4624
  buffer password = {};
 
4625
  bool mandos_client_exited = false;
 
4626
  bool password_is_read = false;
 
4627
  __attribute__((cleanup(cleanup_queue)))
 
4628
    task_queue *queue = create_queue();
 
4629
  g_assert_nonnull(queue);
 
4630
 
 
4631
  task_context task = {
 
4632
    .func=read_inotify_event,
 
4633
    .epoll_fd=epoll_fd,
 
4634
    .fd=pipefds[0],
 
4635
    .quit_now=&quit_now,
 
4636
    .password=&password,
 
4637
    .filename=strdup("/nonexistent"),
 
4638
    .cancelled_filenames = &(string_set){},
 
4639
    .notafter=0,
 
4640
    .current_time=&current_time,
 
4641
    .mandos_client_exited=&mandos_client_exited,
 
4642
    .password_is_read=&password_is_read,
 
4643
  };
 
4644
  task.func(task, queue);
 
4645
  g_assert_false(quit_now);
 
4646
  g_assert_true(queue->next_run == 0);
 
4647
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4648
 
 
4649
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4650
        .func=read_inotify_event,
 
4651
        .epoll_fd=epoll_fd,
 
4652
        .fd=pipefds[0],
 
4653
        .quit_now=&quit_now,
 
4654
        .password=&password,
 
4655
        .filename=task.filename,
 
4656
        .cancelled_filenames=task.cancelled_filenames,
 
4657
        .current_time=&current_time,
 
4658
        .mandos_client_exited=&mandos_client_exited,
 
4659
        .password_is_read=&password_is_read,
 
4660
      }));
 
4661
 
 
4662
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4663
                                   EPOLLIN | EPOLLRDHUP));
 
4664
}
 
4665
 
 
4666
static void
 
4667
test_read_inotify_event_IN_MOVED_FROM_badname(__attribute__((unused))
 
4668
                                              test_fixture *fixture,
 
4669
                                              __attribute__((unused))
 
4670
                                              gconstpointer
 
4671
                                              user_data){
 
4672
  __attribute__((cleanup(cleanup_close)))
 
4673
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4674
  g_assert_cmpint(epoll_fd, >=, 0);
 
4675
  __attribute__((cleanup(string_set_clear)))
 
4676
    string_set cancelled_filenames = {};
 
4677
  const mono_microsecs current_time = 0;
 
4678
 
 
4679
  int pipefds[2];
 
4680
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4681
 
 
4682
  /* "sufficient to read at least one event." - inotify(7) */
 
4683
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4684
                                  + NAME_MAX + 1);
 
4685
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4686
  struct {
 
4687
    struct inotify_event event;
 
4688
    char name_buffer[NAME_MAX + 1];
 
4689
  } ievent_buffer;
 
4690
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4691
 
 
4692
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4693
  ievent->mask = IN_MOVED_FROM;
 
4694
  ievent->len = sizeof(dummy_file_name);
 
4695
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4696
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4697
                              + sizeof(dummy_file_name));
 
4698
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4699
                  ==, ievent_size);
 
4700
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4701
 
 
4702
  bool quit_now = false;
 
4703
  buffer password = {};
 
4704
  bool mandos_client_exited = false;
 
4705
  bool password_is_read = false;
 
4706
  __attribute__((cleanup(cleanup_queue)))
 
4707
    task_queue *queue = create_queue();
 
4708
  g_assert_nonnull(queue);
 
4709
 
 
4710
  task_context task = {
 
4711
    .func=read_inotify_event,
 
4712
    .epoll_fd=epoll_fd,
 
4713
    .fd=pipefds[0],
 
4714
    .quit_now=&quit_now,
 
4715
    .password=&password,
 
4716
    .filename=strdup("/nonexistent"),
 
4717
    .cancelled_filenames=&cancelled_filenames,
 
4718
    .current_time=&current_time,
 
4719
    .mandos_client_exited=&mandos_client_exited,
 
4720
    .password_is_read=&password_is_read,
 
4721
  };
 
4722
  task.func(task, queue);
 
4723
  g_assert_false(quit_now);
 
4724
  g_assert_true(queue->next_run == 0);
 
4725
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4726
 
 
4727
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4728
        .func=read_inotify_event,
 
4729
        .epoll_fd=epoll_fd,
 
4730
        .fd=pipefds[0],
 
4731
        .quit_now=&quit_now,
 
4732
        .password=&password,
 
4733
        .filename=task.filename,
 
4734
        .cancelled_filenames=&cancelled_filenames,
 
4735
        .current_time=&current_time,
 
4736
        .mandos_client_exited=&mandos_client_exited,
 
4737
        .password_is_read=&password_is_read,
 
4738
      }));
 
4739
 
 
4740
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4741
                                   EPOLLIN | EPOLLRDHUP));
 
4742
 
 
4743
  __attribute__((cleanup(cleanup_string)))
 
4744
    char *filename = NULL;
 
4745
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4746
                           dummy_file_name), >, 0);
 
4747
  g_assert_nonnull(filename);
 
4748
  g_assert_false(string_set_contains(cancelled_filenames, filename));
 
4749
}
 
4750
 
 
4751
static
 
4752
void test_read_inotify_event_IN_DELETE_badname(__attribute__((unused))
 
4753
                                               test_fixture *fixture,
 
4754
                                               __attribute__((unused))
 
4755
                                               gconstpointer
 
4756
                                               user_data){
 
4757
  __attribute__((cleanup(cleanup_close)))
 
4758
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4759
  g_assert_cmpint(epoll_fd, >=, 0);
 
4760
  __attribute__((cleanup(string_set_clear)))
 
4761
    string_set cancelled_filenames = {};
 
4762
  const mono_microsecs current_time = 0;
 
4763
 
 
4764
  int pipefds[2];
 
4765
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
4766
 
 
4767
  /* "sufficient to read at least one event." - inotify(7) */
 
4768
  const size_t ievent_max_size = (sizeof(struct inotify_event)
 
4769
                                  + NAME_MAX + 1);
 
4770
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
 
4771
  struct {
 
4772
    struct inotify_event event;
 
4773
    char name_buffer[NAME_MAX + 1];
 
4774
  } ievent_buffer;
 
4775
  struct inotify_event *const ievent = &ievent_buffer.event;
 
4776
 
 
4777
  const char dummy_file_name[] = "ignored.dummy_file_name";
 
4778
  ievent->mask = IN_DELETE;
 
4779
  ievent->len = sizeof(dummy_file_name);
 
4780
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
 
4781
  const size_t ievent_size = (sizeof(struct inotify_event)
 
4782
                              + sizeof(dummy_file_name));
 
4783
  g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
 
4784
                  ==, ievent_size);
 
4785
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
4786
 
 
4787
  bool quit_now = false;
 
4788
  buffer password = {};
 
4789
  bool mandos_client_exited = false;
 
4790
  bool password_is_read = false;
 
4791
  __attribute__((cleanup(cleanup_queue)))
 
4792
    task_queue *queue = create_queue();
 
4793
  g_assert_nonnull(queue);
 
4794
 
 
4795
  task_context task = {
 
4796
    .func=read_inotify_event,
 
4797
    .epoll_fd=epoll_fd,
 
4798
    .fd=pipefds[0],
 
4799
    .quit_now=&quit_now,
 
4800
    .password=&password,
 
4801
    .filename=strdup("/nonexistent"),
 
4802
    .cancelled_filenames=&cancelled_filenames,
 
4803
    .current_time=&current_time,
 
4804
    .mandos_client_exited=&mandos_client_exited,
 
4805
    .password_is_read=&password_is_read,
 
4806
  };
 
4807
  task.func(task, queue);
 
4808
  g_assert_false(quit_now);
 
4809
  g_assert_true(queue->next_run == 0);
 
4810
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
4811
 
 
4812
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
4813
        .func=read_inotify_event,
 
4814
        .epoll_fd=epoll_fd,
 
4815
        .fd=pipefds[0],
 
4816
        .quit_now=&quit_now,
 
4817
        .password=&password,
 
4818
        .filename=task.filename,
 
4819
        .cancelled_filenames=&cancelled_filenames,
 
4820
        .current_time=&current_time,
 
4821
        .mandos_client_exited=&mandos_client_exited,
 
4822
        .password_is_read=&password_is_read,
 
4823
      }));
 
4824
 
 
4825
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
 
4826
                                   EPOLLIN | EPOLLRDHUP));
 
4827
 
 
4828
  __attribute__((cleanup(cleanup_string)))
 
4829
    char *filename = NULL;
 
4830
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
 
4831
                           dummy_file_name), >, 0);
 
4832
  g_assert_nonnull(filename);
 
4833
  g_assert_false(string_set_contains(cancelled_filenames, filename));
 
4834
}
 
4835
 
 
4836
static
 
4837
void test_open_and_parse_question_ENOENT(__attribute__((unused))
 
4838
                                         test_fixture *fixture,
 
4839
                                         __attribute__((unused))
 
4840
                                         gconstpointer user_data){
 
4841
  __attribute__((cleanup(cleanup_close)))
 
4842
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4843
  g_assert_cmpint(epoll_fd, >=, 0);
 
4844
  __attribute__((cleanup(string_set_clear)))
 
4845
    string_set cancelled_filenames = {};
 
4846
  bool mandos_client_exited = false;
 
4847
  bool password_is_read = false;
 
4848
  __attribute__((cleanup(cleanup_queue)))
 
4849
    task_queue *queue = create_queue();
 
4850
  g_assert_nonnull(queue);
 
4851
 
 
4852
  char *const filename = strdup("/nonexistent");
 
4853
  g_assert_nonnull(filename);
 
4854
  task_context task = {
 
4855
    .func=open_and_parse_question,
 
4856
    .question_filename=filename,
 
4857
    .epoll_fd=epoll_fd,
 
4858
    .password=(buffer[]){{}},
 
4859
    .filename=filename,
 
4860
    .cancelled_filenames=&cancelled_filenames,
 
4861
    .current_time=(mono_microsecs[]){0},
 
4862
    .mandos_client_exited=&mandos_client_exited,
 
4863
    .password_is_read=&password_is_read,
 
4864
  };
 
4865
  task.func(task, queue);
 
4866
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4867
}
 
4868
 
 
4869
static void test_open_and_parse_question_EIO(__attribute__((unused))
 
4870
                                             test_fixture *fixture,
 
4871
                                             __attribute__((unused))
 
4872
                                             gconstpointer user_data){
 
4873
  __attribute__((cleanup(cleanup_close)))
 
4874
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4875
  g_assert_cmpint(epoll_fd, >=, 0);
 
4876
  __attribute__((cleanup(string_set_clear)))
 
4877
    string_set cancelled_filenames = {};
 
4878
  buffer password = {};
 
4879
  bool mandos_client_exited = false;
 
4880
  bool password_is_read = false;
 
4881
  __attribute__((cleanup(cleanup_queue)))
 
4882
    task_queue *queue = create_queue();
 
4883
  g_assert_nonnull(queue);
 
4884
  const mono_microsecs current_time = 0;
 
4885
 
 
4886
  char *filename = strdup("/proc/self/mem");
 
4887
  task_context task = {
 
4888
    .func=open_and_parse_question,
 
4889
    .question_filename=filename,
 
4890
    .epoll_fd=epoll_fd,
 
4891
    .password=&password,
 
4892
    .filename=filename,
 
4893
    .cancelled_filenames=&cancelled_filenames,
 
4894
    .current_time=&current_time,
 
4895
    .mandos_client_exited=&mandos_client_exited,
 
4896
    .password_is_read=&password_is_read,
 
4897
  };
 
4898
  run_task_with_stderr_to_dev_null(task, queue);
 
4899
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4900
}
 
4901
 
 
4902
static void
 
4903
test_open_and_parse_question_parse_error(__attribute__((unused))
 
4904
                                         test_fixture *fixture,
 
4905
                                         __attribute__((unused))
 
4906
                                         gconstpointer user_data){
 
4907
  __attribute__((cleanup(cleanup_close)))
 
4908
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4909
  g_assert_cmpint(epoll_fd, >=, 0);
 
4910
  __attribute__((cleanup(string_set_clear)))
 
4911
    string_set cancelled_filenames = {};
 
4912
  __attribute__((cleanup(cleanup_queue)))
 
4913
    task_queue *queue = create_queue();
 
4914
  g_assert_nonnull(queue);
 
4915
 
 
4916
  __attribute__((cleanup(cleanup_string)))
 
4917
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
4918
  g_assert_nonnull(tempfilename);
 
4919
  int tempfile = mkostemp(tempfilename, O_CLOEXEC);
 
4920
  g_assert_cmpint(tempfile, >, 0);
 
4921
  const char bad_data[] = "this is bad syntax\n";
 
4922
  g_assert_cmpint(write(tempfile, bad_data, sizeof(bad_data)),
 
4923
                  ==, sizeof(bad_data));
 
4924
  g_assert_cmpint(close(tempfile), ==, 0);
 
4925
 
 
4926
  char *const filename = strdup(tempfilename);
 
4927
  g_assert_nonnull(filename);
 
4928
  task_context task = {
 
4929
    .func=open_and_parse_question,
 
4930
    .question_filename=filename,
 
4931
    .epoll_fd=epoll_fd,
 
4932
    .password=(buffer[]){{}},
 
4933
    .filename=filename,
 
4934
    .cancelled_filenames=&cancelled_filenames,
 
4935
    .current_time=(mono_microsecs[]){0},
 
4936
    .mandos_client_exited=(bool[]){false},
 
4937
    .password_is_read=(bool[]){false},
 
4938
  };
 
4939
  run_task_with_stderr_to_dev_null(task, queue);
 
4940
 
 
4941
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4942
 
 
4943
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
4944
}
 
4945
 
 
4946
static
 
4947
void test_open_and_parse_question_nosocket(__attribute__((unused))
 
4948
                                           test_fixture *fixture,
 
4949
                                           __attribute__((unused))
 
4950
                                           gconstpointer user_data){
 
4951
  __attribute__((cleanup(cleanup_close)))
 
4952
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4953
  g_assert_cmpint(epoll_fd, >=, 0);
 
4954
  __attribute__((cleanup(string_set_clear)))
 
4955
    string_set cancelled_filenames = {};
 
4956
  __attribute__((cleanup(cleanup_queue)))
 
4957
    task_queue *queue = create_queue();
 
4958
  g_assert_nonnull(queue);
 
4959
 
 
4960
  __attribute__((cleanup(cleanup_string)))
 
4961
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
4962
  g_assert_nonnull(tempfilename);
 
4963
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
4964
  g_assert_cmpint(questionfile, >, 0);
 
4965
  FILE *qf = fdopen(questionfile, "w");
 
4966
  g_assert_cmpint(fprintf(qf, "[Ask]\nPID=1\n"), >, 0);
 
4967
  g_assert_cmpint(fclose(qf), ==, 0);
 
4968
 
 
4969
  char *const filename = strdup(tempfilename);
 
4970
  g_assert_nonnull(filename);
 
4971
  task_context task = {
 
4972
    .func=open_and_parse_question,
 
4973
    .question_filename=filename,
 
4974
    .epoll_fd=epoll_fd,
 
4975
    .password=(buffer[]){{}},
 
4976
    .filename=filename,
 
4977
    .cancelled_filenames=&cancelled_filenames,
 
4978
    .current_time=(mono_microsecs[]){0},
 
4979
    .mandos_client_exited=(bool[]){false},
 
4980
    .password_is_read=(bool[]){false},
 
4981
  };
 
4982
  run_task_with_stderr_to_dev_null(task, queue);
 
4983
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
4984
 
 
4985
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
4986
}
 
4987
 
 
4988
static
 
4989
void test_open_and_parse_question_badsocket(__attribute__((unused))
 
4990
                                            test_fixture *fixture,
 
4991
                                            __attribute__((unused))
 
4992
                                            gconstpointer user_data){
 
4993
  __attribute__((cleanup(cleanup_close)))
 
4994
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
4995
  g_assert_cmpint(epoll_fd, >=, 0);
 
4996
  __attribute__((cleanup(string_set_clear)))
 
4997
    string_set cancelled_filenames = {};
 
4998
  __attribute__((cleanup(cleanup_queue)))
 
4999
    task_queue *queue = create_queue();
 
5000
  g_assert_nonnull(queue);
 
5001
 
 
5002
  __attribute__((cleanup(cleanup_string)))
 
5003
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5004
  g_assert_nonnull(tempfilename);
 
5005
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5006
  g_assert_cmpint(questionfile, >, 0);
 
5007
  FILE *qf = fdopen(questionfile, "w");
 
5008
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=\nPID=1\n"), >, 0);
 
5009
  g_assert_cmpint(fclose(qf), ==, 0);
 
5010
 
 
5011
  char *const filename = strdup(tempfilename);
 
5012
  g_assert_nonnull(filename);
 
5013
  task_context task = {
 
5014
    .func=open_and_parse_question,
 
5015
    .question_filename=filename,
 
5016
    .epoll_fd=epoll_fd,
 
5017
    .password=(buffer[]){{}},
 
5018
    .filename=filename,
 
5019
    .cancelled_filenames=&cancelled_filenames,
 
5020
    .current_time=(mono_microsecs[]){0},
 
5021
    .mandos_client_exited=(bool[]){false},
 
5022
    .password_is_read=(bool[]){false},
 
5023
  };
 
5024
  run_task_with_stderr_to_dev_null(task, queue);
 
5025
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5026
 
 
5027
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5028
}
 
5029
 
 
5030
static
 
5031
void test_open_and_parse_question_nopid(__attribute__((unused))
 
5032
                                        test_fixture *fixture,
 
5033
                                        __attribute__((unused))
 
5034
                                        gconstpointer user_data){
 
5035
  __attribute__((cleanup(cleanup_close)))
 
5036
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5037
  g_assert_cmpint(epoll_fd, >=, 0);
 
5038
  __attribute__((cleanup(string_set_clear)))
 
5039
    string_set cancelled_filenames = {};
 
5040
  __attribute__((cleanup(cleanup_queue)))
 
5041
    task_queue *queue = create_queue();
 
5042
  g_assert_nonnull(queue);
 
5043
 
 
5044
  __attribute__((cleanup(cleanup_string)))
 
5045
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5046
  g_assert_nonnull(tempfilename);
 
5047
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5048
  g_assert_cmpint(questionfile, >, 0);
 
5049
  FILE *qf = fdopen(questionfile, "w");
 
5050
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\n"), >, 0);
 
5051
  g_assert_cmpint(fclose(qf), ==, 0);
 
5052
 
 
5053
  char *const filename = strdup(tempfilename);
 
5054
  g_assert_nonnull(filename);
 
5055
  task_context task = {
 
5056
    .func=open_and_parse_question,
 
5057
    .question_filename=filename,
 
5058
    .epoll_fd=epoll_fd,
 
5059
    .password=(buffer[]){{}},
 
5060
    .filename=filename,
 
5061
    .cancelled_filenames=&cancelled_filenames,
 
5062
    .current_time=(mono_microsecs[]){0},
 
5063
    .mandos_client_exited=(bool[]){false},
 
5064
    .password_is_read=(bool[]){false},
 
5065
  };
 
5066
  run_task_with_stderr_to_dev_null(task, queue);
 
5067
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5068
 
 
5069
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5070
}
 
5071
 
 
5072
static
 
5073
void test_open_and_parse_question_badpid(__attribute__((unused))
 
5074
                                         test_fixture *fixture,
 
5075
                                         __attribute__((unused))
 
5076
                                         gconstpointer user_data){
 
5077
  __attribute__((cleanup(cleanup_close)))
 
5078
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5079
  g_assert_cmpint(epoll_fd, >=, 0);
 
5080
  __attribute__((cleanup(string_set_clear)))
 
5081
    string_set cancelled_filenames = {};
 
5082
  __attribute__((cleanup(cleanup_queue)))
 
5083
    task_queue *queue = create_queue();
 
5084
  g_assert_nonnull(queue);
 
5085
 
 
5086
  __attribute__((cleanup(cleanup_string)))
 
5087
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5088
  g_assert_nonnull(tempfilename);
 
5089
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5090
  g_assert_cmpint(questionfile, >, 0);
 
5091
  FILE *qf = fdopen(questionfile, "w");
 
5092
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=\n"),
 
5093
                  >, 0);
 
5094
  g_assert_cmpint(fclose(qf), ==, 0);
 
5095
 
 
5096
  char *const filename = strdup(tempfilename);
 
5097
  g_assert_nonnull(filename);
 
5098
  task_context task = {
 
5099
    .func=open_and_parse_question,
 
5100
    .question_filename=filename,
 
5101
    .epoll_fd=epoll_fd,
 
5102
    .password=(buffer[]){{}},
 
5103
    .filename=filename,
 
5104
    .cancelled_filenames=&cancelled_filenames,
 
5105
    .current_time=(mono_microsecs[]){0},
 
5106
    .mandos_client_exited=(bool[]){false},
 
5107
    .password_is_read=(bool[]){false},
 
5108
  };
 
5109
  run_task_with_stderr_to_dev_null(task, queue);
 
5110
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5111
 
 
5112
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5113
}
 
5114
 
 
5115
static void
 
5116
test_open_and_parse_question_noexist_pid(__attribute__((unused))
 
5117
                                         test_fixture *fixture,
 
5118
                                         __attribute__((unused))
 
5119
                                         gconstpointer user_data){
 
5120
  __attribute__((cleanup(cleanup_close)))
 
5121
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5122
  g_assert_cmpint(epoll_fd, >=, 0);
 
5123
  __attribute__((cleanup(string_set_clear)))
 
5124
    string_set cancelled_filenames = {};
 
5125
  buffer password = {};
 
5126
  bool mandos_client_exited = false;
 
5127
  bool password_is_read = false;
 
5128
  __attribute__((cleanup(cleanup_queue)))
 
5129
    task_queue *queue = create_queue();
 
5130
  g_assert_nonnull(queue);
 
5131
  const mono_microsecs current_time = 0;
 
5132
 
 
5133
  /* Find value of sysctl kernel.pid_max */
 
5134
  uintmax_t pid_max = 0;
 
5135
  FILE *sysctl_pid_max = fopen("/proc/sys/kernel/pid_max", "r");
 
5136
  g_assert_nonnull(sysctl_pid_max);
 
5137
  g_assert_cmpint(fscanf(sysctl_pid_max, "%" PRIuMAX, &pid_max),
 
5138
                  ==, 1);
 
5139
  g_assert_cmpint(fclose(sysctl_pid_max), ==, 0);
 
5140
 
 
5141
  pid_t nonexisting_pid = ((pid_t)pid_max)+1;
 
5142
  g_assert_true(nonexisting_pid > 0); /* Overflow check */
 
5143
 
 
5144
  __attribute__((cleanup(cleanup_string)))
 
5145
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5146
  g_assert_nonnull(tempfilename);
 
5147
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5148
  g_assert_cmpint(questionfile, >, 0);
 
5149
  FILE *qf = fdopen(questionfile, "w");
 
5150
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5151
                          PRIuMAX"\n", (uintmax_t)nonexisting_pid),
 
5152
                  >, 0);
 
5153
  g_assert_cmpint(fclose(qf), ==, 0);
 
5154
 
 
5155
  char *const question_filename = strdup(tempfilename);
 
5156
  g_assert_nonnull(question_filename);
 
5157
  task_context task = {
 
5158
    .func=open_and_parse_question,
 
5159
    .question_filename=question_filename,
 
5160
    .epoll_fd=epoll_fd,
 
5161
    .password=&password,
 
5162
    .filename=question_filename,
 
5163
    .cancelled_filenames=&cancelled_filenames,
 
5164
    .current_time=&current_time,
 
5165
    .mandos_client_exited=&mandos_client_exited,
 
5166
    .password_is_read=&password_is_read,
 
5167
  };
 
5168
  run_task_with_stderr_to_dev_null(task, queue);
 
5169
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5170
 
 
5171
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5172
}
 
5173
 
 
5174
static void
 
5175
test_open_and_parse_question_no_notafter(__attribute__((unused))
 
5176
                                         test_fixture *fixture,
 
5177
                                         __attribute__((unused))
 
5178
                                         gconstpointer user_data){
 
5179
  __attribute__((cleanup(cleanup_close)))
 
5180
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5181
  g_assert_cmpint(epoll_fd, >=, 0);
 
5182
  __attribute__((cleanup(string_set_clear)))
 
5183
    string_set cancelled_filenames = {};
 
5184
  buffer password = {};
 
5185
  bool mandos_client_exited = false;
 
5186
  bool password_is_read = false;
 
5187
  __attribute__((cleanup(cleanup_queue)))
 
5188
    task_queue *queue = create_queue();
 
5189
  g_assert_nonnull(queue);
 
5190
  const mono_microsecs current_time = 0;
 
5191
 
 
5192
  __attribute__((cleanup(cleanup_string)))
 
5193
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5194
  g_assert_nonnull(tempfilename);
 
5195
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5196
  g_assert_cmpint(questionfile, >, 0);
 
5197
  FILE *qf = fdopen(questionfile, "w");
 
5198
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5199
                          PRIuMAX "\n", (uintmax_t)getpid()), >, 0);
 
5200
  g_assert_cmpint(fclose(qf), ==, 0);
 
5201
 
 
5202
  char *const filename = strdup(tempfilename);
 
5203
  g_assert_nonnull(filename);
 
5204
  task_context task = {
 
5205
    .func=open_and_parse_question,
 
5206
    .question_filename=filename,
 
5207
    .epoll_fd=epoll_fd,
 
5208
    .password=&password,
 
5209
    .filename=filename,
 
5210
    .cancelled_filenames=&cancelled_filenames,
 
5211
    .current_time=&current_time,
 
5212
    .mandos_client_exited=&mandos_client_exited,
 
5213
    .password_is_read=&password_is_read,
 
5214
  };
 
5215
  task.func(task, queue);
 
5216
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5217
 
 
5218
  __attribute__((cleanup(cleanup_string)))
 
5219
    char *socket_filename = strdup("/nonexistent");
 
5220
  g_assert_nonnull(socket_filename);
 
5221
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
5222
        .func=connect_question_socket,
 
5223
        .question_filename=tempfilename,
 
5224
        .filename=socket_filename,
 
5225
        .epoll_fd=epoll_fd,
 
5226
        .password=&password,
 
5227
        .current_time=&current_time,
 
5228
        .mandos_client_exited=&mandos_client_exited,
 
5229
        .password_is_read=&password_is_read,
 
5230
      }));
 
5231
 
 
5232
  g_assert_true(queue->next_run != 0);
 
5233
 
 
5234
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5235
}
 
5236
 
 
5237
static void
 
5238
test_open_and_parse_question_bad_notafter(__attribute__((unused))
 
5239
                                          test_fixture *fixture,
 
5240
                                          __attribute__((unused))
 
5241
                                          gconstpointer user_data){
 
5242
  __attribute__((cleanup(cleanup_close)))
 
5243
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5244
  g_assert_cmpint(epoll_fd, >=, 0);
 
5245
  __attribute__((cleanup(string_set_clear)))
 
5246
    string_set cancelled_filenames = {};
 
5247
  buffer password = {};
 
5248
  bool mandos_client_exited = false;
 
5249
  bool password_is_read = false;
 
5250
  __attribute__((cleanup(cleanup_queue)))
 
5251
    task_queue *queue = create_queue();
 
5252
  g_assert_nonnull(queue);
 
5253
  const mono_microsecs current_time = 0;
 
5254
 
 
5255
  __attribute__((cleanup(cleanup_string)))
 
5256
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5257
  g_assert_nonnull(tempfilename);
 
5258
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5259
  g_assert_cmpint(questionfile, >, 0);
 
5260
  FILE *qf = fdopen(questionfile, "w");
 
5261
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5262
                          PRIuMAX "\nNotAfter=\n",
 
5263
                          (uintmax_t)getpid()), >, 0);
 
5264
  g_assert_cmpint(fclose(qf), ==, 0);
 
5265
 
 
5266
  char *const filename = strdup(tempfilename);
 
5267
  g_assert_nonnull(filename);
 
5268
  task_context task = {
 
5269
    .func=open_and_parse_question,
 
5270
    .question_filename=filename,
 
5271
    .epoll_fd=epoll_fd,
 
5272
    .password=&password,
 
5273
    .filename=filename,
 
5274
    .cancelled_filenames=&cancelled_filenames,
 
5275
    .current_time=&current_time,
 
5276
    .mandos_client_exited=&mandos_client_exited,
 
5277
    .password_is_read=&password_is_read,
 
5278
  };
 
5279
  run_task_with_stderr_to_dev_null(task, queue);
 
5280
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5281
 
 
5282
  __attribute__((cleanup(cleanup_string)))
 
5283
    char *socket_filename = strdup("/nonexistent");
 
5284
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
5285
        .func=connect_question_socket,
 
5286
        .question_filename=tempfilename,
 
5287
        .filename=socket_filename,
 
5288
        .epoll_fd=epoll_fd,
 
5289
        .password=&password,
 
5290
        .current_time=&current_time,
 
5291
        .mandos_client_exited=&mandos_client_exited,
 
5292
        .password_is_read=&password_is_read,
 
5293
      }));
 
5294
  g_assert_true(queue->next_run != 0);
 
5295
 
 
5296
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5297
}
 
5298
 
 
5299
static
 
5300
void assert_open_and_parse_question_with_notafter(const mono_microsecs
 
5301
                                                  current_time,
 
5302
                                                  const mono_microsecs
 
5303
                                                  notafter,
 
5304
                                                  const mono_microsecs
 
5305
                                                  next_queue_run){
 
5306
  __attribute__((cleanup(cleanup_close)))
 
5307
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5308
  g_assert_cmpint(epoll_fd, >=, 0);
 
5309
  __attribute__((cleanup(string_set_clear)))
 
5310
    string_set cancelled_filenames = {};
 
5311
  buffer password = {};
 
5312
  bool mandos_client_exited = false;
 
5313
  bool password_is_read = false;
 
5314
  __attribute__((cleanup(cleanup_queue)))
 
5315
    task_queue *queue = create_queue();
 
5316
  g_assert_nonnull(queue);
 
5317
  queue->next_run = next_queue_run;
 
5318
 
 
5319
  __attribute__((cleanup(cleanup_string)))
 
5320
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
 
5321
  g_assert_nonnull(tempfilename);
 
5322
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
 
5323
  g_assert_cmpint(questionfile, >, 0);
 
5324
  FILE *qf = fdopen(questionfile, "w");
 
5325
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
 
5326
                          PRIuMAX "\nNotAfter=%" PRIuMAX "\n",
 
5327
                          (uintmax_t)getpid(), notafter), >, 0);
 
5328
  g_assert_cmpint(fclose(qf), ==, 0);
 
5329
 
 
5330
  char *const filename = strdup(tempfilename);
 
5331
  g_assert_nonnull(filename);
 
5332
  task_context task = {
 
5333
    .func=open_and_parse_question,
 
5334
    .question_filename=filename,
 
5335
    .epoll_fd=epoll_fd,
 
5336
    .password=&password,
 
5337
    .filename=filename,
 
5338
    .cancelled_filenames=&cancelled_filenames,
 
5339
    .current_time=&current_time,
 
5340
    .mandos_client_exited=&mandos_client_exited,
 
5341
    .password_is_read=&password_is_read,
 
5342
  };
 
5343
  task.func(task, queue);
 
5344
 
 
5345
  if(queue->length >= 1){
 
5346
    __attribute__((cleanup(cleanup_string)))
 
5347
      char *socket_filename = strdup("/nonexistent");
 
5348
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5349
          .func=connect_question_socket,
 
5350
          .filename=socket_filename,
 
5351
          .epoll_fd=epoll_fd,
 
5352
          .password=&password,
 
5353
          .current_time=&current_time,
 
5354
          .cancelled_filenames=&cancelled_filenames,
 
5355
          .mandos_client_exited=&mandos_client_exited,
 
5356
          .password_is_read=&password_is_read,
 
5357
        }));
 
5358
    g_assert_true(queue->next_run != 0);
 
5359
  }
 
5360
 
 
5361
  if(notafter == 0){
 
5362
    g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5363
  } else if(current_time >= notafter) {
 
5364
    g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5365
  } else {
 
5366
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5367
          .func=cancel_old_question,
 
5368
          .question_filename=tempfilename,
 
5369
          .filename=tempfilename,
 
5370
          .notafter=notafter,
 
5371
          .cancelled_filenames=&cancelled_filenames,
 
5372
          .current_time=&current_time,
 
5373
        }));
 
5374
  }
 
5375
  g_assert_true(queue->next_run == 1);
 
5376
 
 
5377
  g_assert_cmpint(unlink(tempfilename), ==, 0);
 
5378
}
 
5379
 
 
5380
static void
 
5381
test_open_and_parse_question_notafter_0(__attribute__((unused))
 
5382
                                        test_fixture *fixture,
 
5383
                                        __attribute__((unused))
 
5384
                                        gconstpointer user_data){
 
5385
  /* current_time, notafter, next_queue_run */
 
5386
  assert_open_and_parse_question_with_notafter(0, 0, 0);
 
5387
}
 
5388
 
 
5389
static void
 
5390
test_open_and_parse_question_notafter_1(__attribute__((unused))
 
5391
                                        test_fixture *fixture,
 
5392
                                        __attribute__((unused))
 
5393
                                        gconstpointer user_data){
 
5394
  /* current_time, notafter, next_queue_run */
 
5395
  assert_open_and_parse_question_with_notafter(0, 1, 0);
 
5396
}
 
5397
 
 
5398
static void
 
5399
test_open_and_parse_question_notafter_1_1(__attribute__((unused))
 
5400
                                          test_fixture *fixture,
 
5401
                                          __attribute__((unused))
 
5402
                                          gconstpointer user_data){
 
5403
  /* current_time, notafter, next_queue_run */
 
5404
  assert_open_and_parse_question_with_notafter(0, 1, 1);
 
5405
}
 
5406
 
 
5407
static void
 
5408
test_open_and_parse_question_notafter_1_2(__attribute__((unused))
 
5409
                                          test_fixture *fixture,
 
5410
                                          __attribute__((unused))
 
5411
                                          gconstpointer user_data){
 
5412
  /* current_time, notafter, next_queue_run */
 
5413
  assert_open_and_parse_question_with_notafter(0, 1, 2);
 
5414
}
 
5415
 
 
5416
static void
 
5417
test_open_and_parse_question_equal_notafter(__attribute__((unused))
 
5418
                                            test_fixture *fixture,
 
5419
                                            __attribute__((unused))
 
5420
                                            gconstpointer user_data){
 
5421
  /* current_time, notafter, next_queue_run */
 
5422
  assert_open_and_parse_question_with_notafter(1, 1, 0);
 
5423
}
 
5424
 
 
5425
static void
 
5426
test_open_and_parse_question_late_notafter(__attribute__((unused))
 
5427
                                           test_fixture *fixture,
 
5428
                                           __attribute__((unused))
 
5429
                                           gconstpointer user_data){
 
5430
  /* current_time, notafter, next_queue_run */
 
5431
  assert_open_and_parse_question_with_notafter(2, 1, 0);
 
5432
}
 
5433
 
 
5434
static void assert_cancel_old_question_param(const mono_microsecs
 
5435
                                             next_queue_run,
 
5436
                                             const mono_microsecs
 
5437
                                             notafter,
 
5438
                                             const mono_microsecs
 
5439
                                             current_time,
 
5440
                                             const mono_microsecs
 
5441
                                             next_set_to){
 
5442
  __attribute__((cleanup(string_set_clear)))
 
5443
    string_set cancelled_filenames = {};
 
5444
  __attribute__((cleanup(cleanup_queue)))
 
5445
    task_queue *queue = create_queue();
 
5446
  g_assert_nonnull(queue);
 
5447
  queue->next_run = next_queue_run;
 
5448
 
 
5449
  char *const question_filename = strdup("/nonexistent");
 
5450
  g_assert_nonnull(question_filename);
 
5451
  task_context task = {
 
5452
    .func=cancel_old_question,
 
5453
    .question_filename=question_filename,
 
5454
    .filename=question_filename,
 
5455
    .notafter=notafter,
 
5456
    .cancelled_filenames=&cancelled_filenames,
 
5457
    .current_time=&current_time,
 
5458
  };
 
5459
  task.func(task, queue);
 
5460
 
 
5461
  if(current_time >= notafter){
 
5462
    g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5463
    g_assert_true(string_set_contains(cancelled_filenames,
 
5464
                                      "/nonexistent"));
 
5465
  } else {
 
5466
    g_assert_nonnull(find_matching_task(queue, (task_context){
 
5467
          .func=cancel_old_question,
 
5468
          .question_filename=question_filename,
 
5469
          .filename=question_filename,
 
5470
          .notafter=notafter,
 
5471
          .cancelled_filenames=&cancelled_filenames,
 
5472
          .current_time=&current_time,
 
5473
        }));
 
5474
 
 
5475
    g_assert_false(string_set_contains(cancelled_filenames,
 
5476
                                       question_filename));
 
5477
  }
 
5478
  g_assert_cmpuint((unsigned int)queue->next_run, ==,
 
5479
                   (unsigned int)next_set_to);
 
5480
}
 
5481
 
 
5482
static void test_cancel_old_question_0_1_2(__attribute__((unused))
 
5483
                                           test_fixture *fixture,
 
5484
                                           __attribute__((unused))
 
5485
                                           gconstpointer user_data){
 
5486
  /* next_queue_run unset,
 
5487
     cancellation should happen because time has come,
 
5488
     next_queue_run should be unchanged */
 
5489
  /* next_queue_run, notafter, current_time, next_set_to */
 
5490
  assert_cancel_old_question_param(0, 1, 2, 0);
 
5491
}
 
5492
 
 
5493
static void test_cancel_old_question_0_2_1(__attribute__((unused))
 
5494
                                           test_fixture *fixture,
 
5495
                                           __attribute__((unused))
 
5496
                                           gconstpointer user_data){
 
5497
  /* If next_queue_run is 0, meaning unset, and notafter is 2,
 
5498
     and current_time is not yet notafter or greater,
 
5499
     update value of next_queue_run to value of notafter */
 
5500
  /* next_queue_run, notafter, current_time, next_set_to */
 
5501
  assert_cancel_old_question_param(0, 2, 1, 2);
 
5502
}
 
5503
 
 
5504
static void test_cancel_old_question_1_2_3(__attribute__((unused))
 
5505
                                           test_fixture *fixture,
 
5506
                                           __attribute__((unused))
 
5507
                                           gconstpointer user_data){
 
5508
  /* next_queue_run 1,
 
5509
     cancellation should happen because time has come,
 
5510
     next_queue_run should be unchanged */
 
5511
  /* next_queue_run, notafter, current_time, next_set_to */
 
5512
  assert_cancel_old_question_param(1, 2, 3, 1);
 
5513
}
 
5514
 
 
5515
static void test_cancel_old_question_1_3_2(__attribute__((unused))
 
5516
                                           test_fixture *fixture,
 
5517
                                           __attribute__((unused))
 
5518
                                           gconstpointer user_data){
 
5519
  /* If next_queue_run is set,
 
5520
     and current_time is not yet notafter or greater,
 
5521
     and notafter is larger than next_queue_run
 
5522
     next_queue_run should be unchanged */
 
5523
  /* next_queue_run, notafter, current_time, next_set_to */
 
5524
  assert_cancel_old_question_param(1, 3, 2, 1);
 
5525
}
 
5526
 
 
5527
static void test_cancel_old_question_2_1_3(__attribute__((unused))
 
5528
                                           test_fixture *fixture,
 
5529
                                           __attribute__((unused))
 
5530
                                           gconstpointer user_data){
 
5531
  /* next_queue_run 2,
 
5532
     cancellation should happen because time has come,
 
5533
     next_queue_run should be unchanged */
 
5534
  /* next_queue_run, notafter, current_time, next_set_to */
 
5535
  assert_cancel_old_question_param(2, 1, 3, 2);
 
5536
}
 
5537
 
 
5538
static void test_cancel_old_question_2_3_1(__attribute__((unused))
 
5539
                                           test_fixture *fixture,
 
5540
                                           __attribute__((unused))
 
5541
                                           gconstpointer user_data){
 
5542
  /* If next_queue_run is set,
 
5543
     and current_time is not yet notafter or greater,
 
5544
     and notafter is larger than next_queue_run
 
5545
     next_queue_run should be unchanged */
 
5546
  /* next_queue_run, notafter, current_time, next_set_to */
 
5547
  assert_cancel_old_question_param(2, 3, 1, 2);
 
5548
}
 
5549
 
 
5550
static void test_cancel_old_question_3_1_2(__attribute__((unused))
 
5551
                                           test_fixture *fixture,
 
5552
                                           __attribute__((unused))
 
5553
                                           gconstpointer user_data){
 
5554
  /* next_queue_run 3,
 
5555
     cancellation should happen because time has come,
 
5556
     next_queue_run should be unchanged */
 
5557
  /* next_queue_run, notafter, current_time, next_set_to */
 
5558
  assert_cancel_old_question_param(3, 1, 2, 3);
 
5559
}
 
5560
 
 
5561
static void test_cancel_old_question_3_2_1(__attribute__((unused))
 
5562
                                           test_fixture *fixture,
 
5563
                                           __attribute__((unused))
 
5564
                                           gconstpointer user_data){
 
5565
  /* If next_queue_run is set,
 
5566
     and current_time is not yet notafter or greater,
 
5567
     and notafter is smaller than next_queue_run
 
5568
     update value of next_queue_run to value of notafter */
 
5569
  /* next_queue_run, notafter, current_time, next_set_to */
 
5570
  assert_cancel_old_question_param(3, 2, 1, 2);
 
5571
}
 
5572
 
 
5573
static void
 
5574
test_connect_question_socket_name_too_long(__attribute__((unused))
 
5575
                                           test_fixture *fixture,
 
5576
                                           __attribute__((unused))
 
5577
                                           gconstpointer user_data){
 
5578
  __attribute__((cleanup(cleanup_close)))
 
5579
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5580
  g_assert_cmpint(epoll_fd, >=, 0);
 
5581
  const char question_filename[] = "/nonexistent/question";
 
5582
  __attribute__((cleanup(string_set_clear)))
 
5583
    string_set cancelled_filenames = {};
 
5584
  __attribute__((cleanup(cleanup_queue)))
 
5585
    task_queue *queue = create_queue();
 
5586
  g_assert_nonnull(queue);
 
5587
  __attribute__((cleanup(cleanup_string)))
 
5588
    char *tempdir = make_temporary_directory();
 
5589
  g_assert_nonnull(tempdir);
 
5590
  struct sockaddr_un unix_socket = { .sun_family=AF_LOCAL };
 
5591
  char socket_name[sizeof(unix_socket.sun_path)];
 
5592
  memset(socket_name, 'x', sizeof(socket_name));
 
5593
  socket_name[sizeof(socket_name)-1] = '\0';
 
5594
  char *filename = NULL;
 
5595
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5596
                  >, 0);
 
5597
  g_assert_nonnull(filename);
 
5598
 
 
5599
  task_context task = {
 
5600
    .func=connect_question_socket,
 
5601
    .question_filename=strdup(question_filename),
 
5602
    .epoll_fd=epoll_fd,
 
5603
    .password=(buffer[]){{}},
 
5604
    .filename=filename,
 
5605
    .cancelled_filenames=&cancelled_filenames,
 
5606
    .mandos_client_exited=(bool[]){false},
 
5607
    .password_is_read=(bool[]){false},
 
5608
    .current_time=(mono_microsecs[]){0},
 
5609
  };
 
5610
  g_assert_nonnull(task.question_filename);
 
5611
  run_task_with_stderr_to_dev_null(task, queue);
 
5612
 
 
5613
  g_assert_true(string_set_contains(cancelled_filenames,
 
5614
                                    question_filename));
 
5615
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
5616
  g_assert_true(queue->next_run == 0);
 
5617
 
 
5618
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5619
}
 
5620
 
 
5621
static
 
5622
void test_connect_question_socket_connect_fail(__attribute__((unused))
 
5623
                                               test_fixture *fixture,
 
5624
                                               __attribute__((unused))
 
5625
                                               gconstpointer
 
5626
                                               user_data){
 
5627
  __attribute__((cleanup(cleanup_close)))
 
5628
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5629
  g_assert_cmpint(epoll_fd, >=, 0);
 
5630
  const char question_filename[] = "/nonexistent/question";
 
5631
  __attribute__((cleanup(string_set_clear)))
 
5632
    string_set cancelled_filenames = {};
 
5633
  const mono_microsecs current_time = 3;
 
5634
  __attribute__((cleanup(cleanup_queue)))
 
5635
    task_queue *queue = create_queue();
 
5636
  g_assert_nonnull(queue);
 
5637
  __attribute__((cleanup(cleanup_string)))
 
5638
    char *tempdir = make_temporary_directory();
 
5639
  g_assert_nonnull(tempdir);
 
5640
  char socket_name[] = "nonexistent";
 
5641
  char *filename = NULL;
 
5642
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5643
                  >, 0);
 
5644
  g_assert_nonnull(filename);
 
5645
 
 
5646
  task_context task = {
 
5647
    .func=connect_question_socket,
 
5648
    .question_filename=strdup(question_filename),
 
5649
    .epoll_fd=epoll_fd,
 
5650
    .password=(buffer[]){{}},
 
5651
    .filename=filename,
 
5652
    .cancelled_filenames=&cancelled_filenames,
 
5653
    .mandos_client_exited=(bool[]){false},
 
5654
    .password_is_read=(bool[]){false},
 
5655
    .current_time=&current_time,
 
5656
  };
 
5657
  g_assert_nonnull(task.question_filename);
 
5658
  run_task_with_stderr_to_dev_null(task, queue);
 
5659
 
 
5660
  g_assert_nonnull(find_matching_task(queue, task));
 
5661
 
 
5662
  g_assert_false(string_set_contains(cancelled_filenames,
 
5663
                                     question_filename));
 
5664
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5665
  g_assert_true(queue->next_run == 1000000 + current_time);
 
5666
 
 
5667
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5668
}
 
5669
 
 
5670
static
 
5671
void test_connect_question_socket_bad_epoll(__attribute__((unused))
 
5672
                                            test_fixture *fixture,
 
5673
                                            __attribute__((unused))
 
5674
                                            gconstpointer user_data){
 
5675
  __attribute__((cleanup(cleanup_close)))
 
5676
    const int epoll_fd = open("/dev/null",
 
5677
                              O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
5678
  __attribute__((cleanup(cleanup_string)))
 
5679
    char *const question_filename = strdup("/nonexistent/question");
 
5680
  g_assert_nonnull(question_filename);
 
5681
  __attribute__((cleanup(string_set_clear)))
 
5682
    string_set cancelled_filenames = {};
 
5683
  const mono_microsecs current_time = 5;
 
5684
  __attribute__((cleanup(cleanup_queue)))
 
5685
    task_queue *queue = create_queue();
 
5686
  g_assert_nonnull(queue);
 
5687
  __attribute__((cleanup(cleanup_string)))
 
5688
    char *tempdir = make_temporary_directory();
 
5689
  g_assert_nonnull(tempdir);
 
5690
  __attribute__((cleanup(cleanup_close)))
 
5691
    const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
 
5692
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
5693
  g_assert_cmpint(sock_fd, >=, 0);
 
5694
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
5695
  const char socket_name[] = "socket_name";
 
5696
  __attribute__((cleanup(cleanup_string)))
 
5697
    char *filename = NULL;
 
5698
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5699
                  >, 0);
 
5700
  g_assert_nonnull(filename);
 
5701
  g_assert_cmpint((int)strlen(filename), <,
 
5702
                  (int)sizeof(sock_name.sun_path));
 
5703
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
5704
  sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
 
5705
  g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
 
5706
                            (socklen_t)SUN_LEN(&sock_name)), >=, 0);
 
5707
  task_context task = {
 
5708
    .func=connect_question_socket,
 
5709
    .question_filename=strdup(question_filename),
 
5710
    .epoll_fd=epoll_fd,
 
5711
    .password=(buffer[]){{}},
 
5712
    .filename=strdup(filename),
 
5713
    .cancelled_filenames=&cancelled_filenames,
 
5714
    .mandos_client_exited=(bool[]){false},
 
5715
    .password_is_read=(bool[]){false},
 
5716
    .current_time=&current_time,
 
5717
  };
 
5718
  g_assert_nonnull(task.question_filename);
 
5719
  run_task_with_stderr_to_dev_null(task, queue);
 
5720
 
 
5721
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5722
  const task_context *const added_task
 
5723
    = find_matching_task(queue, task);
 
5724
  g_assert_nonnull(added_task);
 
5725
  g_assert_true(queue->next_run == 1000000 + current_time);
 
5726
 
 
5727
  g_assert_cmpint(unlink(filename), ==, 0);
 
5728
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5729
}
 
5730
 
 
5731
static
 
5732
void test_connect_question_socket_usable(__attribute__((unused))
 
5733
                                         test_fixture *fixture,
 
5734
                                         __attribute__((unused))
 
5735
                                         gconstpointer user_data){
 
5736
  __attribute__((cleanup(cleanup_close)))
 
5737
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5738
  g_assert_cmpint(epoll_fd, >=, 0);
 
5739
  __attribute__((cleanup(cleanup_string)))
 
5740
    char *const question_filename = strdup("/nonexistent/question");
 
5741
  g_assert_nonnull(question_filename);
 
5742
  __attribute__((cleanup(string_set_clear)))
 
5743
    string_set cancelled_filenames = {};
 
5744
  buffer password = {};
 
5745
  bool mandos_client_exited = false;
 
5746
  bool password_is_read = false;
 
5747
  const mono_microsecs current_time = 0;
 
5748
  __attribute__((cleanup(cleanup_queue)))
 
5749
    task_queue *queue = create_queue();
 
5750
  g_assert_nonnull(queue);
 
5751
  __attribute__((cleanup(cleanup_string)))
 
5752
    char *tempdir = make_temporary_directory();
 
5753
  g_assert_nonnull(tempdir);
 
5754
  __attribute__((cleanup(cleanup_close)))
 
5755
    const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
 
5756
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
 
5757
  g_assert_cmpint(sock_fd, >=, 0);
 
5758
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
 
5759
  const char socket_name[] = "socket_name";
 
5760
  __attribute__((cleanup(cleanup_string)))
 
5761
    char *filename = NULL;
 
5762
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
 
5763
                  >, 0);
 
5764
  g_assert_nonnull(filename);
 
5765
  g_assert_cmpint((int)strlen(filename), <,
 
5766
                  (int)sizeof(sock_name.sun_path));
 
5767
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
 
5768
  sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
 
5769
  g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
 
5770
                            (socklen_t)SUN_LEN(&sock_name)), >=, 0);
 
5771
  task_context task = {
 
5772
    .func=connect_question_socket,
 
5773
    .question_filename=strdup(question_filename),
 
5774
    .epoll_fd=epoll_fd,
 
5775
    .password=&password,
 
5776
    .filename=strdup(filename),
 
5777
    .cancelled_filenames=&cancelled_filenames,
 
5778
    .mandos_client_exited=&mandos_client_exited,
 
5779
    .password_is_read=&password_is_read,
 
5780
    .current_time=&current_time,
 
5781
  };
 
5782
  g_assert_nonnull(task.question_filename);
 
5783
  task.func(task, queue);
 
5784
 
 
5785
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5786
  const task_context *const added_task
 
5787
    = find_matching_task(queue, (task_context){
 
5788
        .func=send_password_to_socket,
 
5789
        .question_filename=question_filename,
 
5790
        .filename=filename,
 
5791
        .epoll_fd=epoll_fd,
 
5792
        .password=&password,
 
5793
        .cancelled_filenames=&cancelled_filenames,
 
5794
        .mandos_client_exited=&mandos_client_exited,
 
5795
        .password_is_read=&password_is_read,
 
5796
        .current_time=&current_time,
 
5797
      });
 
5798
  g_assert_nonnull(added_task);
 
5799
  g_assert_cmpint(added_task->fd, >, 0);
 
5800
 
 
5801
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5802
                                   EPOLLOUT));
 
5803
 
 
5804
  const int fd = added_task->fd;
 
5805
  g_assert_cmpint(fd, >, 0);
 
5806
  g_assert_true(fd_has_cloexec_and_nonblock(fd));
 
5807
 
 
5808
  /* write to fd */
 
5809
  char write_data[PIPE_BUF];
 
5810
  {
 
5811
    /* Construct test password buffer */
 
5812
    /* Start with + since that is what the real protocol uses */
 
5813
    write_data[0] = '+';
 
5814
    /* Set a special character at string end just to mark the end */
 
5815
    write_data[sizeof(write_data)-2] = 'y';
 
5816
    /* Set NUL at buffer end, as suggested by the protocol */
 
5817
    write_data[sizeof(write_data)-1] = '\0';
 
5818
    /* Fill rest of password with 'x' */
 
5819
    memset(write_data+1, 'x', sizeof(write_data)-3);
 
5820
    g_assert_cmpint((int)send(fd, write_data, sizeof(write_data),
 
5821
                              MSG_NOSIGNAL), ==, sizeof(write_data));
 
5822
  }
 
5823
 
 
5824
  /* read from sock_fd */
 
5825
  char read_data[sizeof(write_data)];
 
5826
  g_assert_cmpint((int)read(sock_fd, read_data, sizeof(read_data)),
 
5827
                  ==, sizeof(read_data));
 
5828
 
 
5829
  g_assert_true(memcmp(write_data, read_data, sizeof(write_data))
 
5830
                == 0);
 
5831
 
 
5832
  /* writing to sock_fd should fail */
 
5833
  g_assert_cmpint(send(sock_fd, write_data, sizeof(write_data),
 
5834
                       MSG_NOSIGNAL), <, 0);
 
5835
 
 
5836
  /* reading from fd should fail */
 
5837
  g_assert_cmpint((int)recv(fd, read_data, sizeof(read_data),
 
5838
                            MSG_NOSIGNAL), <, 0);
 
5839
 
 
5840
  g_assert_cmpint(unlink(filename), ==, 0);
 
5841
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
5842
}
 
5843
 
 
5844
static void
 
5845
test_send_password_to_socket_client_not_exited(__attribute__((unused))
 
5846
                                               test_fixture *fixture,
 
5847
                                               __attribute__((unused))
 
5848
                                               gconstpointer
 
5849
                                               user_data){
 
5850
  __attribute__((cleanup(cleanup_close)))
 
5851
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5852
  g_assert_cmpint(epoll_fd, >=, 0);
 
5853
  __attribute__((cleanup(cleanup_string)))
 
5854
    char *const question_filename = strdup("/nonexistent/question");
 
5855
  g_assert_nonnull(question_filename);
 
5856
  __attribute__((cleanup(cleanup_string)))
 
5857
    char *const filename = strdup("/nonexistent/socket");
 
5858
  g_assert_nonnull(filename);
 
5859
  __attribute__((cleanup(string_set_clear)))
 
5860
    string_set cancelled_filenames = {};
 
5861
  buffer password = {};
 
5862
  bool password_is_read = true;
 
5863
  __attribute__((cleanup(cleanup_queue)))
 
5864
    task_queue *queue = create_queue();
 
5865
  g_assert_nonnull(queue);
 
5866
  int socketfds[2];
 
5867
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5868
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5869
                             socketfds), ==, 0);
 
5870
  __attribute__((cleanup(cleanup_close)))
 
5871
    const int read_socket = socketfds[0];
 
5872
  const int write_socket = socketfds[1];
 
5873
  task_context task = {
 
5874
    .func=send_password_to_socket,
 
5875
    .question_filename=strdup(question_filename),
 
5876
    .filename=strdup(filename),
 
5877
    .epoll_fd=epoll_fd,
 
5878
    .fd=write_socket,
 
5879
    .password=&password,
 
5880
    .cancelled_filenames=&cancelled_filenames,
 
5881
    .mandos_client_exited=(bool[]){false},
 
5882
    .password_is_read=&password_is_read,
 
5883
    .current_time=(mono_microsecs[]){0},
 
5884
  };
 
5885
  g_assert_nonnull(task.question_filename);
 
5886
 
 
5887
  task.func(task, queue);
 
5888
 
 
5889
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5890
 
 
5891
  const task_context *const added_task
 
5892
    = find_matching_task(queue, task);
 
5893
  g_assert_nonnull(added_task);
 
5894
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
5895
  g_assert_true(password_is_read);
 
5896
 
 
5897
  g_assert_cmpint(added_task->fd, >, 0);
 
5898
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5899
                                   EPOLLOUT));
 
5900
}
 
5901
 
 
5902
static void
 
5903
test_send_password_to_socket_password_not_read(__attribute__((unused))
 
5904
                                               test_fixture *fixture,
 
5905
                                               __attribute__((unused))
 
5906
                                               gconstpointer
 
5907
                                               user_data){
 
5908
  __attribute__((cleanup(cleanup_close)))
 
5909
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5910
  g_assert_cmpint(epoll_fd, >=, 0);
 
5911
  __attribute__((cleanup(cleanup_string)))
 
5912
    char *const question_filename = strdup("/nonexistent/question");
 
5913
  g_assert_nonnull(question_filename);
 
5914
  __attribute__((cleanup(cleanup_string)))
 
5915
    char *const filename = strdup("/nonexistent/socket");
 
5916
  __attribute__((cleanup(string_set_clear)))
 
5917
    string_set cancelled_filenames = {};
 
5918
  buffer password = {};
 
5919
  __attribute__((cleanup(cleanup_queue)))
 
5920
    task_queue *queue = create_queue();
 
5921
  g_assert_nonnull(queue);
 
5922
  int socketfds[2];
 
5923
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5924
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5925
                             socketfds), ==, 0);
 
5926
  __attribute__((cleanup(cleanup_close)))
 
5927
    const int read_socket = socketfds[0];
 
5928
  const int write_socket = socketfds[1];
 
5929
  task_context task = {
 
5930
    .func=send_password_to_socket,
 
5931
    .question_filename=strdup(question_filename),
 
5932
    .filename=strdup(filename),
 
5933
    .epoll_fd=epoll_fd,
 
5934
    .fd=write_socket,
 
5935
    .password=&password,
 
5936
    .cancelled_filenames=&cancelled_filenames,
 
5937
    .mandos_client_exited=(bool[]){false},
 
5938
    .password_is_read=(bool[]){false},
 
5939
    .current_time=(mono_microsecs[]){0},
 
5940
  };
 
5941
  g_assert_nonnull(task.question_filename);
 
5942
 
 
5943
  task.func(task, queue);
 
5944
 
 
5945
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
5946
 
 
5947
  const task_context *const added_task = find_matching_task(queue,
 
5948
                                                            task);
 
5949
  g_assert_nonnull(added_task);
 
5950
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
5951
  g_assert_true(queue->next_run == 0);
 
5952
 
 
5953
  g_assert_cmpint(added_task->fd, >, 0);
 
5954
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
5955
                                   EPOLLOUT));
 
5956
}
 
5957
 
 
5958
static
 
5959
void test_send_password_to_socket_EMSGSIZE(__attribute__((unused))
 
5960
                                           test_fixture *fixture,
 
5961
                                           __attribute__((unused))
 
5962
                                           gconstpointer user_data){
 
5963
  __attribute__((cleanup(cleanup_close)))
 
5964
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
5965
  g_assert_cmpint(epoll_fd, >=, 0);
 
5966
  const char question_filename[] = "/nonexistent/question";
 
5967
  char *const filename = strdup("/nonexistent/socket");
 
5968
  __attribute__((cleanup(string_set_clear)))
 
5969
    string_set cancelled_filenames = {};
 
5970
  int socketfds[2];
 
5971
 
 
5972
  /* Find a message size which triggers EMSGSIZE */
 
5973
  __attribute__((cleanup(cleanup_string)))
 
5974
    char *message_buffer = NULL;
 
5975
  size_t message_size = PIPE_BUF + 1;
 
5976
  for(ssize_t ssret = 0; ssret >= 0; message_size += 1024){
 
5977
    if(message_size >= 1024*1024*1024){ /* 1 GiB */
 
5978
      g_test_skip("Skipping EMSGSIZE test: Will not try 1GiB");
 
5979
      return;
 
5980
    }
 
5981
    free(message_buffer);
 
5982
    message_buffer = malloc(message_size);
 
5983
    if(message_buffer == NULL){
 
5984
      g_test_skip("Skipping EMSGSIZE test");
 
5985
      g_test_message("Failed to malloc() %" PRIuMAX " bytes",
 
5986
                     (uintmax_t)message_size);
 
5987
      return;
 
5988
    }
 
5989
    /* Fill buffer with 'x' */
 
5990
    memset(message_buffer, 'x', message_size);
 
5991
    /* Create a new socketpair for each message size to avoid having
 
5992
       to empty the pipe by reading the message to a separate buffer
 
5993
    */
 
5994
    g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
5995
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
5996
                               socketfds), ==, 0);
 
5997
    ssret = send(socketfds[1], message_buffer, message_size,
 
5998
                 MSG_NOSIGNAL);
 
5999
    error_t saved_errno = errno;
 
6000
    g_assert_cmpint(close(socketfds[0]), ==, 0);
 
6001
    g_assert_cmpint(close(socketfds[1]), ==, 0);
 
6002
 
 
6003
    if(ssret < 0){
 
6004
      if(saved_errno != EMSGSIZE) {
 
6005
        g_test_skip("Skipping EMSGSIZE test");
 
6006
        g_test_message("Error on send(): %s", strerror(saved_errno));
 
6007
        return;
 
6008
      }
 
6009
    } else if(ssret != (ssize_t)message_size){
 
6010
      g_test_skip("Skipping EMSGSIZE test");
 
6011
      g_test_message("Partial send(): %" PRIuMAX " of %" PRIdMAX
 
6012
                     " bytes", (uintmax_t)ssret,
 
6013
                     (intmax_t)message_size);
 
6014
      return;
 
6015
    }
 
6016
  }
 
6017
  g_test_message("EMSGSIZE triggered by %" PRIdMAX " bytes",
 
6018
                 (intmax_t)message_size);
 
6019
 
 
6020
  buffer password = {
 
6021
    .data=message_buffer,
 
6022
    .length=message_size - 2,   /* Compensate for added '+' and NUL */
 
6023
    .allocated=message_size,
 
6024
  };
 
6025
  if(mlock(password.data, password.allocated) != 0){
 
6026
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6027
  }
 
6028
 
 
6029
  __attribute__((cleanup(cleanup_queue)))
 
6030
    task_queue *queue = create_queue();
 
6031
  g_assert_nonnull(queue);
 
6032
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6033
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6034
                             socketfds), ==, 0);
 
6035
  __attribute__((cleanup(cleanup_close)))
 
6036
    const int read_socket = socketfds[0];
 
6037
  __attribute__((cleanup(cleanup_close)))
 
6038
    const int write_socket = socketfds[1];
 
6039
  task_context task = {
 
6040
    .func=send_password_to_socket,
 
6041
    .question_filename=strdup(question_filename),
 
6042
    .filename=filename,
 
6043
    .epoll_fd=epoll_fd,
 
6044
    .fd=write_socket,
 
6045
    .password=&password,
 
6046
    .cancelled_filenames=&cancelled_filenames,
 
6047
    .mandos_client_exited=(bool[]){true},
 
6048
    .password_is_read=(bool[]){true},
 
6049
    .current_time=(mono_microsecs[]){0},
 
6050
  };
 
6051
  g_assert_nonnull(task.question_filename);
 
6052
 
 
6053
  run_task_with_stderr_to_dev_null(task, queue);
 
6054
 
 
6055
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6056
  g_assert_true(string_set_contains(cancelled_filenames,
 
6057
                                    question_filename));
 
6058
}
 
6059
 
 
6060
static void test_send_password_to_socket_retry(__attribute__((unused))
 
6061
                                               test_fixture *fixture,
 
6062
                                               __attribute__((unused))
 
6063
                                               gconstpointer
 
6064
                                               user_data){
 
6065
  __attribute__((cleanup(cleanup_close)))
 
6066
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6067
  g_assert_cmpint(epoll_fd, >=, 0);
 
6068
  __attribute__((cleanup(cleanup_string)))
 
6069
    char *const question_filename = strdup("/nonexistent/question");
 
6070
  g_assert_nonnull(question_filename);
 
6071
  __attribute__((cleanup(cleanup_string)))
 
6072
    char *const filename = strdup("/nonexistent/socket");
 
6073
  g_assert_nonnull(filename);
 
6074
  __attribute__((cleanup(string_set_clear)))
 
6075
    string_set cancelled_filenames = {};
 
6076
  __attribute__((cleanup(cleanup_buffer)))
 
6077
    buffer password = {};
 
6078
 
 
6079
  __attribute__((cleanup(cleanup_queue)))
 
6080
    task_queue *queue = create_queue();
 
6081
  g_assert_nonnull(queue);
 
6082
  int socketfds[2];
 
6083
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6084
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6085
                             socketfds), ==, 0);
 
6086
  __attribute__((cleanup(cleanup_close)))
 
6087
    const int read_socket = socketfds[0];
 
6088
  const int write_socket = socketfds[1];
 
6089
  /* Close the server side socket to force ECONNRESET on client */
 
6090
  g_assert_cmpint(close(read_socket), ==, 0);
 
6091
  task_context task = {
 
6092
    .func=send_password_to_socket,
 
6093
    .question_filename=strdup(question_filename),
 
6094
    .filename=strdup(filename),
 
6095
    .epoll_fd=epoll_fd,
 
6096
    .fd=write_socket,
 
6097
    .password=&password,
 
6098
    .cancelled_filenames=&cancelled_filenames,
 
6099
    .mandos_client_exited=(bool[]){true},
 
6100
    .password_is_read=(bool[]){true},
 
6101
    .current_time=(mono_microsecs[]){0},
 
6102
  };
 
6103
  g_assert_nonnull(task.question_filename);
 
6104
 
 
6105
  task.func(task, queue);
 
6106
 
 
6107
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6108
 
 
6109
  const task_context *const added_task = find_matching_task(queue,
 
6110
                                                            task);
 
6111
  g_assert_nonnull(added_task);
 
6112
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
6113
 
 
6114
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
 
6115
                                   EPOLLOUT));
 
6116
}
 
6117
 
 
6118
static
 
6119
void test_send_password_to_socket_bad_epoll(__attribute__((unused))
 
6120
                                            test_fixture *fixture,
 
6121
                                            __attribute__((unused))
 
6122
                                            gconstpointer user_data){
 
6123
  __attribute__((cleanup(cleanup_close)))
 
6124
    const int epoll_fd = open("/dev/null",
 
6125
                              O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
6126
  __attribute__((cleanup(cleanup_string)))
 
6127
    char *const question_filename = strdup("/nonexistent/question");
 
6128
  g_assert_nonnull(question_filename);
 
6129
  __attribute__((cleanup(cleanup_string)))
 
6130
    char *const filename = strdup("/nonexistent/socket");
 
6131
  g_assert_nonnull(filename);
 
6132
  __attribute__((cleanup(string_set_clear)))
 
6133
    string_set cancelled_filenames = {};
 
6134
  __attribute__((cleanup(cleanup_buffer)))
 
6135
    buffer password = {};
 
6136
 
 
6137
  const mono_microsecs current_time = 11;
 
6138
  __attribute__((cleanup(cleanup_queue)))
 
6139
    task_queue *queue = create_queue();
 
6140
  g_assert_nonnull(queue);
 
6141
  int socketfds[2];
 
6142
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6143
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6144
                             socketfds), ==, 0);
 
6145
  __attribute__((cleanup(cleanup_close)))
 
6146
    const int read_socket = socketfds[0];
 
6147
  const int write_socket = socketfds[1];
 
6148
  /* Close the server side socket to force ECONNRESET on client */
 
6149
  g_assert_cmpint(close(read_socket), ==, 0);
 
6150
  task_context task = {
 
6151
    .func=send_password_to_socket,
 
6152
    .question_filename=strdup(question_filename),
 
6153
    .filename=strdup(filename),
 
6154
    .epoll_fd=epoll_fd,
 
6155
    .fd=write_socket,
 
6156
    .password=&password,
 
6157
    .cancelled_filenames=&cancelled_filenames,
 
6158
    .mandos_client_exited=(bool[]){true},
 
6159
    .password_is_read=(bool[]){true},
 
6160
    .current_time=&current_time,
 
6161
  };
 
6162
  g_assert_nonnull(task.question_filename);
 
6163
 
 
6164
  run_task_with_stderr_to_dev_null(task, queue);
 
6165
 
 
6166
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6167
 
 
6168
  const task_context *const added_task = find_matching_task(queue,
 
6169
                                                            task);
 
6170
  g_assert_nonnull(added_task);
 
6171
  g_assert_true(queue->next_run == current_time + 1000000);
 
6172
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
 
6173
}
 
6174
 
 
6175
static void assert_send_password_to_socket_password(buffer password){
 
6176
  __attribute__((cleanup(cleanup_close)))
 
6177
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6178
  g_assert_cmpint(epoll_fd, >=, 0);
 
6179
  char *const question_filename = strdup("/nonexistent/question");
 
6180
  g_assert_nonnull(question_filename);
 
6181
  char *const filename = strdup("/nonexistent/socket");
 
6182
  g_assert_nonnull(filename);
 
6183
  __attribute__((cleanup(string_set_clear)))
 
6184
    string_set cancelled_filenames = {};
 
6185
 
 
6186
  __attribute__((cleanup(cleanup_queue)))
 
6187
    task_queue *queue = create_queue();
 
6188
  g_assert_nonnull(queue);
 
6189
  int socketfds[2];
 
6190
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
 
6191
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
 
6192
                             socketfds), ==, 0);
 
6193
  __attribute__((cleanup(cleanup_close)))
 
6194
    const int read_socket = socketfds[0];
 
6195
  const int write_socket = socketfds[1];
 
6196
  task_context task = {
 
6197
    .func=send_password_to_socket,
 
6198
    .question_filename=question_filename,
 
6199
    .filename=filename,
 
6200
    .epoll_fd=epoll_fd,
 
6201
    .fd=write_socket,
 
6202
    .password=&password,
 
6203
    .cancelled_filenames=&cancelled_filenames,
 
6204
    .mandos_client_exited=(bool[]){true},
 
6205
    .password_is_read=(bool[]){true},
 
6206
    .current_time=(mono_microsecs[]){0},
 
6207
  };
 
6208
 
 
6209
  char *expected_written_data = malloc(password.length + 2);
 
6210
  g_assert_nonnull(expected_written_data);
 
6211
  expected_written_data[0] = '+';
 
6212
  expected_written_data[password.length + 1] = '\0';
 
6213
  if(password.length > 0){
 
6214
    g_assert_nonnull(password.data);
 
6215
    memcpy(expected_written_data + 1, password.data, password.length);
 
6216
  }
 
6217
 
 
6218
  task.func(task, queue);
 
6219
 
 
6220
  char buf[PIPE_BUF];
 
6221
  g_assert_cmpint((int)read(read_socket, buf, PIPE_BUF), ==,
 
6222
                  (int)(password.length + 2));
 
6223
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6224
 
 
6225
  g_assert_true(memcmp(expected_written_data, buf,
 
6226
                       password.length + 2) == 0);
 
6227
 
 
6228
  g_assert_true(epoll_set_does_not_contain(epoll_fd, write_socket));
 
6229
 
 
6230
  free(expected_written_data);
 
6231
}
 
6232
 
 
6233
static void
 
6234
test_send_password_to_socket_null_password(__attribute__((unused))
 
6235
                                           test_fixture *fixture,
 
6236
                                           __attribute__((unused))
 
6237
                                           gconstpointer user_data){
 
6238
  __attribute__((cleanup(cleanup_buffer)))
 
6239
    buffer password = {};
 
6240
  assert_send_password_to_socket_password(password);
 
6241
}
 
6242
 
 
6243
static void
 
6244
test_send_password_to_socket_empty_password(__attribute__((unused))
 
6245
                                            test_fixture *fixture,
 
6246
                                            __attribute__((unused))
 
6247
                                            gconstpointer user_data){
 
6248
  __attribute__((cleanup(cleanup_buffer)))
 
6249
    buffer password = {
 
6250
    .data=malloc(1),           /* because malloc(0) may return NULL */
 
6251
    .length=0,
 
6252
    .allocated=0,               /* deliberate lie */
 
6253
  };
 
6254
  g_assert_nonnull(password.data);
 
6255
  assert_send_password_to_socket_password(password);
 
6256
}
 
6257
 
 
6258
static void
 
6259
test_send_password_to_socket_empty_str_pass(__attribute__((unused))
 
6260
                                            test_fixture *fixture,
 
6261
                                            __attribute__((unused))
 
6262
                                            gconstpointer user_data){
 
6263
  __attribute__((cleanup(cleanup_buffer)))
 
6264
    buffer password = {
 
6265
    .data=strdup(""),
 
6266
    .length=0,
 
6267
    .allocated=1,
 
6268
  };
 
6269
  if(mlock(password.data, password.allocated) != 0){
 
6270
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6271
  }
 
6272
  assert_send_password_to_socket_password(password);
 
6273
}
 
6274
 
 
6275
static void
 
6276
test_send_password_to_socket_text_password(__attribute__((unused))
 
6277
                                           test_fixture *fixture,
 
6278
                                           __attribute__((unused))
 
6279
                                           gconstpointer user_data){
 
6280
  const char dummy_test_password[] = "dummy test password";
 
6281
  __attribute__((cleanup(cleanup_buffer)))
 
6282
    buffer password = {
 
6283
    .data = strdup(dummy_test_password),
 
6284
    .length = strlen(dummy_test_password),
 
6285
    .allocated = sizeof(dummy_test_password),
 
6286
  };
 
6287
  if(mlock(password.data, password.allocated) != 0){
 
6288
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6289
  }
 
6290
  assert_send_password_to_socket_password(password);
 
6291
}
 
6292
 
 
6293
static void
 
6294
test_send_password_to_socket_binary_password(__attribute__((unused))
 
6295
                                             test_fixture *fixture,
 
6296
                                             __attribute__((unused))
 
6297
                                             gconstpointer user_data){
 
6298
  __attribute__((cleanup(cleanup_buffer)))
 
6299
    buffer password = {
 
6300
    .data=malloc(255),
 
6301
    .length=255,
 
6302
    .allocated=255,
 
6303
  };
 
6304
  g_assert_nonnull(password.data);
 
6305
  if(mlock(password.data, password.allocated) != 0){
 
6306
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6307
  }
 
6308
  char c = 1;                   /* Start at 1, avoiding NUL */
 
6309
  for(int i=0; i < 255; i++){
 
6310
    password.data[i] = c++;
 
6311
  }
 
6312
  assert_send_password_to_socket_password(password);
 
6313
}
 
6314
 
 
6315
static void
 
6316
test_send_password_to_socket_nuls_in_password(__attribute__((unused))
 
6317
                                              test_fixture *fixture,
 
6318
                                              __attribute__((unused))
 
6319
                                              gconstpointer
 
6320
                                              user_data){
 
6321
  char test_password[] = {'\0', 'a', '\0', 'b', '\0', 'c', '\0'};
 
6322
  __attribute__((cleanup(cleanup_buffer)))
 
6323
    buffer password = {
 
6324
    .data=malloc(sizeof(test_password)),
 
6325
    .length=sizeof(test_password),
 
6326
    .allocated=sizeof(test_password),
 
6327
  };
 
6328
  g_assert_nonnull(password.data);
 
6329
  if(mlock(password.data, password.allocated) !=0){
 
6330
    g_assert_true(errno == EPERM or errno == ENOMEM);
 
6331
  }
 
6332
  memcpy(password.data, test_password, password.allocated);
 
6333
  assert_send_password_to_socket_password(password);
 
6334
}
 
6335
 
 
6336
static bool assert_add_existing_questions_to_devnull(task_queue
 
6337
                                                     *const,
 
6338
                                                     const int,
 
6339
                                                     buffer *const,
 
6340
                                                     string_set *,
 
6341
                                                     const
 
6342
                                                     mono_microsecs
 
6343
                                                     *const,
 
6344
                                                     bool *const,
 
6345
                                                     bool *const,
 
6346
                                                     const char
 
6347
                                                     *const);
 
6348
 
 
6349
static void test_add_existing_questions_ENOENT(__attribute__((unused))
 
6350
                                               test_fixture *fixture,
 
6351
                                               __attribute__((unused))
 
6352
                                               gconstpointer
 
6353
                                               user_data){
 
6354
  __attribute__((cleanup(cleanup_queue)))
 
6355
    task_queue *queue = create_queue();
 
6356
  g_assert_nonnull(queue);
 
6357
  __attribute__((cleanup(cleanup_close)))
 
6358
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6359
  g_assert_cmpint(epoll_fd, >=, 0);
 
6360
  __attribute__((cleanup(string_set_clear)))
 
6361
    string_set cancelled_filenames = {};
 
6362
 
 
6363
  g_assert_false(assert_add_existing_questions_to_devnull
 
6364
                 (queue,
 
6365
                  epoll_fd,
 
6366
                  (buffer[]){{}}, /* password */
 
6367
                  &cancelled_filenames,
 
6368
                  (mono_microsecs[]){0}, /* current_time */
 
6369
                  (bool[]){false},       /* mandos_client_exited */
 
6370
                  (bool[]){false},       /* password_is_read */
 
6371
                  "/nonexistent"));      /* dirname */
 
6372
 
 
6373
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6374
}
 
6375
 
 
6376
static
 
6377
bool assert_add_existing_questions_to_devnull(task_queue
 
6378
                                              *const queue,
 
6379
                                              const int
 
6380
                                              epoll_fd,
 
6381
                                              buffer *const
 
6382
                                              password,
 
6383
                                              string_set
 
6384
                                              *cancelled_filenames,
 
6385
                                              const mono_microsecs
 
6386
                                              *const current_time,
 
6387
                                              bool *const
 
6388
                                              mandos_client_exited,
 
6389
                                              bool *const
 
6390
                                              password_is_read,
 
6391
                                              const char *const
 
6392
                                              dirname){
 
6393
  __attribute__((cleanup(cleanup_close)))
 
6394
    const int devnull_fd = open("/dev/null",
 
6395
                                O_WRONLY | O_CLOEXEC | O_NOCTTY);
 
6396
  g_assert_cmpint(devnull_fd, >=, 0);
 
6397
  __attribute__((cleanup(cleanup_close)))
 
6398
    const int real_stderr_fd = dup(STDERR_FILENO);
 
6399
  g_assert_cmpint(real_stderr_fd, >=, 0);
 
6400
  dup2(devnull_fd, STDERR_FILENO);
 
6401
  const bool ret = add_existing_questions(queue, epoll_fd, password,
 
6402
                                          cancelled_filenames,
 
6403
                                          current_time,
 
6404
                                          mandos_client_exited,
 
6405
                                          password_is_read, dirname);
 
6406
  dup2(real_stderr_fd, STDERR_FILENO);
 
6407
  return ret;
 
6408
}
 
6409
 
 
6410
static
 
6411
void test_add_existing_questions_no_questions(__attribute__((unused))
 
6412
                                              test_fixture *fixture,
 
6413
                                              __attribute__((unused))
 
6414
                                              gconstpointer
 
6415
                                              user_data){
 
6416
  __attribute__((cleanup(cleanup_queue)))
 
6417
    task_queue *queue = create_queue();
 
6418
  g_assert_nonnull(queue);
 
6419
  __attribute__((cleanup(cleanup_close)))
 
6420
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6421
  g_assert_cmpint(epoll_fd, >=, 0);
 
6422
  __attribute__((cleanup(string_set_clear)))
 
6423
    string_set cancelled_filenames = {};
 
6424
  __attribute__((cleanup(cleanup_string)))
 
6425
    char *tempdir = make_temporary_directory();
 
6426
  g_assert_nonnull(tempdir);
 
6427
 
 
6428
  g_assert_false(assert_add_existing_questions_to_devnull
 
6429
                 (queue,
 
6430
                  epoll_fd,
 
6431
                  (buffer[]){{}}, /* password */
 
6432
                  &cancelled_filenames,
 
6433
                  (mono_microsecs[]){0}, /* current_time */
 
6434
                  (bool[]){false},       /* mandos_client_exited */
 
6435
                  (bool[]){false},       /* password_is_read */
 
6436
                  tempdir));
 
6437
 
 
6438
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6439
 
 
6440
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6441
}
 
6442
 
 
6443
static char *make_question_file_in_directory(const char *const);
 
6444
 
 
6445
static
 
6446
void test_add_existing_questions_one_question(__attribute__((unused))
 
6447
                                              test_fixture *fixture,
 
6448
                                              __attribute__((unused))
 
6449
                                              gconstpointer
 
6450
                                              user_data){
 
6451
  __attribute__((cleanup(cleanup_queue)))
 
6452
    task_queue *queue = create_queue();
 
6453
  g_assert_nonnull(queue);
 
6454
  __attribute__((cleanup(cleanup_close)))
 
6455
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6456
  g_assert_cmpint(epoll_fd, >=, 0);
 
6457
  __attribute__((cleanup(cleanup_buffer)))
 
6458
    buffer password = {};
 
6459
  __attribute__((cleanup(string_set_clear)))
 
6460
    string_set cancelled_filenames = {};
 
6461
  const mono_microsecs current_time = 0;
 
6462
  bool mandos_client_exited = false;
 
6463
  bool password_is_read = false;
 
6464
  __attribute__((cleanup(cleanup_string)))
 
6465
    char *tempdir = make_temporary_directory();
 
6466
  g_assert_nonnull(tempdir);
 
6467
  __attribute__((cleanup(cleanup_string)))
 
6468
    char *question_filename
 
6469
    = make_question_file_in_directory(tempdir);
 
6470
  g_assert_nonnull(question_filename);
 
6471
 
 
6472
  g_assert_true(assert_add_existing_questions_to_devnull
 
6473
                (queue,
 
6474
                 epoll_fd,
 
6475
                 &password,
 
6476
                 &cancelled_filenames,
 
6477
                 &current_time,
 
6478
                 &mandos_client_exited,
 
6479
                 &password_is_read,
 
6480
                 tempdir));
 
6481
 
 
6482
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6483
 
 
6484
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
6485
        .func=open_and_parse_question,
 
6486
        .epoll_fd=epoll_fd,
 
6487
        .filename=question_filename,
 
6488
        .question_filename=question_filename,
 
6489
        .password=&password,
 
6490
        .cancelled_filenames=&cancelled_filenames,
 
6491
        .current_time=&current_time,
 
6492
        .mandos_client_exited=&mandos_client_exited,
 
6493
        .password_is_read=&password_is_read,
 
6494
      }));
 
6495
 
 
6496
  g_assert_true(queue->next_run == 1);
 
6497
 
 
6498
  g_assert_cmpint(unlink(question_filename), ==, 0);
 
6499
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6500
}
 
6501
 
 
6502
static char *make_question_file_in_directory(const char
 
6503
                                             *const dir){
 
6504
  return make_temporary_prefixed_file_in_directory("ask.", dir);
 
6505
}
 
6506
 
 
6507
static
 
6508
void test_add_existing_questions_two_questions(__attribute__((unused))
 
6509
                                               test_fixture *fixture,
 
6510
                                               __attribute__((unused))
 
6511
                                               gconstpointer
 
6512
                                               user_data){
 
6513
  __attribute__((cleanup(cleanup_queue)))
 
6514
    task_queue *queue = create_queue();
 
6515
  g_assert_nonnull(queue);
 
6516
  __attribute__((cleanup(cleanup_close)))
 
6517
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6518
  g_assert_cmpint(epoll_fd, >=, 0);
 
6519
  __attribute__((cleanup(cleanup_buffer)))
 
6520
    buffer password = {};
 
6521
  __attribute__((cleanup(string_set_clear)))
 
6522
    string_set cancelled_filenames = {};
 
6523
  const mono_microsecs current_time = 0;
 
6524
  bool mandos_client_exited = false;
 
6525
  bool password_is_read = false;
 
6526
  __attribute__((cleanup(cleanup_string)))
 
6527
    char *tempdir = make_temporary_directory();
 
6528
  g_assert_nonnull(tempdir);
 
6529
  __attribute__((cleanup(cleanup_string)))
 
6530
    char *question_filename1
 
6531
    = make_question_file_in_directory(tempdir);
 
6532
  g_assert_nonnull(question_filename1);
 
6533
  __attribute__((cleanup(cleanup_string)))
 
6534
    char *question_filename2
 
6535
    = make_question_file_in_directory(tempdir);
 
6536
  g_assert_nonnull(question_filename2);
 
6537
 
 
6538
  g_assert_true(assert_add_existing_questions_to_devnull
 
6539
                (queue,
 
6540
                 epoll_fd,
 
6541
                 &password,
 
6542
                 &cancelled_filenames,
 
6543
                 &current_time,
 
6544
                 &mandos_client_exited,
 
6545
                 &password_is_read,
 
6546
                 tempdir));
 
6547
 
 
6548
  g_assert_cmpuint((unsigned int)queue->length, ==, 2);
 
6549
 
 
6550
  g_assert_true(queue->next_run == 1);
 
6551
 
 
6552
  __attribute__((cleanup(string_set_clear)))
 
6553
    string_set seen_questions = {};
 
6554
 
 
6555
  bool queue_contains_question_opener(char *const question_filename){
 
6556
    return(find_matching_task(queue, (task_context){
 
6557
          .func=open_and_parse_question,
 
6558
          .epoll_fd=epoll_fd,
 
6559
          .question_filename=question_filename,
 
6560
          .password=&password,
 
6561
          .cancelled_filenames=&cancelled_filenames,
 
6562
          .current_time=&current_time,
 
6563
          .mandos_client_exited=&mandos_client_exited,
 
6564
          .password_is_read=&password_is_read,
 
6565
        }) != NULL);
 
6566
  }
 
6567
 
 
6568
  g_assert_true(queue_contains_question_opener(question_filename1));
 
6569
  g_assert_true(queue_contains_question_opener(question_filename2));
 
6570
 
 
6571
  g_assert_true(queue->next_run == 1);
 
6572
 
 
6573
  g_assert_cmpint(unlink(question_filename1), ==, 0);
 
6574
  g_assert_cmpint(unlink(question_filename2), ==, 0);
 
6575
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6576
}
 
6577
 
 
6578
static void
 
6579
test_add_existing_questions_non_questions(__attribute__((unused))
 
6580
                                          test_fixture *fixture,
 
6581
                                          __attribute__((unused))
 
6582
                                          gconstpointer user_data){
 
6583
  __attribute__((cleanup(cleanup_queue)))
 
6584
    task_queue *queue = create_queue();
 
6585
  g_assert_nonnull(queue);
 
6586
  __attribute__((cleanup(cleanup_close)))
 
6587
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6588
  g_assert_cmpint(epoll_fd, >=, 0);
 
6589
  __attribute__((cleanup(string_set_clear)))
 
6590
    string_set cancelled_filenames = {};
 
6591
  __attribute__((cleanup(cleanup_string)))
 
6592
    char *tempdir = make_temporary_directory();
 
6593
  g_assert_nonnull(tempdir);
 
6594
  __attribute__((cleanup(cleanup_string)))
 
6595
    char *question_filename1
 
6596
    = make_temporary_file_in_directory(tempdir);
 
6597
  g_assert_nonnull(question_filename1);
 
6598
  __attribute__((cleanup(cleanup_string)))
 
6599
    char *question_filename2
 
6600
    = make_temporary_file_in_directory(tempdir);
 
6601
  g_assert_nonnull(question_filename2);
 
6602
 
 
6603
  g_assert_false(assert_add_existing_questions_to_devnull
 
6604
                 (queue,
 
6605
                  epoll_fd,
 
6606
                  (buffer[]){{}}, /* password */
 
6607
                  &cancelled_filenames,
 
6608
                  (mono_microsecs[]){0}, /* current_time */
 
6609
                  (bool[]){false},       /* mandos_client_exited */
 
6610
                  (bool[]){false},       /* password_is_read */
 
6611
                  tempdir));
 
6612
 
 
6613
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
 
6614
 
 
6615
  g_assert_cmpint(unlink(question_filename1), ==, 0);
 
6616
  g_assert_cmpint(unlink(question_filename2), ==, 0);
 
6617
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6618
}
 
6619
 
 
6620
static void
 
6621
test_add_existing_questions_both_types(__attribute__((unused))
 
6622
                                       test_fixture *fixture,
 
6623
                                       __attribute__((unused))
 
6624
                                       gconstpointer user_data){
 
6625
  __attribute__((cleanup(cleanup_queue)))
 
6626
    task_queue *queue = create_queue();
 
6627
  g_assert_nonnull(queue);
 
6628
  __attribute__((cleanup(cleanup_close)))
 
6629
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6630
  g_assert_cmpint(epoll_fd, >=, 0);
 
6631
  __attribute__((cleanup(cleanup_buffer)))
 
6632
    buffer password = {};
 
6633
  __attribute__((cleanup(string_set_clear)))
 
6634
    string_set cancelled_filenames = {};
 
6635
  const mono_microsecs current_time = 0;
 
6636
  bool mandos_client_exited = false;
 
6637
  bool password_is_read = false;
 
6638
  __attribute__((cleanup(cleanup_string)))
 
6639
    char *tempdir = make_temporary_directory();
 
6640
  g_assert_nonnull(tempdir);
 
6641
  __attribute__((cleanup(cleanup_string)))
 
6642
    char *tempfilename1 = make_temporary_file_in_directory(tempdir);
 
6643
  g_assert_nonnull(tempfilename1);
 
6644
  __attribute__((cleanup(cleanup_string)))
 
6645
    char *tempfilename2 = make_temporary_file_in_directory(tempdir);
 
6646
  g_assert_nonnull(tempfilename2);
 
6647
  __attribute__((cleanup(cleanup_string)))
 
6648
    char *question_filename
 
6649
    = make_question_file_in_directory(tempdir);
 
6650
  g_assert_nonnull(question_filename);
 
6651
 
 
6652
  g_assert_true(assert_add_existing_questions_to_devnull
 
6653
                (queue,
 
6654
                 epoll_fd,
 
6655
                 &password,
 
6656
                 &cancelled_filenames,
 
6657
                 &current_time,
 
6658
                 &mandos_client_exited,
 
6659
                 &password_is_read,
 
6660
                 tempdir));
 
6661
 
 
6662
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
 
6663
 
 
6664
  g_assert_nonnull(find_matching_task(queue, (task_context){
 
6665
        .func=open_and_parse_question,
 
6666
        .epoll_fd=epoll_fd,
 
6667
        .filename=question_filename,
 
6668
        .question_filename=question_filename,
 
6669
        .password=&password,
 
6670
        .cancelled_filenames=&cancelled_filenames,
 
6671
        .current_time=&current_time,
 
6672
        .mandos_client_exited=&mandos_client_exited,
 
6673
        .password_is_read=&password_is_read,
 
6674
      }));
 
6675
 
 
6676
  g_assert_true(queue->next_run == 1);
 
6677
 
 
6678
  g_assert_cmpint(unlink(tempfilename1), ==, 0);
 
6679
  g_assert_cmpint(unlink(tempfilename2), ==, 0);
 
6680
  g_assert_cmpint(unlink(question_filename), ==, 0);
 
6681
  g_assert_cmpint(rmdir(tempdir), ==, 0);
 
6682
}
 
6683
 
 
6684
static void test_wait_for_event_timeout(__attribute__((unused))
 
6685
                                        test_fixture *fixture,
 
6686
                                        __attribute__((unused))
 
6687
                                        gconstpointer user_data){
 
6688
  __attribute__((cleanup(cleanup_close)))
 
6689
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6690
  g_assert_cmpint(epoll_fd, >=, 0);
 
6691
 
 
6692
  g_assert_true(wait_for_event(epoll_fd, 1, 0));
 
6693
}
 
6694
 
 
6695
static void test_wait_for_event_event(__attribute__((unused))
 
6696
                                      test_fixture *fixture,
 
6697
                                      __attribute__((unused))
 
6698
                                      gconstpointer user_data){
 
6699
  __attribute__((cleanup(cleanup_close)))
 
6700
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6701
  g_assert_cmpint(epoll_fd, >=, 0);
 
6702
  int pipefds[2];
 
6703
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6704
  __attribute__((cleanup(cleanup_close)))
 
6705
    const int read_pipe = pipefds[0];
 
6706
  __attribute__((cleanup(cleanup_close)))
 
6707
    const int write_pipe = pipefds[1];
 
6708
  g_assert_cmpint(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, read_pipe,
 
6709
                            &(struct epoll_event)
 
6710
                            { .events=EPOLLIN | EPOLLRDHUP }), ==, 0);
 
6711
  g_assert_cmpint((int)write(write_pipe, "x", 1), ==, 1);
 
6712
 
 
6713
  g_assert_true(wait_for_event(epoll_fd, 0, 0));
 
6714
}
 
6715
 
 
6716
static void test_wait_for_event_sigchld(test_fixture *fixture,
 
6717
                                        __attribute__((unused))
 
6718
                                        gconstpointer user_data){
 
6719
  const pid_t pid = fork();
 
6720
  if(pid == 0){         /* Child */
 
6721
    if(not restore_signal_handler(&fixture->orig_sigaction)){
 
6722
      _exit(EXIT_FAILURE);
 
6723
    }
 
6724
    if(not restore_sigmask(&fixture->orig_sigmask)){
 
6725
      _exit(EXIT_FAILURE);
 
6726
    }
 
6727
    exit(EXIT_SUCCESS);
 
6728
  }
 
6729
  g_assert_true(pid != -1);
 
6730
  __attribute__((cleanup(cleanup_close)))
 
6731
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6732
  g_assert_cmpint(epoll_fd, >=, 0);
 
6733
 
 
6734
  g_assert_true(wait_for_event(epoll_fd, 0, 0));
 
6735
 
 
6736
  int status;
 
6737
  g_assert_true(waitpid(pid, &status, 0) == pid);
 
6738
  g_assert_true(WIFEXITED(status));
 
6739
  g_assert_cmpint(WEXITSTATUS(status), ==, EXIT_SUCCESS);
 
6740
}
 
6741
 
 
6742
static void test_run_queue_zeroes_next_run(__attribute__((unused))
 
6743
                                           test_fixture *fixture,
 
6744
                                           __attribute__((unused))
 
6745
                                           gconstpointer user_data){
 
6746
  __attribute__((cleanup(cleanup_queue)))
 
6747
    task_queue *queue = create_queue();
 
6748
  g_assert_nonnull(queue);
 
6749
  queue->next_run = 1;
 
6750
  __attribute__((cleanup(cleanup_close)))
 
6751
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
 
6752
  __attribute__((cleanup(string_set_clear)))
 
6753
    string_set cancelled_filenames = {};
 
6754
  bool quit_now = false;
 
6755
 
 
6756
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6757
  g_assert_false(quit_now);
 
6758
  g_assert_cmpuint((unsigned int)queue->next_run, ==, 0);
 
6759
}
 
6760
 
 
6761
static
 
6762
void test_run_queue_clears_cancelled_filenames(__attribute__((unused))
 
6763
                                               test_fixture *fixture,
 
6764
                                               __attribute__((unused))
 
6765
                                               gconstpointer
 
6766
                                               user_data){
 
6767
  __attribute__((cleanup(cleanup_queue)))
 
6768
    task_queue *queue = create_queue();
 
6769
  g_assert_nonnull(queue);
 
6770
  __attribute__((cleanup(string_set_clear)))
 
6771
    string_set cancelled_filenames = {};
 
6772
  bool quit_now = false;
 
6773
  const char question_filename[] = "/nonexistent/question_filename";
 
6774
  g_assert_true(string_set_add(&cancelled_filenames,
 
6775
                               question_filename));
 
6776
 
 
6777
  g_assert_true(add_to_queue(queue,
 
6778
                             (task_context){ .func=dummy_func }));
 
6779
 
 
6780
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6781
  g_assert_false(quit_now);
 
6782
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6783
  g_assert_false(string_set_contains(cancelled_filenames,
 
6784
                                     question_filename));
 
6785
}
 
6786
 
 
6787
static
 
6788
void test_run_queue_skips_cancelled_filenames(__attribute__((unused))
 
6789
                                              test_fixture *fixture,
 
6790
                                              __attribute__((unused))
 
6791
                                              gconstpointer
 
6792
                                              user_data){
 
6793
  __attribute__((cleanup(cleanup_queue)))
 
6794
    task_queue *queue = create_queue();
 
6795
  g_assert_nonnull(queue);
 
6796
  __attribute__((cleanup(string_set_clear)))
 
6797
    string_set cancelled_filenames = {};
 
6798
  bool quit_now = false;
 
6799
  int pipefds[2];
 
6800
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6801
  __attribute__((cleanup(cleanup_close)))
 
6802
    const int read_pipe = pipefds[0];
 
6803
  g_assert_cmpint(close(pipefds[1]), ==, 0);
 
6804
  const char question_filename[] = "/nonexistent/question_filename";
 
6805
  g_assert_true(string_set_add(&cancelled_filenames,
 
6806
                               question_filename));
 
6807
  __attribute__((nonnull))
 
6808
    void quit_func(const task_context task,
 
6809
                   __attribute__((unused)) task_queue *const q){
 
6810
    g_assert_nonnull(task.quit_now);
 
6811
    *task.quit_now = true;
 
6812
  }
 
6813
  task_context task = {
 
6814
    .func=quit_func,
 
6815
    .question_filename=strdup(question_filename),
 
6816
    .quit_now=&quit_now,
 
6817
    .fd=read_pipe,
 
6818
  };
 
6819
  g_assert_nonnull(task.question_filename);
 
6820
 
 
6821
  g_assert_true(add_to_queue(queue, task));
 
6822
 
 
6823
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6824
  g_assert_false(quit_now);
 
6825
 
 
6826
  /* read_pipe should be closed already */
 
6827
  errno = 0;
 
6828
  bool read_pipe_closed = (close(read_pipe) == -1);
 
6829
  read_pipe_closed &= (errno == EBADF);
 
6830
  g_assert_true(read_pipe_closed);
 
6831
}
 
6832
 
 
6833
static void test_run_queue_one_task(__attribute__((unused))
 
6834
                                    test_fixture *fixture,
 
6835
                                    __attribute__((unused))
 
6836
                                    gconstpointer user_data){
 
6837
  __attribute__((cleanup(cleanup_queue)))
 
6838
    task_queue *queue = create_queue();
 
6839
  g_assert_nonnull(queue);
 
6840
  __attribute__((cleanup(string_set_clear)))
 
6841
    string_set cancelled_filenames = {};
 
6842
  bool quit_now = false;
 
6843
 
 
6844
  __attribute__((nonnull))
 
6845
    void next_run_func(__attribute__((unused))
 
6846
                       const task_context task,
 
6847
                       task_queue *const q){
 
6848
    q->next_run = 1;
 
6849
  }
 
6850
 
 
6851
  task_context task = {
 
6852
    .func=next_run_func,
 
6853
  };
 
6854
  g_assert_true(add_to_queue(queue, task));
 
6855
 
 
6856
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6857
  g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
 
6858
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6859
}
 
6860
 
 
6861
static void test_run_queue_two_tasks(__attribute__((unused))
 
6862
                                     test_fixture *fixture,
 
6863
                                     __attribute__((unused))
 
6864
                                     gconstpointer user_data){
 
6865
  __attribute__((cleanup(cleanup_queue)))
 
6866
    task_queue *queue = create_queue();
 
6867
  g_assert_nonnull(queue);
 
6868
  queue->next_run = 1;
 
6869
  __attribute__((cleanup(string_set_clear)))
 
6870
    string_set cancelled_filenames = {};
 
6871
  bool quit_now = false;
 
6872
  bool mandos_client_exited = false;
 
6873
 
 
6874
  __attribute__((nonnull))
 
6875
    void next_run_func(__attribute__((unused))
 
6876
                       const task_context task,
 
6877
                       task_queue *const q){
 
6878
    q->next_run = 1;
 
6879
  }
 
6880
 
 
6881
  __attribute__((nonnull))
 
6882
    void exited_func(const task_context task,
 
6883
                     __attribute__((unused)) task_queue *const q){
 
6884
    *task.mandos_client_exited = true;
 
6885
  }
 
6886
 
 
6887
  task_context task1 = {
 
6888
    .func=next_run_func,
 
6889
  };
 
6890
  g_assert_true(add_to_queue(queue, task1));
 
6891
 
 
6892
  task_context task2 = {
 
6893
    .func=exited_func,
 
6894
    .mandos_client_exited=&mandos_client_exited,
 
6895
  };
 
6896
  g_assert_true(add_to_queue(queue, task2));
 
6897
 
 
6898
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6899
  g_assert_false(quit_now);
 
6900
  g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
 
6901
  g_assert_true(mandos_client_exited);
 
6902
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6903
}
 
6904
 
 
6905
static void test_run_queue_two_tasks_quit(__attribute__((unused))
 
6906
                                          test_fixture *fixture,
 
6907
                                          __attribute__((unused))
 
6908
                                          gconstpointer user_data){
 
6909
  __attribute__((cleanup(cleanup_queue)))
 
6910
    task_queue *queue = create_queue();
 
6911
  g_assert_nonnull(queue);
 
6912
  __attribute__((cleanup(string_set_clear)))
 
6913
    string_set cancelled_filenames = {};
 
6914
  bool quit_now = false;
 
6915
  bool mandos_client_exited = false;
 
6916
  bool password_is_read = false;
 
6917
 
 
6918
  __attribute__((nonnull))
 
6919
    void set_exited_func(const task_context task,
 
6920
                         __attribute__((unused)) task_queue *const q){
 
6921
    *task.mandos_client_exited = true;
 
6922
    *task.quit_now = true;
 
6923
  }
 
6924
  task_context task1 = {
 
6925
    .func=set_exited_func,
 
6926
    .quit_now=&quit_now,
 
6927
    .mandos_client_exited=&mandos_client_exited,
 
6928
  };
 
6929
  g_assert_true(add_to_queue(queue, task1));
 
6930
 
 
6931
  __attribute__((nonnull))
 
6932
    void set_read_func(const task_context task,
 
6933
                       __attribute__((unused)) task_queue *const q){
 
6934
    *task.quit_now = true;
 
6935
    *task.password_is_read = true;
 
6936
  }
 
6937
  task_context task2 = {
 
6938
    .func=set_read_func,
 
6939
    .quit_now=&quit_now,
 
6940
    .password_is_read=&password_is_read,
 
6941
  };
 
6942
  g_assert_true(add_to_queue(queue, task2));
 
6943
 
 
6944
  g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6945
  g_assert_true(quit_now);
 
6946
  g_assert_true(mandos_client_exited xor password_is_read);
 
6947
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
6948
}
 
6949
 
 
6950
static void test_run_queue_two_tasks_cleanup(__attribute__((unused))
 
6951
                                             test_fixture *fixture,
 
6952
                                             __attribute__((unused))
 
6953
                                             gconstpointer user_data){
 
6954
  __attribute__((cleanup(cleanup_queue)))
 
6955
    task_queue *queue = create_queue();
 
6956
  g_assert_nonnull(queue);
 
6957
  __attribute__((cleanup(string_set_clear)))
 
6958
    string_set cancelled_filenames = {};
 
6959
  int pipefds[2];
 
6960
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
 
6961
  __attribute__((cleanup(cleanup_close)))
 
6962
    const int read_pipe = pipefds[0];
 
6963
  __attribute__((cleanup(cleanup_close)))
 
6964
    const int write_pipe = pipefds[1];
 
6965
  bool quit_now = false;
 
6966
 
 
6967
  __attribute__((nonnull))
 
6968
    void read_func(const task_context task,
 
6969
                   __attribute__((unused)) task_queue *const q){
 
6970
    *task.quit_now = true;
 
6971
  }
 
6972
  task_context task1 = {
 
6973
    .func=read_func,
 
6974
    .quit_now=&quit_now,
 
6975
    .fd=read_pipe,
 
6976
  };
 
6977
  g_assert_true(add_to_queue(queue, task1));
 
6978
 
 
6979
  __attribute__((nonnull))
 
6980
    void write_func(const task_context task,
 
6981
                    __attribute__((unused)) task_queue *const q){
 
6982
    *task.quit_now = true;
 
6983
  }
 
6984
  task_context task2 = {
 
6985
    .func=write_func,
 
6986
    .quit_now=&quit_now,
 
6987
    .fd=write_pipe,
 
6988
  };
 
6989
  g_assert_true(add_to_queue(queue, task2));
 
6990
 
 
6991
  g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
 
6992
  g_assert_true(quit_now);
 
6993
 
 
6994
  /* Either read_pipe or write_pipe should be closed already */
 
6995
  errno = 0;
 
6996
  bool close_read_pipe = (close(read_pipe) == -1);
 
6997
  close_read_pipe &= (errno == EBADF);
 
6998
  errno = 0;
 
6999
  bool close_write_pipe = (close(write_pipe) == -1);
 
7000
  close_write_pipe &= (errno == EBADF);
 
7001
  g_assert_true(close_read_pipe xor close_write_pipe);
 
7002
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
 
7003
}
 
7004
 
 
7005
static void test_setup_signal_handler(__attribute__((unused))
 
7006
                                      test_fixture *fixture,
 
7007
                                      __attribute__((unused))
 
7008
                                      gconstpointer user_data){
 
7009
  /* Save current SIGCHLD action, whatever it is */
 
7010
  struct sigaction expected_sigchld_action;
 
7011
  g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
 
7012
                  ==, 0);
 
7013
 
 
7014
  /* Act; i.e. run the setup_signal_handler() function */
 
7015
  struct sigaction actual_old_sigchld_action;
 
7016
  g_assert_true(setup_signal_handler(&actual_old_sigchld_action));
 
7017
 
 
7018
  /* Check that the function correctly set "actual_old_sigchld_action"
 
7019
     to the same values as the previously saved
 
7020
     "expected_sigchld_action" */
 
7021
  /* Check member sa_handler */
 
7022
  g_assert_true(actual_old_sigchld_action.sa_handler
 
7023
                == expected_sigchld_action.sa_handler);
 
7024
  /* Check member sa_mask */
 
7025
  for(int signum = 1; signum < NSIG; signum++){
 
7026
    const int expected_old_block_state
 
7027
      = sigismember(&expected_sigchld_action.sa_mask, signum);
 
7028
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
7029
    const int actual_old_block_state
 
7030
      = sigismember(&actual_old_sigchld_action.sa_mask, signum);
 
7031
    g_assert_cmpint(actual_old_block_state, >=, 0);
 
7032
    g_assert_cmpint(actual_old_block_state,
 
7033
                    ==, expected_old_block_state);
 
7034
  }
 
7035
  /* Check member sa_flags */
 
7036
  g_assert_true((actual_old_sigchld_action.sa_flags
 
7037
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
7038
                == (expected_sigchld_action.sa_flags
 
7039
                    & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
 
7040
 
 
7041
  /* Retrieve the current signal handler for SIGCHLD as set by
 
7042
     setup_signal_handler() */
 
7043
  struct sigaction actual_new_sigchld_action;
 
7044
  g_assert_cmpint(sigaction(SIGCHLD, NULL,
 
7045
                            &actual_new_sigchld_action), ==, 0);
 
7046
  /* Check that the signal handler (member sa_handler) is correctly
 
7047
     set to the "handle_sigchld" function */
 
7048
  g_assert_true(actual_new_sigchld_action.sa_handler != SIG_DFL);
 
7049
  g_assert_true(actual_new_sigchld_action.sa_handler != SIG_IGN);
 
7050
  g_assert_true(actual_new_sigchld_action.sa_handler
 
7051
                == handle_sigchld);
 
7052
  /* Check (in member sa_mask) that at least a handful of signals are
 
7053
     actually blocked during the signal handler */
 
7054
  for(int signum = 1; signum < NSIG; signum++){
 
7055
    int actual_new_block_state;
 
7056
    switch(signum){
 
7057
    case SIGTERM:
 
7058
    case SIGINT:
 
7059
    case SIGQUIT:
 
7060
    case SIGHUP:
 
7061
      actual_new_block_state
 
7062
        = sigismember(&actual_new_sigchld_action.sa_mask, signum);
 
7063
      g_assert_cmpint(actual_new_block_state, ==, 1);
 
7064
      continue;
 
7065
    case SIGKILL:               /* non-blockable */
 
7066
    case SIGSTOP:               /* non-blockable */
 
7067
    case SIGCHLD:               /* always blocked */
 
7068
    default:
 
7069
      continue;
 
7070
    }
 
7071
  }
 
7072
  /* Check member sa_flags */
 
7073
  g_assert_true((actual_new_sigchld_action.sa_flags
 
7074
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
7075
                == (SA_NOCLDSTOP | SA_RESTART));
 
7076
 
 
7077
  /* Restore signal handler */
 
7078
  g_assert_cmpint(sigaction(SIGCHLD, &expected_sigchld_action, NULL),
 
7079
                  ==, 0);
 
7080
}
 
7081
 
 
7082
static void test_restore_signal_handler(__attribute__((unused))
 
7083
                                        test_fixture *fixture,
 
7084
                                        __attribute__((unused))
 
7085
                                        gconstpointer user_data){
 
7086
  /* Save current SIGCHLD action, whatever it is */
 
7087
  struct sigaction expected_sigchld_action;
 
7088
  g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
 
7089
                  ==, 0);
 
7090
  /* Since we haven't established a signal handler yet, there should
 
7091
     not be one established.  But another test may have relied on
 
7092
     restore_signal_handler() to restore the signal handler, and if
 
7093
     restore_signal_handler() is buggy (which we should be prepared
 
7094
     for in this test) the signal handler may not have been restored
 
7095
     properly; check for this: */
 
7096
  g_assert_true(expected_sigchld_action.sa_handler != handle_sigchld);
 
7097
 
 
7098
  /* Establish a signal handler */
 
7099
  struct sigaction sigchld_action = {
 
7100
    .sa_handler=handle_sigchld,
 
7101
    .sa_flags=SA_RESTART | SA_NOCLDSTOP,
 
7102
  };
 
7103
  g_assert_cmpint(sigfillset(&sigchld_action.sa_mask), ==, 0);
 
7104
  g_assert_cmpint(sigaction(SIGCHLD, &sigchld_action, NULL), ==, 0);
 
7105
 
 
7106
  /* Act; i.e. run the restore_signal_handler() function */
 
7107
  g_assert_true(restore_signal_handler(&expected_sigchld_action));
 
7108
 
 
7109
  /* Retrieve the restored signal handler data */
 
7110
  struct sigaction actual_restored_sigchld_action;
 
7111
  g_assert_cmpint(sigaction(SIGCHLD, NULL,
 
7112
                            &actual_restored_sigchld_action), ==, 0);
 
7113
 
 
7114
  /* Check that the function correctly restored the signal action, as
 
7115
     saved in "actual_restored_sigchld_action", to the same values as
 
7116
     the previously saved "expected_sigchld_action" */
 
7117
  /* Check member sa_handler */
 
7118
  g_assert_true(actual_restored_sigchld_action.sa_handler
 
7119
                == expected_sigchld_action.sa_handler);
 
7120
  /* Check member sa_mask */
 
7121
  for(int signum = 1; signum < NSIG; signum++){
 
7122
    const int expected_old_block_state
 
7123
      = sigismember(&expected_sigchld_action.sa_mask, signum);
 
7124
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
7125
    const int actual_restored_block_state
 
7126
      = sigismember(&actual_restored_sigchld_action.sa_mask, signum);
 
7127
    g_assert_cmpint(actual_restored_block_state, >=, 0);
 
7128
    g_assert_cmpint(actual_restored_block_state,
 
7129
                    ==, expected_old_block_state);
 
7130
  }
 
7131
  /* Check member sa_flags */
 
7132
  g_assert_true((actual_restored_sigchld_action.sa_flags
 
7133
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
 
7134
                == (expected_sigchld_action.sa_flags
 
7135
                    & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
 
7136
}
 
7137
 
 
7138
static void test_block_sigchld(__attribute__((unused))
 
7139
                               test_fixture *fixture,
 
7140
                               __attribute__((unused))
 
7141
                               gconstpointer user_data){
 
7142
  /* Save original signal mask */
 
7143
  sigset_t expected_sigmask;
 
7144
  g_assert_cmpint(pthread_sigmask(-1, NULL, &expected_sigmask),
 
7145
                  ==, 0);
 
7146
 
 
7147
  /* Make sure SIGCHLD is unblocked for this test */
 
7148
  sigset_t sigchld_sigmask;
 
7149
  g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
 
7150
  g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
 
7151
  g_assert_cmpint(pthread_sigmask(SIG_UNBLOCK, &sigchld_sigmask,
 
7152
                                  NULL), ==, 0);
 
7153
 
 
7154
  /* Act; i.e. run the block_sigchld() function */
 
7155
  sigset_t actual_old_sigmask;
 
7156
  g_assert_true(block_sigchld(&actual_old_sigmask));
 
7157
 
 
7158
  /* Check the actual_old_sigmask; it should be the same as the
 
7159
     previously saved signal mask "expected_sigmask". */
 
7160
  for(int signum = 1; signum < NSIG; signum++){
 
7161
    const int expected_old_block_state
 
7162
      = sigismember(&expected_sigmask, signum);
 
7163
    g_assert_cmpint(expected_old_block_state, >=, 0);
 
7164
    const int actual_old_block_state
 
7165
      = sigismember(&actual_old_sigmask, signum);
 
7166
    g_assert_cmpint(actual_old_block_state, >=, 0);
 
7167
    g_assert_cmpint(actual_old_block_state,
 
7168
                    ==, expected_old_block_state);
 
7169
  }
 
7170
 
 
7171
  /* Retrieve the newly set signal mask */
 
7172
  sigset_t actual_sigmask;
 
7173
  g_assert_cmpint(pthread_sigmask(-1, NULL, &actual_sigmask), ==, 0);
 
7174
 
 
7175
  /* SIGCHLD should be blocked */
 
7176
  g_assert_cmpint(sigismember(&actual_sigmask, SIGCHLD), ==, 1);
 
7177
 
 
7178
  /* Restore signal mask */
 
7179
  g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &expected_sigmask,
 
7180
                                  NULL), ==, 0);
 
7181
}
 
7182
 
 
7183
static void test_restore_sigmask(__attribute__((unused))
 
7184
                                 test_fixture *fixture,
 
7185
                                 __attribute__((unused))
 
7186
                                 gconstpointer user_data){
 
7187
  /* Save original signal mask */
 
7188
  sigset_t orig_sigmask;
 
7189
  g_assert_cmpint(pthread_sigmask(-1, NULL, &orig_sigmask), ==, 0);
 
7190
 
 
7191
  /* Make sure SIGCHLD is blocked for this test */
 
7192
  sigset_t sigchld_sigmask;
 
7193
  g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
 
7194
  g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
 
7195
  g_assert_cmpint(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask,
 
7196
                                  NULL), ==, 0);
 
7197
 
 
7198
  /* Act; i.e. run the restore_sigmask() function */
 
7199
  g_assert_true(restore_sigmask(&orig_sigmask));
 
7200
 
 
7201
  /* Retrieve the newly restored signal mask */
 
7202
  sigset_t restored_sigmask;
 
7203
  g_assert_cmpint(pthread_sigmask(-1, NULL, &restored_sigmask),
 
7204
                  ==, 0);
 
7205
 
 
7206
  /* Check the restored_sigmask; it should be the same as the
 
7207
     previously saved signal mask "orig_sigmask". */
 
7208
  for(int signum = 1; signum < NSIG; signum++){
 
7209
    const int orig_block_state = sigismember(&orig_sigmask, signum);
 
7210
    g_assert_cmpint(orig_block_state, >=, 0);
 
7211
    const int restored_block_state = sigismember(&restored_sigmask,
 
7212
                                                 signum);
 
7213
    g_assert_cmpint(restored_block_state, >=, 0);
 
7214
    g_assert_cmpint(restored_block_state, ==, orig_block_state);
 
7215
  }
 
7216
 
 
7217
  /* Restore signal mask */
 
7218
  g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &orig_sigmask,
 
7219
                                  NULL), ==, 0);
 
7220
}
 
7221
 
 
7222
static void test_parse_arguments_noargs(__attribute__((unused))
 
7223
                                        test_fixture *fixture,
 
7224
                                        __attribute__((unused))
 
7225
                                        gconstpointer user_data){
 
7226
  char *argv[] = {
 
7227
    strdup("prgname"),
 
7228
    NULL };
 
7229
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7230
 
 
7231
  char *agent_directory = NULL;
 
7232
  char *helper_directory = NULL;
 
7233
  uid_t user = 0;
 
7234
  gid_t group = 0;
 
7235
  char *mandos_argz = NULL;
 
7236
  size_t mandos_argz_length = 0;
 
7237
 
 
7238
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7239
                                &helper_directory, &user, &group,
 
7240
                                &mandos_argz, &mandos_argz_length));
 
7241
  g_assert_null(agent_directory);
 
7242
  g_assert_null(helper_directory);
 
7243
  g_assert_true(user == 0);
 
7244
  g_assert_true(group == 0);
 
7245
  g_assert_null(mandos_argz);
 
7246
  g_assert_true(mandos_argz_length == 0);
 
7247
 
 
7248
  for(char **arg = argv; *arg != NULL; arg++){
 
7249
    free(*arg);
 
7250
  }
 
7251
}
 
7252
 
 
7253
__attribute__((nonnull))
 
7254
static bool parse_arguments_devnull(int argc, char *argv[],
 
7255
                                    const bool exit_failure,
 
7256
                                    char **agent_directory,
 
7257
                                    char **helper_directory,
 
7258
                                    uid_t *const user,
 
7259
                                    gid_t *const group,
 
7260
                                    char **mandos_argz,
 
7261
                                    size_t *mandos_argz_length){
 
7262
 
 
7263
  FILE *real_stderr = stderr;
 
7264
  FILE *devnull = fopen("/dev/null", "we");
 
7265
  g_assert_nonnull(devnull);
 
7266
  stderr = devnull;
 
7267
 
 
7268
  const bool ret = parse_arguments(argc, argv, exit_failure,
 
7269
                                   agent_directory,
 
7270
                                   helper_directory, user, group,
 
7271
                                   mandos_argz, mandos_argz_length);
 
7272
  const error_t saved_errno = errno;
 
7273
 
 
7274
  stderr = real_stderr;
 
7275
  g_assert_cmpint(fclose(devnull), ==, 0);
 
7276
 
 
7277
  errno = saved_errno;
 
7278
 
 
7279
  return ret;
 
7280
}
 
7281
 
 
7282
static void test_parse_arguments_invalid(__attribute__((unused))
 
7283
                                         test_fixture *fixture,
 
7284
                                         __attribute__((unused))
 
7285
                                         gconstpointer user_data){
 
7286
  char *argv[] = {
 
7287
    strdup("prgname"),
 
7288
    strdup("--invalid"),
 
7289
    NULL };
 
7290
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7291
 
 
7292
  char *agent_directory = NULL;
 
7293
  char *helper_directory = NULL;
 
7294
  uid_t user = 0;
 
7295
  gid_t group = 0;
 
7296
  char *mandos_argz = NULL;
 
7297
  size_t mandos_argz_length = 0;
 
7298
 
 
7299
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7300
                                         &agent_directory,
 
7301
                                         &helper_directory, &user,
 
7302
                                         &group, &mandos_argz,
 
7303
                                         &mandos_argz_length));
 
7304
 
 
7305
  g_assert_true(errno == EINVAL);
 
7306
  g_assert_null(agent_directory);
 
7307
  g_assert_null(helper_directory);
 
7308
  g_assert_null(mandos_argz);
 
7309
  g_assert_true(mandos_argz_length == 0);
 
7310
 
 
7311
  for(char **arg = argv; *arg != NULL; arg++){
 
7312
    free(*arg);
 
7313
  }
 
7314
}
 
7315
 
 
7316
static void test_parse_arguments_long_dir(__attribute__((unused))
 
7317
                                          test_fixture *fixture,
 
7318
                                          __attribute__((unused))
 
7319
                                          gconstpointer user_data){
 
7320
  char *argv[] = {
 
7321
    strdup("prgname"),
 
7322
    strdup("--agent-directory"),
 
7323
    strdup("/tmp"),
 
7324
    NULL };
 
7325
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7326
 
 
7327
  __attribute__((cleanup(cleanup_string)))
 
7328
    char *agent_directory = NULL;
 
7329
  char *helper_directory = NULL;
 
7330
  uid_t user = 0;
 
7331
  gid_t group = 0;
 
7332
  __attribute__((cleanup(cleanup_string)))
 
7333
    char *mandos_argz = NULL;
 
7334
  size_t mandos_argz_length = 0;
 
7335
 
 
7336
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7337
                                &helper_directory, &user, &group,
 
7338
                                &mandos_argz, &mandos_argz_length));
 
7339
 
 
7340
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7341
  g_assert_null(helper_directory);
 
7342
  g_assert_true(user == 0);
 
7343
  g_assert_true(group == 0);
 
7344
  g_assert_null(mandos_argz);
 
7345
  g_assert_true(mandos_argz_length == 0);
 
7346
 
 
7347
  for(char **arg = argv; *arg != NULL; arg++){
 
7348
    free(*arg);
 
7349
  }
 
7350
}
 
7351
 
 
7352
static void test_parse_arguments_short_dir(__attribute__((unused))
 
7353
                                           test_fixture *fixture,
 
7354
                                           __attribute__((unused))
 
7355
                                           gconstpointer user_data){
 
7356
  char *argv[] = {
 
7357
    strdup("prgname"),
 
7358
    strdup("-d"),
 
7359
    strdup("/tmp"),
 
7360
    NULL };
 
7361
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7362
 
 
7363
  __attribute__((cleanup(cleanup_string)))
 
7364
    char *agent_directory = NULL;
 
7365
  char *helper_directory = NULL;
 
7366
  uid_t user = 0;
 
7367
  gid_t group = 0;
 
7368
  __attribute__((cleanup(cleanup_string)))
 
7369
    char *mandos_argz = NULL;
 
7370
  size_t mandos_argz_length = 0;
 
7371
 
 
7372
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7373
                                &helper_directory, &user, &group,
 
7374
                                &mandos_argz, &mandos_argz_length));
 
7375
 
 
7376
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7377
  g_assert_null(helper_directory);
 
7378
  g_assert_true(user == 0);
 
7379
  g_assert_true(group == 0);
 
7380
  g_assert_null(mandos_argz);
 
7381
  g_assert_true(mandos_argz_length == 0);
 
7382
 
 
7383
  for(char **arg = argv; *arg != NULL; arg++){
 
7384
    free(*arg);
 
7385
  }
 
7386
}
 
7387
 
 
7388
static
 
7389
void test_parse_arguments_helper_directory(__attribute__((unused))
 
7390
                                           test_fixture *fixture,
 
7391
                                           __attribute__((unused))
 
7392
                                           gconstpointer user_data){
 
7393
  char *argv[] = {
 
7394
    strdup("prgname"),
 
7395
    strdup("--helper-directory"),
 
7396
    strdup("/tmp"),
 
7397
    NULL };
 
7398
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7399
 
 
7400
  char *agent_directory = NULL;
 
7401
  __attribute__((cleanup(cleanup_string)))
 
7402
    char *helper_directory = NULL;
 
7403
  uid_t user = 0;
 
7404
  gid_t group = 0;
 
7405
  __attribute__((cleanup(cleanup_string)))
 
7406
    char *mandos_argz = NULL;
 
7407
  size_t mandos_argz_length = 0;
 
7408
 
 
7409
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7410
                                &helper_directory, &user, &group,
 
7411
                                &mandos_argz, &mandos_argz_length));
 
7412
 
 
7413
  g_assert_cmpstr(helper_directory, ==, "/tmp");
 
7414
  g_assert_null(agent_directory);
 
7415
  g_assert_true(user == 0);
 
7416
  g_assert_true(group == 0);
 
7417
  g_assert_null(mandos_argz);
 
7418
  g_assert_true(mandos_argz_length == 0);
 
7419
 
 
7420
  for(char **arg = argv; *arg != NULL; arg++){
 
7421
    free(*arg);
 
7422
  }
 
7423
}
 
7424
 
 
7425
static
 
7426
void test_parse_arguments_plugin_helper_dir(__attribute__((unused))
 
7427
                                            test_fixture *fixture,
 
7428
                                            __attribute__((unused))
 
7429
                                            gconstpointer user_data){
 
7430
  char *argv[] = {
 
7431
    strdup("prgname"),
 
7432
    strdup("--plugin-helper-dir"),
 
7433
    strdup("/tmp"),
 
7434
    NULL };
 
7435
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7436
 
 
7437
  char *agent_directory = NULL;
 
7438
  __attribute__((cleanup(cleanup_string)))
 
7439
    char *helper_directory = NULL;
 
7440
  uid_t user = 0;
 
7441
  gid_t group = 0;
 
7442
  __attribute__((cleanup(cleanup_string)))
 
7443
    char *mandos_argz = NULL;
 
7444
  size_t mandos_argz_length = 0;
 
7445
 
 
7446
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7447
                                &helper_directory, &user, &group,
 
7448
                                &mandos_argz, &mandos_argz_length));
 
7449
 
 
7450
  g_assert_cmpstr(helper_directory, ==, "/tmp");
 
7451
  g_assert_null(agent_directory);
 
7452
  g_assert_true(user == 0);
 
7453
  g_assert_true(group == 0);
 
7454
  g_assert_null(mandos_argz);
 
7455
  g_assert_true(mandos_argz_length == 0);
 
7456
 
 
7457
  for(char **arg = argv; *arg != NULL; arg++){
 
7458
    free(*arg);
 
7459
  }
 
7460
}
 
7461
 
 
7462
static void test_parse_arguments_user(__attribute__((unused))
 
7463
                                      test_fixture *fixture,
 
7464
                                      __attribute__((unused))
 
7465
                                      gconstpointer user_data){
 
7466
  char *argv[] = {
 
7467
    strdup("prgname"),
 
7468
    strdup("--user"),
 
7469
    strdup("1000"),
 
7470
    NULL };
 
7471
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7472
 
 
7473
  char *agent_directory = NULL;
 
7474
  __attribute__((cleanup(cleanup_string)))
 
7475
    char *helper_directory = NULL;
 
7476
  uid_t user = 0;
 
7477
  gid_t group = 0;
 
7478
  __attribute__((cleanup(cleanup_string)))
 
7479
    char *mandos_argz = NULL;
 
7480
  size_t mandos_argz_length = 0;
 
7481
 
 
7482
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7483
                                &helper_directory, &user, &group,
 
7484
                                &mandos_argz, &mandos_argz_length));
 
7485
 
 
7486
  g_assert_null(helper_directory);
 
7487
  g_assert_null(agent_directory);
 
7488
  g_assert_cmpuint((unsigned int)user, ==, 1000);
 
7489
  g_assert_true(group == 0);
 
7490
  g_assert_null(mandos_argz);
 
7491
  g_assert_true(mandos_argz_length == 0);
 
7492
 
 
7493
  for(char **arg = argv; *arg != NULL; arg++){
 
7494
    free(*arg);
 
7495
  }
 
7496
}
 
7497
 
 
7498
static void test_parse_arguments_user_invalid(__attribute__((unused))
 
7499
                                              test_fixture *fixture,
 
7500
                                              __attribute__((unused))
 
7501
                                              gconstpointer
 
7502
                                              user_data){
 
7503
  char *argv[] = {
 
7504
    strdup("prgname"),
 
7505
    strdup("--user"),
 
7506
    strdup("invalid"),
 
7507
    NULL };
 
7508
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7509
 
 
7510
  char *agent_directory = NULL;
 
7511
  __attribute__((cleanup(cleanup_string)))
 
7512
    char *helper_directory = NULL;
 
7513
  uid_t user = 0;
 
7514
  gid_t group = 0;
 
7515
  __attribute__((cleanup(cleanup_string)))
 
7516
    char *mandos_argz = NULL;
 
7517
  size_t mandos_argz_length = 0;
 
7518
 
 
7519
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7520
                                         &agent_directory,
 
7521
                                         &helper_directory, &user,
 
7522
                                         &group, &mandos_argz,
 
7523
                                         &mandos_argz_length));
 
7524
 
 
7525
  g_assert_null(helper_directory);
 
7526
  g_assert_null(agent_directory);
 
7527
  g_assert_cmpuint((unsigned int)user, ==, 0);
 
7528
  g_assert_true(group == 0);
 
7529
  g_assert_null(mandos_argz);
 
7530
  g_assert_true(mandos_argz_length == 0);
 
7531
 
 
7532
  for(char **arg = argv; *arg != NULL; arg++){
 
7533
    free(*arg);
 
7534
  }
 
7535
}
 
7536
 
 
7537
static
 
7538
void test_parse_arguments_user_zero_invalid(__attribute__((unused))
 
7539
                                            test_fixture *fixture,
 
7540
                                            __attribute__((unused))
 
7541
                                            gconstpointer user_data){
 
7542
  char *argv[] = {
 
7543
    strdup("prgname"),
 
7544
    strdup("--user"),
 
7545
    strdup("0"),
 
7546
    NULL };
 
7547
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7548
 
 
7549
  char *agent_directory = NULL;
 
7550
  __attribute__((cleanup(cleanup_string)))
 
7551
    char *helper_directory = NULL;
 
7552
  uid_t user = 0;
 
7553
  gid_t group = 0;
 
7554
  __attribute__((cleanup(cleanup_string)))
 
7555
    char *mandos_argz = NULL;
 
7556
  size_t mandos_argz_length = 0;
 
7557
 
 
7558
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7559
                                         &agent_directory,
 
7560
                                         &helper_directory, &user,
 
7561
                                         &group, &mandos_argz,
 
7562
                                         &mandos_argz_length));
 
7563
 
 
7564
  g_assert_null(helper_directory);
 
7565
  g_assert_null(agent_directory);
 
7566
  g_assert_cmpuint((unsigned int)user, ==, 0);
 
7567
  g_assert_true(group == 0);
 
7568
  g_assert_null(mandos_argz);
 
7569
  g_assert_true(mandos_argz_length == 0);
 
7570
 
 
7571
  for(char **arg = argv; *arg != NULL; arg++){
 
7572
    free(*arg);
 
7573
  }
 
7574
}
 
7575
 
 
7576
static void test_parse_arguments_group(__attribute__((unused))
 
7577
                                       test_fixture *fixture,
 
7578
                                       __attribute__((unused))
 
7579
                                       gconstpointer user_data){
 
7580
  char *argv[] = {
 
7581
    strdup("prgname"),
 
7582
    strdup("--group"),
 
7583
    strdup("1000"),
 
7584
    NULL };
 
7585
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7586
 
 
7587
  char *agent_directory = NULL;
 
7588
  __attribute__((cleanup(cleanup_string)))
 
7589
    char *helper_directory = NULL;
 
7590
  uid_t user = 0;
 
7591
  gid_t group = 0;
 
7592
  __attribute__((cleanup(cleanup_string)))
 
7593
    char *mandos_argz = NULL;
 
7594
  size_t mandos_argz_length = 0;
 
7595
 
 
7596
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7597
                                &helper_directory, &user, &group,
 
7598
                                &mandos_argz, &mandos_argz_length));
 
7599
 
 
7600
  g_assert_null(helper_directory);
 
7601
  g_assert_null(agent_directory);
 
7602
  g_assert_true(user == 0);
 
7603
  g_assert_cmpuint((unsigned int)group, ==, 1000);
 
7604
  g_assert_null(mandos_argz);
 
7605
  g_assert_true(mandos_argz_length == 0);
 
7606
 
 
7607
  for(char **arg = argv; *arg != NULL; arg++){
 
7608
    free(*arg);
 
7609
  }
 
7610
}
 
7611
 
 
7612
static void test_parse_arguments_group_invalid(__attribute__((unused))
 
7613
                                               test_fixture *fixture,
 
7614
                                               __attribute__((unused))
 
7615
                                               gconstpointer
 
7616
                                               user_data){
 
7617
  char *argv[] = {
 
7618
    strdup("prgname"),
 
7619
    strdup("--group"),
 
7620
    strdup("invalid"),
 
7621
    NULL };
 
7622
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7623
 
 
7624
  char *agent_directory = NULL;
 
7625
  __attribute__((cleanup(cleanup_string)))
 
7626
    char *helper_directory = NULL;
 
7627
  uid_t user = 0;
 
7628
  gid_t group = 0;
 
7629
  __attribute__((cleanup(cleanup_string)))
 
7630
    char *mandos_argz = NULL;
 
7631
  size_t mandos_argz_length = 0;
 
7632
 
 
7633
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7634
                                         &agent_directory,
 
7635
                                         &helper_directory, &user,
 
7636
                                         &group, &mandos_argz,
 
7637
                                         &mandos_argz_length));
 
7638
 
 
7639
  g_assert_null(helper_directory);
 
7640
  g_assert_null(agent_directory);
 
7641
  g_assert_true(user == 0);
 
7642
  g_assert_true(group == 0);
 
7643
  g_assert_null(mandos_argz);
 
7644
  g_assert_true(mandos_argz_length == 0);
 
7645
 
 
7646
  for(char **arg = argv; *arg != NULL; arg++){
 
7647
    free(*arg);
 
7648
  }
 
7649
}
 
7650
 
 
7651
static
 
7652
void test_parse_arguments_group_zero_invalid(__attribute__((unused))
 
7653
                                             test_fixture *fixture,
 
7654
                                             __attribute__((unused))
 
7655
                                             gconstpointer user_data){
 
7656
  char *argv[] = {
 
7657
    strdup("prgname"),
 
7658
    strdup("--group"),
 
7659
    strdup("0"),
 
7660
    NULL };
 
7661
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7662
 
 
7663
  char *agent_directory = NULL;
 
7664
  __attribute__((cleanup(cleanup_string)))
 
7665
    char *helper_directory = NULL;
 
7666
  uid_t user = 0;
 
7667
  gid_t group = 0;
 
7668
  __attribute__((cleanup(cleanup_string)))
 
7669
    char *mandos_argz = NULL;
 
7670
  size_t mandos_argz_length = 0;
 
7671
 
 
7672
  g_assert_false(parse_arguments_devnull(argc, argv, false,
 
7673
                                         &agent_directory,
 
7674
                                         &helper_directory, &user,
 
7675
                                         &group, &mandos_argz,
 
7676
                                         &mandos_argz_length));
 
7677
 
 
7678
  g_assert_null(helper_directory);
 
7679
  g_assert_null(agent_directory);
 
7680
  g_assert_cmpuint((unsigned int)group, ==, 0);
 
7681
  g_assert_true(group == 0);
 
7682
  g_assert_null(mandos_argz);
 
7683
  g_assert_true(mandos_argz_length == 0);
 
7684
 
 
7685
  for(char **arg = argv; *arg != NULL; arg++){
 
7686
    free(*arg);
 
7687
  }
 
7688
}
 
7689
 
 
7690
static void test_parse_arguments_mandos_noargs(__attribute__((unused))
 
7691
                                               test_fixture *fixture,
 
7692
                                               __attribute__((unused))
 
7693
                                               gconstpointer
 
7694
                                               user_data){
 
7695
  char *argv[] = {
 
7696
    strdup("prgname"),
 
7697
    strdup("mandos-client"),
 
7698
    NULL };
 
7699
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7700
 
 
7701
  __attribute__((cleanup(cleanup_string)))
 
7702
    char *agent_directory = NULL;
 
7703
  __attribute__((cleanup(cleanup_string)))
 
7704
    char *helper_directory = NULL;
 
7705
  uid_t user = 0;
 
7706
  gid_t group = 0;
 
7707
  __attribute__((cleanup(cleanup_string)))
 
7708
    char *mandos_argz = NULL;
 
7709
  size_t mandos_argz_length = 0;
 
7710
 
 
7711
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7712
                                &helper_directory, &user, &group,
 
7713
                                &mandos_argz, &mandos_argz_length));
 
7714
 
 
7715
  g_assert_null(agent_directory);
 
7716
  g_assert_null(helper_directory);
 
7717
  g_assert_true(user == 0);
 
7718
  g_assert_true(group == 0);
 
7719
  g_assert_cmpstr(mandos_argz, ==, "mandos-client");
 
7720
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7721
                                            mandos_argz_length),
 
7722
                   ==, 1);
 
7723
 
 
7724
  for(char **arg = argv; *arg != NULL; arg++){
 
7725
    free(*arg);
 
7726
  }
 
7727
}
 
7728
 
 
7729
static void test_parse_arguments_mandos_args(__attribute__((unused))
 
7730
                                             test_fixture *fixture,
 
7731
                                             __attribute__((unused))
 
7732
                                             gconstpointer user_data){
 
7733
  char *argv[] = {
 
7734
    strdup("prgname"),
 
7735
    strdup("mandos-client"),
 
7736
    strdup("one"),
 
7737
    strdup("two"),
 
7738
    strdup("three"),
 
7739
    NULL };
 
7740
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7741
 
 
7742
  __attribute__((cleanup(cleanup_string)))
 
7743
    char *agent_directory = NULL;
 
7744
  __attribute__((cleanup(cleanup_string)))
 
7745
    char *helper_directory = NULL;
 
7746
  uid_t user = 0;
 
7747
  gid_t group = 0;
 
7748
  __attribute__((cleanup(cleanup_string)))
 
7749
    char *mandos_argz = NULL;
 
7750
  size_t mandos_argz_length = 0;
 
7751
 
 
7752
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7753
                                &helper_directory, &user, &group,
 
7754
                                &mandos_argz, &mandos_argz_length));
 
7755
 
 
7756
  g_assert_null(agent_directory);
 
7757
  g_assert_null(helper_directory);
 
7758
  g_assert_true(user == 0);
 
7759
  g_assert_true(group == 0);
 
7760
  char *marg = mandos_argz;
 
7761
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7762
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7763
  g_assert_cmpstr(marg, ==, "one");
 
7764
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7765
  g_assert_cmpstr(marg, ==, "two");
 
7766
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7767
  g_assert_cmpstr(marg, ==, "three");
 
7768
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7769
                                            mandos_argz_length),
 
7770
                   ==, 4);
 
7771
 
 
7772
  for(char **arg = argv; *arg != NULL; arg++){
 
7773
    free(*arg);
 
7774
  }
 
7775
}
 
7776
 
 
7777
static void test_parse_arguments_all_args(__attribute__((unused))
 
7778
                                          test_fixture *fixture,
 
7779
                                          __attribute__((unused))
 
7780
                                          gconstpointer user_data){
 
7781
  char *argv[] = {
 
7782
    strdup("prgname"),
 
7783
    strdup("--agent-directory"),
 
7784
    strdup("/tmp"),
 
7785
    strdup("--helper-directory"),
 
7786
    strdup("/var/tmp"),
 
7787
    strdup("--user"),
 
7788
    strdup("1"),
 
7789
    strdup("--group"),
 
7790
    strdup("2"),
 
7791
    strdup("mandos-client"),
 
7792
    strdup("one"),
 
7793
    strdup("two"),
 
7794
    strdup("three"),
 
7795
    NULL };
 
7796
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7797
 
 
7798
  __attribute__((cleanup(cleanup_string)))
 
7799
    char *agent_directory = NULL;
 
7800
  __attribute__((cleanup(cleanup_string)))
 
7801
    char *helper_directory = NULL;
 
7802
  uid_t user = 0;
 
7803
  gid_t group = 0;
 
7804
  __attribute__((cleanup(cleanup_string)))
 
7805
    char *mandos_argz = NULL;
 
7806
  size_t mandos_argz_length = 0;
 
7807
 
 
7808
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7809
                                &helper_directory, &user, &group,
 
7810
                                &mandos_argz, &mandos_argz_length));
 
7811
 
 
7812
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7813
  g_assert_cmpstr(helper_directory, ==, "/var/tmp");
 
7814
  g_assert_true(user == 1);
 
7815
  g_assert_true(group == 2);
 
7816
  char *marg = mandos_argz;
 
7817
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7818
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7819
  g_assert_cmpstr(marg, ==, "one");
 
7820
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7821
  g_assert_cmpstr(marg, ==, "two");
 
7822
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7823
  g_assert_cmpstr(marg, ==, "three");
 
7824
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7825
                                            mandos_argz_length),
 
7826
                   ==, 4);
 
7827
 
 
7828
  for(char **arg = argv; *arg != NULL; arg++){
 
7829
    free(*arg);
 
7830
  }
 
7831
}
 
7832
 
 
7833
static void test_parse_arguments_mixed(__attribute__((unused))
 
7834
                                       test_fixture *fixture,
 
7835
                                       __attribute__((unused))
 
7836
                                       gconstpointer user_data){
 
7837
  char *argv[] = {
 
7838
    strdup("prgname"),
 
7839
    strdup("mandos-client"),
 
7840
    strdup("--user"),
 
7841
    strdup("1"),
 
7842
    strdup("one"),
 
7843
    strdup("--agent-directory"),
 
7844
    strdup("/tmp"),
 
7845
    strdup("two"),
 
7846
    strdup("three"),
 
7847
    strdup("--helper-directory=/var/tmp"),
 
7848
    NULL };
 
7849
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
 
7850
 
 
7851
  __attribute__((cleanup(cleanup_string)))
 
7852
    char *agent_directory = NULL;
 
7853
  __attribute__((cleanup(cleanup_string)))
 
7854
    char *helper_directory = NULL;
 
7855
  uid_t user = 0;
 
7856
  gid_t group = 0;
 
7857
  __attribute__((cleanup(cleanup_string)))
 
7858
    char *mandos_argz = NULL;
 
7859
  size_t mandos_argz_length = 0;
 
7860
 
 
7861
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
 
7862
                                &helper_directory, &user, &group,
 
7863
                                &mandos_argz, &mandos_argz_length));
 
7864
 
 
7865
  g_assert_cmpstr(agent_directory, ==, "/tmp");
 
7866
  g_assert_cmpstr(helper_directory, ==, "/var/tmp");
 
7867
  g_assert_true(user == 1);
 
7868
  g_assert_true(group == 0);
 
7869
  char *marg = mandos_argz;
 
7870
  g_assert_cmpstr(marg, ==, "mandos-client");
 
7871
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7872
  g_assert_cmpstr(marg, ==, "one");
 
7873
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7874
  g_assert_cmpstr(marg, ==, "two");
 
7875
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
 
7876
  g_assert_cmpstr(marg, ==, "three");
 
7877
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
 
7878
                                            mandos_argz_length),
 
7879
                   ==, 4);
 
7880
 
 
7881
  for(char **arg = argv; *arg != NULL; arg++){
 
7882
    free(*arg);
 
7883
  }
 
7884
}
 
7885
 
 
7886
/* End of tests section */
 
7887
 
 
7888
/* Test boilerplate section; New tests should be added to the test
 
7889
   suite definition here, in the "run_tests" function.
 
7890
 
 
7891
   Finally, this section also contains the should_only_run_tests()
 
7892
   function used by main() for deciding if tests should be run or to
 
7893
   start normally. */
 
7894
 
 
7895
__attribute__((cold))
 
7896
static bool run_tests(int argc, char *argv[]){
 
7897
  g_test_init(&argc, &argv, NULL);
 
7898
 
 
7899
  /* A macro to add a test with no setup or teardown functions */
 
7900
#define test_add(testpath, testfunc)                    \
 
7901
  do {                                                  \
 
7902
    g_test_add((testpath), test_fixture, NULL, NULL,    \
 
7903
               (testfunc), NULL);                       \
 
7904
  } while(false)
 
7905
 
 
7906
  /* Test the signal-related functions first, since some other tests
 
7907
     depend on these functions in their setups and teardowns */
 
7908
  test_add("/signal-handling/setup", test_setup_signal_handler);
 
7909
  test_add("/signal-handling/restore", test_restore_signal_handler);
 
7910
  test_add("/signal-handling/block", test_block_sigchld);
 
7911
  test_add("/signal-handling/restore-sigmask", test_restore_sigmask);
 
7912
 
 
7913
  /* Regular non-signal-related tests; these use no setups or
 
7914
     teardowns */
 
7915
  test_add("/parse_arguments/noargs", test_parse_arguments_noargs);
 
7916
  test_add("/parse_arguments/invalid", test_parse_arguments_invalid);
 
7917
  test_add("/parse_arguments/long-dir",
 
7918
           test_parse_arguments_long_dir);
 
7919
  test_add("/parse_arguments/short-dir",
 
7920
           test_parse_arguments_short_dir);
 
7921
  test_add("/parse_arguments/helper-directory",
 
7922
           test_parse_arguments_helper_directory);
 
7923
  test_add("/parse_arguments/plugin-helper-dir",
 
7924
           test_parse_arguments_plugin_helper_dir);
 
7925
  test_add("/parse_arguments/user", test_parse_arguments_user);
 
7926
  test_add("/parse_arguments/user-invalid",
 
7927
           test_parse_arguments_user_invalid);
 
7928
  test_add("/parse_arguments/user-zero-invalid",
 
7929
           test_parse_arguments_user_zero_invalid);
 
7930
  test_add("/parse_arguments/group", test_parse_arguments_group);
 
7931
  test_add("/parse_arguments/group-invalid",
 
7932
           test_parse_arguments_group_invalid);
 
7933
  test_add("/parse_arguments/group-zero-invalid",
 
7934
           test_parse_arguments_group_zero_invalid);
 
7935
  test_add("/parse_arguments/mandos-noargs",
 
7936
           test_parse_arguments_mandos_noargs);
 
7937
  test_add("/parse_arguments/mandos-args",
 
7938
           test_parse_arguments_mandos_args);
 
7939
  test_add("/parse_arguments/all-args",
 
7940
           test_parse_arguments_all_args);
 
7941
  test_add("/parse_arguments/mixed", test_parse_arguments_mixed);
 
7942
  test_add("/queue/create", test_create_queue);
 
7943
  test_add("/queue/add", test_add_to_queue);
 
7944
  test_add("/queue/add/overflow", test_add_to_queue_overflow);
 
7945
  test_add("/queue/has_question/empty",
 
7946
           test_queue_has_question_empty);
 
7947
  test_add("/queue/has_question/false",
 
7948
           test_queue_has_question_false);
 
7949
  test_add("/queue/has_question/true", test_queue_has_question_true);
 
7950
  test_add("/queue/has_question/false2",
 
7951
           test_queue_has_question_false2);
 
7952
  test_add("/queue/has_question/true2",
 
7953
           test_queue_has_question_true2);
 
7954
  test_add("/buffer/cleanup", test_cleanup_buffer);
 
7955
  test_add("/string_set/net-set-contains-nothing",
 
7956
           test_string_set_new_set_contains_nothing);
 
7957
  test_add("/string_set/with-added-string-contains-it",
 
7958
           test_string_set_with_added_string_contains_it);
 
7959
  test_add("/string_set/cleared-does-not-contain-string",
 
7960
           test_string_set_cleared_does_not_contain_str);
 
7961
  test_add("/string_set/swap/one-with-empty",
 
7962
           test_string_set_swap_one_with_empty);
 
7963
  test_add("/string_set/swap/empty-with-one",
 
7964
           test_string_set_swap_empty_with_one);
 
7965
  test_add("/string_set/swap/one-with-one",
 
7966
           test_string_set_swap_one_with_one);
 
7967
 
 
7968
  /* A macro to add a test using the setup and teardown functions */
 
7969
#define test_add_st(path, func)                                 \
 
7970
  do {                                                          \
 
7971
    g_test_add((path), test_fixture, NULL, test_setup, (func),  \
 
7972
               test_teardown);                                  \
 
7973
  } while(false)
 
7974
 
 
7975
  /* Signal-related tests; these use setups and teardowns which
 
7976
     establish, during each test run, a signal handler for, and a
 
7977
     signal mask blocking, the SIGCHLD signal, just like main() */
 
7978
  test_add_st("/wait_for_event/timeout", test_wait_for_event_timeout);
 
7979
  test_add_st("/wait_for_event/event", test_wait_for_event_event);
 
7980
  test_add_st("/wait_for_event/sigchld", test_wait_for_event_sigchld);
 
7981
  test_add_st("/run_queue/zeroes-next-run",
 
7982
              test_run_queue_zeroes_next_run);
 
7983
  test_add_st("/run_queue/clears-cancelled_filenames",
 
7984
              test_run_queue_clears_cancelled_filenames);
 
7985
  test_add_st("/run_queue/skips-cancelled-filenames",
 
7986
              test_run_queue_skips_cancelled_filenames);
 
7987
  test_add_st("/run_queue/one-task", test_run_queue_one_task);
 
7988
  test_add_st("/run_queue/two-tasks", test_run_queue_two_tasks);
 
7989
  test_add_st("/run_queue/two-tasks/quit",
 
7990
              test_run_queue_two_tasks_quit);
 
7991
  test_add_st("/run_queue/two-tasks-cleanup",
 
7992
              test_run_queue_two_tasks_cleanup);
 
7993
  test_add_st("/task-creators/start_mandos_client",
 
7994
              test_start_mandos_client);
 
7995
  test_add_st("/task-creators/start_mandos_client/execv",
 
7996
              test_start_mandos_client_execv);
 
7997
  test_add_st("/task-creators/start_mandos_client/suid/euid",
 
7998
              test_start_mandos_client_suid_euid);
 
7999
  test_add_st("/task-creators/start_mandos_client/suid/egid",
 
8000
              test_start_mandos_client_suid_egid);
 
8001
  test_add_st("/task-creators/start_mandos_client/suid/ruid",
 
8002
              test_start_mandos_client_suid_ruid);
 
8003
  test_add_st("/task-creators/start_mandos_client/suid/rgid",
 
8004
              test_start_mandos_client_suid_rgid);
 
8005
  test_add_st("/task-creators/start_mandos_client/read",
 
8006
              test_start_mandos_client_read);
 
8007
  test_add_st("/task-creators/start_mandos_client/helper-directory",
 
8008
              test_start_mandos_client_helper_directory);
 
8009
  test_add_st("/task-creators/start_mandos_client/sigmask",
 
8010
              test_start_mandos_client_sigmask);
 
8011
  test_add_st("/task/wait_for_mandos_client_exit/badpid",
 
8012
              test_wait_for_mandos_client_exit_badpid);
 
8013
  test_add_st("/task/wait_for_mandos_client_exit/noexit",
 
8014
              test_wait_for_mandos_client_exit_noexit);
 
8015
  test_add_st("/task/wait_for_mandos_client_exit/success",
 
8016
              test_wait_for_mandos_client_exit_success);
 
8017
  test_add_st("/task/wait_for_mandos_client_exit/failure",
 
8018
              test_wait_for_mandos_client_exit_failure);
 
8019
  test_add_st("/task/wait_for_mandos_client_exit/killed",
 
8020
              test_wait_for_mandos_client_exit_killed);
 
8021
  test_add_st("/task/read_mandos_client_output/readerror",
 
8022
              test_read_mandos_client_output_readerror);
 
8023
  test_add_st("/task/read_mandos_client_output/nodata",
 
8024
              test_read_mandos_client_output_nodata);
 
8025
  test_add_st("/task/read_mandos_client_output/eof",
 
8026
              test_read_mandos_client_output_eof);
 
8027
  test_add_st("/task/read_mandos_client_output/once",
 
8028
              test_read_mandos_client_output_once);
 
8029
  test_add_st("/task/read_mandos_client_output/malloc",
 
8030
              test_read_mandos_client_output_malloc);
 
8031
  test_add_st("/task/read_mandos_client_output/append",
 
8032
              test_read_mandos_client_output_append);
 
8033
  test_add_st("/task-creators/add_inotify_dir_watch",
 
8034
              test_add_inotify_dir_watch);
 
8035
  test_add_st("/task-creators/add_inotify_dir_watch/fail",
 
8036
              test_add_inotify_dir_watch_fail);
 
8037
  test_add_st("/task-creators/add_inotify_dir_watch/not-a-directory",
 
8038
              test_add_inotify_dir_watch_nondir);
 
8039
  test_add_st("/task-creators/add_inotify_dir_watch/EAGAIN",
 
8040
              test_add_inotify_dir_watch_EAGAIN);
 
8041
  test_add_st("/task-creators/add_inotify_dir_watch/IN_CLOSE_WRITE",
 
8042
              test_add_inotify_dir_watch_IN_CLOSE_WRITE);
 
8043
  test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_TO",
 
8044
              test_add_inotify_dir_watch_IN_MOVED_TO);
 
8045
  test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_FROM",
 
8046
              test_add_inotify_dir_watch_IN_MOVED_FROM);
 
8047
  test_add_st("/task-creators/add_inotify_dir_watch/IN_EXCL_UNLINK",
 
8048
              test_add_inotify_dir_watch_IN_EXCL_UNLINK);
 
8049
  test_add_st("/task-creators/add_inotify_dir_watch/IN_DELETE",
 
8050
              test_add_inotify_dir_watch_IN_DELETE);
 
8051
  test_add_st("/task/read_inotify_event/readerror",
 
8052
              test_read_inotify_event_readerror);
 
8053
  test_add_st("/task/read_inotify_event/bad-epoll",
 
8054
              test_read_inotify_event_bad_epoll);
 
8055
  test_add_st("/task/read_inotify_event/nodata",
 
8056
              test_read_inotify_event_nodata);
 
8057
  test_add_st("/task/read_inotify_event/eof",
 
8058
              test_read_inotify_event_eof);
 
8059
  test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE",
 
8060
              test_read_inotify_event_IN_CLOSE_WRITE);
 
8061
  test_add_st("/task/read_inotify_event/IN_MOVED_TO",
 
8062
              test_read_inotify_event_IN_MOVED_TO);
 
8063
  test_add_st("/task/read_inotify_event/IN_MOVED_FROM",
 
8064
              test_read_inotify_event_IN_MOVED_FROM);
 
8065
  test_add_st("/task/read_inotify_event/IN_DELETE",
 
8066
              test_read_inotify_event_IN_DELETE);
 
8067
  test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE/badname",
 
8068
              test_read_inotify_event_IN_CLOSE_WRITE_badname);
 
8069
  test_add_st("/task/read_inotify_event/IN_MOVED_TO/badname",
 
8070
              test_read_inotify_event_IN_MOVED_TO_badname);
 
8071
  test_add_st("/task/read_inotify_event/IN_MOVED_FROM/badname",
 
8072
              test_read_inotify_event_IN_MOVED_FROM_badname);
 
8073
  test_add_st("/task/read_inotify_event/IN_DELETE/badname",
 
8074
              test_read_inotify_event_IN_DELETE_badname);
 
8075
  test_add_st("/task/open_and_parse_question/ENOENT",
 
8076
              test_open_and_parse_question_ENOENT);
 
8077
  test_add_st("/task/open_and_parse_question/EIO",
 
8078
              test_open_and_parse_question_EIO);
 
8079
  test_add_st("/task/open_and_parse_question/parse-error",
 
8080
              test_open_and_parse_question_parse_error);
 
8081
  test_add_st("/task/open_and_parse_question/nosocket",
 
8082
              test_open_and_parse_question_nosocket);
 
8083
  test_add_st("/task/open_and_parse_question/badsocket",
 
8084
              test_open_and_parse_question_badsocket);
 
8085
  test_add_st("/task/open_and_parse_question/nopid",
 
8086
              test_open_and_parse_question_nopid);
 
8087
  test_add_st("/task/open_and_parse_question/badpid",
 
8088
              test_open_and_parse_question_badpid);
 
8089
  test_add_st("/task/open_and_parse_question/noexist_pid",
 
8090
              test_open_and_parse_question_noexist_pid);
 
8091
  test_add_st("/task/open_and_parse_question/no-notafter",
 
8092
              test_open_and_parse_question_no_notafter);
 
8093
  test_add_st("/task/open_and_parse_question/bad-notafter",
 
8094
              test_open_and_parse_question_bad_notafter);
 
8095
  test_add_st("/task/open_and_parse_question/notafter-0",
 
8096
              test_open_and_parse_question_notafter_0);
 
8097
  test_add_st("/task/open_and_parse_question/notafter-1",
 
8098
              test_open_and_parse_question_notafter_1);
 
8099
  test_add_st("/task/open_and_parse_question/notafter-1-1",
 
8100
              test_open_and_parse_question_notafter_1_1);
 
8101
  test_add_st("/task/open_and_parse_question/notafter-1-2",
 
8102
              test_open_and_parse_question_notafter_1_2);
 
8103
  test_add_st("/task/open_and_parse_question/equal-notafter",
 
8104
              test_open_and_parse_question_equal_notafter);
 
8105
  test_add_st("/task/open_and_parse_question/late-notafter",
 
8106
              test_open_and_parse_question_late_notafter);
 
8107
  test_add_st("/task/cancel_old_question/0-1-2",
 
8108
              test_cancel_old_question_0_1_2);
 
8109
  test_add_st("/task/cancel_old_question/0-2-1",
 
8110
              test_cancel_old_question_0_2_1);
 
8111
  test_add_st("/task/cancel_old_question/1-2-3",
 
8112
              test_cancel_old_question_1_2_3);
 
8113
  test_add_st("/task/cancel_old_question/1-3-2",
 
8114
              test_cancel_old_question_1_3_2);
 
8115
  test_add_st("/task/cancel_old_question/2-1-3",
 
8116
              test_cancel_old_question_2_1_3);
 
8117
  test_add_st("/task/cancel_old_question/2-3-1",
 
8118
              test_cancel_old_question_2_3_1);
 
8119
  test_add_st("/task/cancel_old_question/3-1-2",
 
8120
              test_cancel_old_question_3_1_2);
 
8121
  test_add_st("/task/cancel_old_question/3-2-1",
 
8122
              test_cancel_old_question_3_2_1);
 
8123
  test_add_st("/task/connect_question_socket/name-too-long",
 
8124
              test_connect_question_socket_name_too_long);
 
8125
  test_add_st("/task/connect_question_socket/connect-fail",
 
8126
              test_connect_question_socket_connect_fail);
 
8127
  test_add_st("/task/connect_question_socket/bad-epoll",
 
8128
              test_connect_question_socket_bad_epoll);
 
8129
  test_add_st("/task/connect_question_socket/usable",
 
8130
              test_connect_question_socket_usable);
 
8131
  test_add_st("/task/send_password_to_socket/client-not-exited",
 
8132
              test_send_password_to_socket_client_not_exited);
 
8133
  test_add_st("/task/send_password_to_socket/password-not-read",
 
8134
              test_send_password_to_socket_password_not_read);
 
8135
  test_add_st("/task/send_password_to_socket/EMSGSIZE",
 
8136
              test_send_password_to_socket_EMSGSIZE);
 
8137
  test_add_st("/task/send_password_to_socket/retry",
 
8138
              test_send_password_to_socket_retry);
 
8139
  test_add_st("/task/send_password_to_socket/bad-epoll",
 
8140
              test_send_password_to_socket_bad_epoll);
 
8141
  test_add_st("/task/send_password_to_socket/null-password",
 
8142
              test_send_password_to_socket_null_password);
 
8143
  test_add_st("/task/send_password_to_socket/empty-password",
 
8144
              test_send_password_to_socket_empty_password);
 
8145
  test_add_st("/task/send_password_to_socket/empty-str-password",
 
8146
              test_send_password_to_socket_empty_str_pass);
 
8147
  test_add_st("/task/send_password_to_socket/text-password",
 
8148
              test_send_password_to_socket_text_password);
 
8149
  test_add_st("/task/send_password_to_socket/binary-password",
 
8150
              test_send_password_to_socket_binary_password);
 
8151
  test_add_st("/task/send_password_to_socket/nuls-in-password",
 
8152
              test_send_password_to_socket_nuls_in_password);
 
8153
  test_add_st("/task-creators/add_existing_questions/ENOENT",
 
8154
              test_add_existing_questions_ENOENT);
 
8155
  test_add_st("/task-creators/add_existing_questions/no-questions",
 
8156
              test_add_existing_questions_no_questions);
 
8157
  test_add_st("/task-creators/add_existing_questions/one-question",
 
8158
              test_add_existing_questions_one_question);
 
8159
  test_add_st("/task-creators/add_existing_questions/two-questions",
 
8160
              test_add_existing_questions_two_questions);
 
8161
  test_add_st("/task-creators/add_existing_questions/non-questions",
 
8162
              test_add_existing_questions_non_questions);
 
8163
  test_add_st("/task-creators/add_existing_questions/both-types",
 
8164
              test_add_existing_questions_both_types);
 
8165
 
 
8166
  return g_test_run() == 0;
 
8167
}
 
8168
 
 
8169
static bool should_only_run_tests(int *argc_p, char **argv_p[]){
 
8170
  GOptionContext *context = g_option_context_new("");
 
8171
 
 
8172
  g_option_context_set_help_enabled(context, FALSE);
 
8173
  g_option_context_set_ignore_unknown_options(context, TRUE);
 
8174
 
 
8175
  gboolean should_run_tests = FALSE;
 
8176
  GOptionEntry entries[] = {
 
8177
    { "test", 0, 0, G_OPTION_ARG_NONE,
 
8178
      &should_run_tests, "Run tests", NULL },
 
8179
    { NULL }
 
8180
  };
 
8181
  g_option_context_add_main_entries(context, entries, NULL);
 
8182
 
 
8183
  GError *error = NULL;
 
8184
 
 
8185
  if(g_option_context_parse(context, argc_p, argv_p, &error) != TRUE){
 
8186
    g_option_context_free(context);
 
8187
    g_error("Failed to parse options: %s", error->message);
 
8188
  }
 
8189
 
 
8190
  g_option_context_free(context);
 
8191
  return should_run_tests != FALSE;
 
8192
}