To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to dracut-module/password-agent.c
- browse files at revision 1213
- compare with another revision
- download diff
- download tarball
- view history from revision 1213
- Committer: teddy at recompile
- Date: 2020-04-05 21:30:59 UTC
- Revision ID: teddy@recompile.se-20200405213059-fb2a61ckqynrmatk
Fix file descriptor leak in mandos-client
When the local network has Mandos servers announcing themselves using
real, globally reachable, IPv6 addresses (i.e. not link-local
addresses), but there is no router on the local network providing IPv6
RA (Router Advertisement) packets, the client cannot reach the server
by normal means, since the client only has a link-local IPv6 address,
and has no usable route to reach the server's global IPv6 address.
(This is not a common situation, and usually only happens when the
router itself reboots and runs a Mandos client, since it cannot then
give RA packets to itself.) The client code has a solution for
this, which consists of adding a temporary local route to reach the
address of the server during communication, and removing this
temporary route afterwards.
This solution with a temporary route works, but has a file descriptor
leak; it leaks one file descriptor for each addition and for each
removal of a route. If one server requiring an added route is present
on the network, but no servers gives a password, making the client
retry after the default ten seconds, and we furthermore assume a
default 1024 open files limit, the client runs out of file descriptors
after about 90 minutes, after which time the client process will be
useless and fail to retrieve any passwords, necessitating manual
password entry via the keyboard.
Fix this by eliminating the file descriptor leak in the client.
* plugins.d/mandos-client.c (add_delete_local_route): Do
close(devnull) also in parent process, also if fork() fails, and on
any failure in child process.
When the local network has Mandos servers announcing themselves using
real, globally reachable, IPv6 addresses (i.e. not link-local
addresses), but there is no router on the local network providing IPv6
RA (Router Advertisement) packets, the client cannot reach the server
by normal means, since the client only has a link-local IPv6 address,
and has no usable route to reach the server's global IPv6 address.
(This is not a common situation, and usually only happens when the
router itself reboots and runs a Mandos client, since it cannot then
give RA packets to itself.) The client code has a solution for
this, which consists of adding a temporary local route to reach the
address of the server during communication, and removing this
temporary route afterwards.
This solution with a temporary route works, but has a file descriptor
leak; it leaks one file descriptor for each addition and for each
removal of a route. If one server requiring an added route is present
on the network, but no servers gives a password, making the client
retry after the default ten seconds, and we furthermore assume a
default 1024 open files limit, the client runs out of file descriptors
after about 90 minutes, after which time the client process will be
useless and fail to retrieve any passwords, necessitating manual
password entry via the keyboard.
Fix this by eliminating the file descriptor leak in the client.
* plugins.d/mandos-client.c (add_delete_local_route): Do
close(devnull) also in parent process, also if fork() fails, and on
any failure in child process.
- files added:
- debian/mandos-client.templates
- debian/tests
- dracut-module
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
dracut-module/password-agent.c
1
/* -*- mode: c; coding: utf-8; after-save-hook: (lambda () (let* ((find-build-directory (lambda (try-directory &optional base-directory) (let ((base-directory (or base-directory try-directory))) (cond ((equal try-directory "/") base-directory) ((file-readable-p (concat (file-name-as-directory try-directory) "Makefile")) try-directory) ((funcall find-build-directory (directory-file-name (file-name-directory try-directory)) base-directory)))))) (build-directory (funcall find-build-directory (buffer-file-name))) (local-build-directory (if (fboundp 'file-local-name) (file-local-name build-directory) (or (file-remote-p build-directory 'localname) build-directory))) (command (file-relative-name (file-name-sans-extension (buffer-file-name)) build-directory))) (pcase (progn (if (get-buffer "*Test*") (kill-buffer "*Test*")) (process-file-shell-command (let ((qbdir (shell-quote-argument local-build-directory)) (qcmd (shell-quote-argument command))) (format "cd %s && CFLAGS=-Werror make --silent %s && %s --test --verbose" qbdir qcmd qcmd)) nil "*Test*")) (0 (let ((w (get-buffer-window "*Test*"))) (if w (delete-window w)))) (_ (with-current-buffer "*Test*" (compilation-mode) (cd-absolute build-directory)) (display-buffer "*Test*" '(display-buffer-in-side-window)))))); -*- */
2
/*
3
* Mandos password agent - Simple password agent to run Mandos client
4
*
5
* Copyright © 2019 Teddy Hogeborn
6
* Copyright © 2019 Björn Påhlsson
7
*
8
* This file is part of Mandos.
9
*
10
* Mandos is free software: you can redistribute it and/or modify it
11
* under the terms of the GNU General Public License as published by
12
* the Free Software Foundation, either version 3 of the License, or
13
* (at your option) any later version.
14
*
15
* Mandos is distributed in the hope that it will be useful, but
16
* WITHOUT ANY WARRANTY; without even the implied warranty of
17
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
18
* General Public License for more details.
19
*
20
* You should have received a copy of the GNU General Public License
21
* along with Mandos. If not, see <http://www.gnu.org/licenses/>.
22
*
23
* Contact the authors at <mandos@recompile.se>.
24
*/
25
26
#define _GNU_SOURCE
27
#include <inttypes.h> /* uintmax_t, PRIuMAX, PRIdMAX,
28
intmax_t, uint32_t, SCNx32,
29
SCNuMAX, SCNxMAX */
30
#include <stddef.h> /* size_t */
31
#include <sys/types.h> /* pid_t, uid_t, gid_t, getuid(),
32
getpid() */
33
#include <stdbool.h> /* bool, true, false */
34
#include <signal.h> /* struct sigaction, sigset_t,
35
sigemptyset(), sigaddset(),
36
SIGCHLD, pthread_sigmask(),
37
SIG_BLOCK, SIG_SETMASK, SA_RESTART,
38
SA_NOCLDSTOP, sigfillset(), kill(),
39
SIGTERM, sigdelset(), SIGKILL,
40
NSIG, sigismember(), SA_ONSTACK,
41
SIG_DFL, SIG_IGN, SIGINT, SIGQUIT,
42
SIGHUP, SIGSTOP, SIG_UNBLOCK */
43
#include <stdlib.h> /* EXIT_SUCCESS, EXIT_FAILURE,
44
malloc(), free(), strtoumax(),
45
realloc(), setenv(), calloc(),
46
mkdtemp(), mkostemp() */
47
#include <iso646.h> /* not, or, and, xor */
48
#include <error.h> /* error() */
49
#include <sysexits.h> /* EX_USAGE, EX_OSERR, EX_OSFILE */
50
#include <errno.h> /* errno, error_t, EACCES,
51
ENAMETOOLONG, ENOENT, ENOTDIR,
52
ENOMEM, EEXIST, ECHILD, EPERM,
53
EAGAIN, EINTR, ENOBUFS, EADDRINUSE,
54
ECONNREFUSED, ECONNRESET,
55
ETOOMANYREFS, EMSGSIZE, EBADF,
56
EINVAL */
57
#include <string.h> /* strdup(), memcpy(),
58
explicit_bzero(), memset(),
59
strcmp(), strlen(), strncpy(),
60
memcmp(), basename() */
61
#include <argz.h> /* argz_create(), argz_count(),
62
argz_extract(), argz_next(),
63
argz_add() */
64
#include <sys/epoll.h> /* epoll_create1(), EPOLL_CLOEXEC,
65
epoll_ctl(), EPOLL_CTL_ADD,
66
struct epoll_event, EPOLLIN,
67
EPOLLRDHUP, EPOLLOUT,
68
epoll_pwait() */
69
#include <time.h> /* struct timespec, clock_gettime(),
70
CLOCK_MONOTONIC */
71
#include <argp.h> /* struct argp_option, OPTION_HIDDEN,
72
OPTION_ALIAS, struct argp_state,
73
ARGP_ERR_UNKNOWN, ARGP_KEY_ARGS,
74
struct argp, argp_parse(),
75
ARGP_NO_EXIT */
76
#include <stdint.h> /* SIZE_MAX */
77
#include <unistd.h> /* uid_t, gid_t, close(), pipe2(),
78
fork(), _exit(), dup2(),
79
STDOUT_FILENO, setresgid(),
80
setresuid(), execv(), ssize_t,
81
read(), dup3(), getuid(), dup(),
82
STDERR_FILENO, pause(), write(),
83
rmdir(), unlink(), getpid() */
84
#include <sys/mman.h> /* munlock(), mlock() */
85
#include <fcntl.h> /* O_CLOEXEC, O_NONBLOCK, fcntl(),
86
F_GETFD, F_GETFL, FD_CLOEXEC,
87
open(), O_WRONLY, O_NOCTTY,
88
O_RDONLY, O_NOFOLLOW */
89
#include <sys/wait.h> /* waitpid(), WNOHANG, WIFEXITED(),
90
WEXITSTATUS() */
91
#include <limits.h> /* PIPE_BUF, NAME_MAX, INT_MAX */
92
#include <sys/inotify.h> /* inotify_init1(), IN_NONBLOCK,
93
IN_CLOEXEC, inotify_add_watch(),
94
IN_CLOSE_WRITE, IN_MOVED_TO,
95
IN_MOVED_FROM, IN_DELETE,
96
IN_EXCL_UNLINK, IN_ONLYDIR,
97
struct inotify_event */
98
#include <fnmatch.h> /* fnmatch(), FNM_FILE_NAME */
99
#include <stdio.h> /* asprintf(), FILE, stderr, fopen(),
100
fclose(), getline(), sscanf(),
101
feof(), ferror(), rename(),
102
fdopen(), fprintf(), fscanf() */
103
#include <glib.h> /* GKeyFile, g_key_file_free(), g_key_file_new(),
104
GError, g_key_file_load_from_file(),
105
G_KEY_FILE_NONE, TRUE, G_FILE_ERROR_NOENT,
106
g_key_file_get_string(), guint64,
107
g_key_file_get_uint64(),
108
G_KEY_FILE_ERROR_KEY_NOT_FOUND, gconstpointer,
109
g_assert_true(), g_assert_nonnull(),
110
g_assert_null(), g_assert_false(),
111
g_assert_cmpint(), g_assert_cmpuint(),
112
g_test_skip(), g_assert_cmpstr(),
113
g_test_init(), g_test_add(), g_test_run(),
114
GOptionContext, g_option_context_new(),
115
g_option_context_set_help_enabled(), FALSE,
116
g_option_context_set_ignore_unknown_options(),
117
gboolean, GOptionEntry, G_OPTION_ARG_NONE,
118
g_option_context_add_main_entries(),
119
g_option_context_parse(),
120
g_option_context_free(), g_error() */
121
#include <sys/un.h> /* struct sockaddr_un, SUN_LEN */
122
#include <sys/socket.h> /* AF_LOCAL, socket(), PF_LOCAL,
123
SOCK_DGRAM, SOCK_NONBLOCK,
124
SOCK_CLOEXEC, connect(),
125
struct sockaddr, socklen_t,
126
shutdown(), SHUT_RD, send(),
127
MSG_NOSIGNAL, bind(), recv(),
128
socketpair() */
129
#include <glob.h> /* globfree(), glob_t, glob(),
130
GLOB_ERR, GLOB_NOSORT, GLOB_MARK,
131
GLOB_ABORTED, GLOB_NOMATCH,
132
GLOB_NOSPACE */
133
134
/* End of includes */
135
136
/* Start of declarations of private types and functions */
137
138
/* microseconds of CLOCK_MONOTONIC absolute time; 0 means unset */
139
typedef uintmax_t mono_microsecs;
140
141
/* "task_queue" - A queue of tasks to be run */
142
typedef struct {
143
struct task_struct *tasks; /* Tasks in this queue */
144
size_t length; /* Number of tasks */
145
/* Memory allocated for "tasks", in bytes */
146
size_t allocated;
147
/* Time when this queue should be run, at the latest */
148
mono_microsecs next_run;
149
} __attribute__((designated_init)) task_queue;
150
151
/* "task_func" - A function type for task functions
152
153
I.e. functions for the code which runs when a task is run, all have
154
this type */
155
typedef void (task_func) (const struct task_struct,
156
task_queue *const)
157
__attribute__((nonnull));
158
159
/* "buffer" - A data buffer for a growing array of bytes
160
161
Used for the "password" variable */
162
typedef struct {
163
char *data;
164
size_t length;
165
size_t allocated;
166
} __attribute__((designated_init)) buffer;
167
168
/* "string_set" - A set type which can contain strings
169
170
Used by the "cancelled_filenames" variable */
171
typedef struct {
172
char *argz; /* Do not access these except in */
173
size_t argz_len; /* the string_set_* functions */
174
} __attribute__((designated_init)) string_set;
175
176
/* "task_context" - local variables for tasks
177
178
This data structure distinguishes between different tasks which are
179
using the same function. This data structure is passed to every
180
task function when each task is run.
181
182
Note that not every task uses every struct member. */
183
typedef struct task_struct {
184
task_func *const func; /* The function run by this task */
185
char *const question_filename; /* The question file */
186
const pid_t pid; /* Mandos client process ID */
187
const int epoll_fd; /* The epoll set file descriptor */
188
bool *const quit_now; /* Set to true on fatal errors */
189
const int fd; /* General purpose file descriptor */
190
bool *const mandos_client_exited; /* Set true when client exits */
191
buffer *const password; /* As read from client process */
192
bool *const password_is_read; /* "password" is done growing */
193
char *filename; /* General purpose file name */
194
/* A set of strings of all the file names of questions which have
195
been cancelled for any reason; tasks pertaining to these question
196
files should not be run */
197
string_set *const cancelled_filenames;
198
const mono_microsecs notafter; /* "NotAfter" from question file */
199
/* Updated before each queue run; is compared with queue.next_run */
200
const mono_microsecs *const current_time;
201
} __attribute__((designated_init)) task_context;
202
203
/* Declare all our functions here so we can define them in any order
204
below. Note: test functions are *not* declared here, they are
205
declared in the test section. */
206
__attribute__((warn_unused_result))
207
static bool should_only_run_tests(int *, char **[]);
208
__attribute__((warn_unused_result, cold))
209
static bool run_tests(int, char *[]);
210
static void handle_sigchld(__attribute__((unused)) int sig){}
211
__attribute__((warn_unused_result, malloc))
212
task_queue *create_queue(void);
213
__attribute__((nonnull, warn_unused_result))
214
bool add_to_queue(task_queue *const, const task_context);
215
__attribute__((nonnull))
216
void cleanup_task(const task_context *const);
217
__attribute__((nonnull))
218
void cleanup_queue(task_queue *const *const);
219
__attribute__((pure, nonnull, warn_unused_result))
220
bool queue_has_question(const task_queue *const);
221
__attribute__((nonnull))
222
void cleanup_close(const int *const);
223
__attribute__((nonnull))
224
void cleanup_string(char *const *const);
225
__attribute__((nonnull))
226
void cleanup_buffer(buffer *const);
227
__attribute__((pure, nonnull, warn_unused_result))
228
bool string_set_contains(const string_set, const char *const);
229
__attribute__((nonnull, warn_unused_result))
230
bool string_set_add(string_set *const, const char *const);
231
__attribute__((nonnull))
232
void string_set_clear(string_set *);
233
void string_set_swap(string_set *const, string_set *const);
234
__attribute__((nonnull, warn_unused_result))
235
bool start_mandos_client(task_queue *const, const int, bool *const,
236
bool *const, buffer *const, bool *const,
237
const struct sigaction *const,
238
const sigset_t, const char *const,
239
const uid_t, const gid_t,
240
const char *const *const);
241
__attribute__((nonnull))
242
task_func wait_for_mandos_client_exit;
243
__attribute__((nonnull))
244
task_func read_mandos_client_output;
245
__attribute__((warn_unused_result))
246
bool add_inotify_dir_watch(task_queue *const, const int, bool *const,
247
buffer *const, const char *const,
248
string_set *, const mono_microsecs *const,
249
bool *const, bool *const);
250
__attribute__((nonnull))
251
task_func read_inotify_event;
252
__attribute__((nonnull))
253
task_func open_and_parse_question;
254
__attribute__((nonnull))
255
task_func cancel_old_question;
256
__attribute__((nonnull))
257
task_func connect_question_socket;
258
__attribute__((nonnull))
259
task_func send_password_to_socket;
260
__attribute__((warn_unused_result))
261
bool add_existing_questions(task_queue *const, const int,
262
buffer *const, string_set *,
263
const mono_microsecs *const,
264
bool *const, bool *const,
265
const char *const);
266
__attribute__((nonnull, warn_unused_result))
267
bool wait_for_event(const int, const mono_microsecs,
268
const mono_microsecs);
269
bool run_queue(task_queue **const, string_set *const, bool *const);
270
bool clear_all_fds_from_epoll_set(const int);
271
mono_microsecs get_current_time(void);
272
__attribute__((nonnull, warn_unused_result))
273
bool setup_signal_handler(struct sigaction *const);
274
__attribute__((nonnull))
275
bool restore_signal_handler(const struct sigaction *const);
276
__attribute__((nonnull, warn_unused_result))
277
bool block_sigchld(sigset_t *const);
278
__attribute__((nonnull))
279
bool restore_sigmask(const sigset_t *const);
280
__attribute__((nonnull))
281
bool parse_arguments(int, char *[], const bool, char **, char **,
282
uid_t *const , gid_t *const, char **, size_t *);
283
284
/* End of declarations of private types and functions */
285
286
/* Start of "main" section; this section LACKS TESTS!
287
288
Code here should be as simple as possible. */
289
290
/* These are required to be global by Argp */
291
const char *argp_program_version = "password-agent " VERSION;
292
const char *argp_program_bug_address = "<mandos@recompile.se>";
293
294
int main(int argc, char *argv[]){
295
296
/* If the --test option is passed, skip all normal operations and
297
instead only run the run_tests() function, which also does all
298
its own option parsing, so we don't have to do anything here. */
299
if(should_only_run_tests(&argc, &argv)){
300
if(run_tests(argc, argv)){
301
return EXIT_SUCCESS; /* All tests successful */
302
}
303
return EXIT_FAILURE; /* Some test(s) failed */
304
}
305
306
__attribute__((cleanup(cleanup_string)))
307
char *agent_directory = NULL;
308
309
__attribute__((cleanup(cleanup_string)))
310
char *helper_directory = NULL;
311
312
uid_t user = 0;
313
gid_t group = 0;
314
315
__attribute__((cleanup(cleanup_string)))
316
char *mandos_argz = NULL;
317
size_t mandos_argz_length = 0;
318
319
if(not parse_arguments(argc, argv, true, &agent_directory,
320
&helper_directory, &user, &group,
321
&mandos_argz, &mandos_argz_length)){
322
/* This should never happen, since "true" is passed as the third
323
argument to parse_arguments() above, which should make
324
argp_parse() call exit() if any parsing error occurs. */
325
error(EX_USAGE, errno, "Failed to parse arguments");
326
}
327
328
const char default_agent_directory[] = "/run/systemd/ask-password";
329
const char default_helper_directory[]
330
= "/lib/mandos/plugin-helpers";
331
const char *const default_argv[]
332
= {"/lib/mandos/plugins.d/mandos-client", NULL };
333
334
/* Set variables to default values if unset */
335
if(agent_directory == NULL){
336
agent_directory = strdup(default_agent_directory);
337
if(agent_directory == NULL){
338
error(EX_OSERR, errno, "Failed strdup()");
339
}
340
}
341
if(helper_directory == NULL){
342
helper_directory = strdup(default_helper_directory);
343
if(helper_directory == NULL){
344
error(EX_OSERR, errno, "Failed strdup()");
345
}
346
}
347
if(user == 0){
348
user = 65534; /* nobody */
349
}
350
if(group == 0){
351
group = 65534; /* nogroup */
352
}
353
/* If parse_opt did not create an argz vector, create one with
354
default values */
355
if(mandos_argz == NULL){
356
#ifdef __GNUC__
357
#pragma GCC diagnostic push
358
/* argz_create() takes a non-const argv for some unknown reason -
359
argz_create() isn't modifying the strings, just copying them.
360
Therefore, this cast to non-const should be safe. */
361
#pragma GCC diagnostic ignored "-Wcast-qual"
362
#endif
363
errno = argz_create((char *const *)default_argv, &mandos_argz,
364
&mandos_argz_length);
365
#ifdef __GNUC__
366
#pragma GCC diagnostic pop
367
#endif
368
if(errno != 0){
369
error(EX_OSERR, errno, "Failed argz_create()");
370
}
371
}
372
/* Use argz vector to create a normal argv, usable by execv() */
373
374
char **mandos_argv = malloc((argz_count(mandos_argz,
375
mandos_argz_length)
376
+ 1) * sizeof(char *));
377
if(mandos_argv == NULL){
378
error_t saved_errno = errno;
379
free(mandos_argz);
380
error(EX_OSERR, saved_errno, "Failed malloc()");
381
}
382
argz_extract(mandos_argz, mandos_argz_length, mandos_argv);
383
384
sigset_t orig_sigmask;
385
if(not block_sigchld(&orig_sigmask)){
386
return EX_OSERR;
387
}
388
389
struct sigaction old_sigchld_action;
390
if(not setup_signal_handler(&old_sigchld_action)){
391
return EX_OSERR;
392
}
393
394
mono_microsecs current_time = 0;
395
396
bool mandos_client_exited = false;
397
bool quit_now = false;
398
__attribute__((cleanup(cleanup_close)))
399
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
400
if(epoll_fd < 0){
401
error(EX_OSERR, errno, "Failed to create epoll set fd");
402
}
403
__attribute__((cleanup(cleanup_queue)))
404
task_queue *queue = create_queue();
405
if(queue == NULL){
406
error(EX_OSERR, errno, "Failed to create task queue");
407
}
408
409
__attribute__((cleanup(cleanup_buffer)))
410
buffer password = {};
411
bool password_is_read = false;
412
413
__attribute__((cleanup(string_set_clear)))
414
string_set cancelled_filenames = {};
415
416
/* Add tasks to queue */
417
if(not start_mandos_client(queue, epoll_fd, &mandos_client_exited,
418
&quit_now, &password, &password_is_read,
419
&old_sigchld_action, orig_sigmask,
420
helper_directory, user, group,
421
(const char *const *)mandos_argv)){
422
return EX_OSERR; /* Error has already been printed */
423
}
424
/* These variables were only for start_mandos_client() and are not
425
needed anymore */
426
free(mandos_argv);
427
free(mandos_argz);
428
mandos_argz = NULL;
429
if(not add_inotify_dir_watch(queue, epoll_fd, &quit_now, &password,
430
agent_directory, &cancelled_filenames,
431
¤t_time, &mandos_client_exited,
432
&password_is_read)){
433
switch(errno){ /* Error has already been printed */
434
case EACCES:
435
case ENAMETOOLONG:
436
case ENOENT:
437
case ENOTDIR:
438
return EX_OSFILE;
439
default:
440
return EX_OSERR;
441
}
442
}
443
if(not add_existing_questions(queue, epoll_fd, &password,
444
&cancelled_filenames, ¤t_time,
445
&mandos_client_exited,
446
&password_is_read, agent_directory)){
447
return EXIT_FAILURE; /* Error has already been printed */
448
}
449
450
/* Run queue */
451
do {
452
current_time = get_current_time();
453
if(not wait_for_event(epoll_fd, queue->next_run, current_time)){
454
const error_t saved_errno = errno;
455
error(EXIT_FAILURE, saved_errno, "Failure while waiting for"
456
" events");
457
}
458
459
current_time = get_current_time();
460
if(not run_queue(&queue, &cancelled_filenames, &quit_now)){
461
const error_t saved_errno = errno;
462
error(EXIT_FAILURE, saved_errno, "Failure while running queue");
463
}
464
465
/* When no tasks about questions are left in the queue, break out
466
of the loop (and implicitly exit the program) */
467
} while(queue_has_question(queue));
468
469
restore_signal_handler(&old_sigchld_action);
470
restore_sigmask(&orig_sigmask);
471
472
return EXIT_SUCCESS;
473
}
474
475
__attribute__((warn_unused_result))
476
mono_microsecs get_current_time(void){
477
struct timespec currtime;
478
if(clock_gettime(CLOCK_MONOTONIC, &currtime) != 0){
479
error(0, errno, "Failed to get current time");
480
return 0;
481
}
482
return ((mono_microsecs)currtime.tv_sec * 1000000) /* seconds */
483
+ ((mono_microsecs)currtime.tv_nsec / 1000); /* nanoseconds */
484
}
485
486
/* End of "main" section */
487
488
/* Start of regular code section; ALL this code has tests */
489
490
__attribute__((nonnull))
491
bool parse_arguments(int argc, char *argv[], const bool exit_failure,
492
char **agent_directory, char **helper_directory,
493
uid_t *const user, gid_t *const group,
494
char **mandos_argz, size_t *mandos_argz_length){
495
496
const struct argp_option options[] = {
497
{ .name="agent-directory",.key='d', .arg="DIRECTORY",
498
.doc="Systemd password agent directory" },
499
{ .name="helper-directory",.key=128, .arg="DIRECTORY",
500
.doc="Mandos Client password helper directory" },
501
{ .name="plugin-helper-dir", .key=129, /* From plugin-runner */
502
.flags=OPTION_HIDDEN | OPTION_ALIAS },
503
{ .name="user", .key='u', .arg="USERID",
504
.doc="User ID the Mandos Client will use as its unprivileged"
505
" user" },
506
{ .name="userid", .key=130, /* From plugin--runner */
507
.flags=OPTION_HIDDEN | OPTION_ALIAS },
508
{ .name="group", .key='g', .arg="GROUPID",
509
.doc="Group ID the Mandos Client will use as its unprivileged"
510
" group" },
511
{ .name="groupid", .key=131, /* From plugin--runner */
512
.flags=OPTION_HIDDEN | OPTION_ALIAS },
513
{ .name="test", .key=255, /* See should_only_run_tests() */
514
.doc="Skip normal operation, and only run self-tests. See"
515
" --test --help.", .group=10, },
516
{ NULL },
517
};
518
519
__attribute__((nonnull(3)))
520
error_t parse_opt(int key, char *arg, struct argp_state *state){
521
errno = 0;
522
switch(key){
523
case 'd': /* --agent-directory */
524
*agent_directory = strdup(arg);
525
break;
526
case 128: /* --helper-directory */
527
case 129: /* --plugin-helper-dir */
528
*helper_directory = strdup(arg);
529
break;
530
case 'u': /* --user */
531
case 130: /* --userid */
532
{
533
char *tmp;
534
uintmax_t tmp_id = 0;
535
errno = 0;
536
tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
537
if(errno != 0 or tmp == arg or *tmp != '\0'
538
or tmp_id != (uid_t)tmp_id or (uid_t)tmp_id == 0){
539
return ARGP_ERR_UNKNOWN;
540
}
541
*user = (uid_t)tmp_id;
542
errno = 0;
543
break;
544
}
545
case 'g': /* --group */
546
case 131: /* --groupid */
547
{
548
char *tmp;
549
uintmax_t tmp_id = 0;
550
errno = 0;
551
tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
552
if(errno != 0 or tmp == arg or *tmp != '\0'
553
or tmp_id != (gid_t)tmp_id or (gid_t)tmp_id == 0){
554
return ARGP_ERR_UNKNOWN;
555
}
556
*group = (gid_t)tmp_id;
557
errno = 0;
558
break;
559
}
560
case ARGP_KEY_ARGS:
561
/* Copy arguments into argz vector */
562
return argz_create(state->argv + state->next, mandos_argz,
563
mandos_argz_length);
564
default:
565
return ARGP_ERR_UNKNOWN;
566
}
567
return errno;
568
}
569
570
const struct argp argp = {
571
.options=options,
572
.parser=parse_opt,
573
.args_doc="[MANDOS_CLIENT [OPTION...]]\n--test",
574
.doc = "Mandos password agent -- runs Mandos client as a"
575
" systemd password agent",
576
};
577
578
errno = argp_parse(&argp, argc, argv,
579
exit_failure ? 0 : ARGP_NO_EXIT, NULL, NULL);
580
581
return errno == 0;
582
}
583
584
__attribute__((nonnull, warn_unused_result))
585
bool block_sigchld(sigset_t *const orig_sigmask){
586
sigset_t sigchld_sigmask;
587
if(sigemptyset(&sigchld_sigmask) < 0){
588
error(0, errno, "Failed to empty signal set");
589
return false;
590
}
591
if(sigaddset(&sigchld_sigmask, SIGCHLD) < 0){
592
error(0, errno, "Failed to add SIGCHLD to signal set");
593
return false;
594
}
595
if(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask, orig_sigmask) != 0){
596
error(0, errno, "Failed to block SIGCHLD signal");
597
return false;
598
}
599
return true;
600
}
601
602
__attribute__((nonnull, warn_unused_result, const))
603
bool restore_sigmask(const sigset_t *const orig_sigmask){
604
if(pthread_sigmask(SIG_SETMASK, orig_sigmask, NULL) != 0){
605
error(0, errno, "Failed to restore blocked signals");
606
return false;
607
}
608
return true;
609
}
610
611
__attribute__((nonnull, warn_unused_result))
612
bool setup_signal_handler(struct sigaction *const old_sigchld_action){
613
struct sigaction sigchld_action = {
614
.sa_handler=handle_sigchld,
615
.sa_flags=SA_RESTART | SA_NOCLDSTOP,
616
};
617
/* Set all signals in "sa_mask" struct member; this makes all
618
signals automatically blocked during signal handler */
619
if(sigfillset(&sigchld_action.sa_mask) != 0){
620
error(0, errno, "Failed to do sigfillset()");
621
return false;
622
}
623
if(sigaction(SIGCHLD, &sigchld_action, old_sigchld_action) != 0){
624
error(0, errno, "Failed to set SIGCHLD signal handler");
625
return false;
626
}
627
return true;
628
}
629
630
__attribute__((nonnull, warn_unused_result))
631
bool restore_signal_handler(const struct sigaction *const
632
old_sigchld_action){
633
if(sigaction(SIGCHLD, old_sigchld_action, NULL) != 0){
634
error(0, errno, "Failed to restore signal handler");
635
return false;
636
}
637
return true;
638
}
639
640
__attribute__((warn_unused_result, malloc))
641
task_queue *create_queue(void){
642
task_queue *queue = malloc(sizeof(task_queue));
643
if(queue){
644
queue->tasks = NULL;
645
queue->length = 0;
646
queue->allocated = 0;
647
queue->next_run = 0;
648
}
649
return queue;
650
}
651
652
__attribute__((nonnull, warn_unused_result))
653
bool add_to_queue(task_queue *const queue, const task_context task){
654
if((queue->length + 1) > (SIZE_MAX / sizeof(task_context))){
655
/* overflow */
656
error(0, ENOMEM, "Failed to allocate %" PRIuMAX
657
" tasks for queue->tasks", (uintmax_t)(queue->length + 1));
658
errno = ENOMEM;
659
return false;
660
}
661
const size_t needed_size = sizeof(task_context)*(queue->length + 1);
662
if(needed_size > (queue->allocated)){
663
task_context *const new_tasks = realloc(queue->tasks,
664
needed_size);
665
if(new_tasks == NULL){
666
error(0, errno, "Failed to allocate %" PRIuMAX
667
" bytes for queue->tasks", (uintmax_t)needed_size);
668
return false;
669
}
670
queue->tasks = new_tasks;
671
queue->allocated = needed_size;
672
}
673
/* Using memcpy here is necessary because doing */
674
/* queue->tasks[queue->length++] = task; */
675
/* would violate const-ness of task members */
676
memcpy(&(queue->tasks[queue->length++]), &task,
677
sizeof(task_context));
678
return true;
679
}
680
681
__attribute__((nonnull))
682
void cleanup_task(const task_context *const task){
683
const error_t saved_errno = errno;
684
/* free and close all task data */
685
free(task->question_filename);
686
if(task->filename != task->question_filename){
687
free(task->filename);
688
}
689
if(task->pid > 0){
690
kill(task->pid, SIGTERM);
691
}
692
if(task->fd > 0){
693
close(task->fd);
694
}
695
errno = saved_errno;
696
}
697
698
__attribute__((nonnull))
699
void free_queue(task_queue *const queue){
700
free(queue->tasks);
701
free(queue);
702
}
703
704
__attribute__((nonnull))
705
void cleanup_queue(task_queue *const *const queue){
706
if(*queue == NULL){
707
return;
708
}
709
for(size_t i = 0; i < (*queue)->length; i++){
710
const task_context *const task = ((*queue)->tasks)+i;
711
cleanup_task(task);
712
}
713
free_queue(*queue);
714
}
715
716
__attribute__((pure, nonnull, warn_unused_result))
717
bool queue_has_question(const task_queue *const queue){
718
for(size_t i=0; i < queue->length; i++){
719
if(queue->tasks[i].question_filename != NULL){
720
return true;
721
}
722
}
723
return false;
724
}
725
726
__attribute__((nonnull))
727
void cleanup_close(const int *const fd){
728
const error_t saved_errno = errno;
729
close(*fd);
730
errno = saved_errno;
731
}
732
733
__attribute__((nonnull))
734
void cleanup_string(char *const *const ptr){
735
free(*ptr);
736
}
737
738
__attribute__((nonnull))
739
void cleanup_buffer(buffer *buf){
740
if(buf->allocated > 0){
741
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
742
explicit_bzero(buf->data, buf->allocated);
743
#else
744
memset(buf->data, '\0', buf->allocated);
745
#endif
746
}
747
if(buf->data != NULL){
748
if(munlock(buf->data, buf->allocated) != 0){
749
error(0, errno, "Failed to unlock memory of old buffer");
750
}
751
free(buf->data);
752
buf->data = NULL;
753
}
754
buf->length = 0;
755
buf->allocated = 0;
756
}
757
758
__attribute__((pure, nonnull, warn_unused_result))
759
bool string_set_contains(const string_set set, const char *const str){
760
for(const char *s = set.argz; s != NULL and set.argz_len > 0;
761
s = argz_next(set.argz, set.argz_len, s)){
762
if(strcmp(s, str) == 0){
763
return true;
764
}
765
}
766
return false;
767
}
768
769
__attribute__((nonnull, warn_unused_result))
770
bool string_set_add(string_set *const set, const char *const str){
771
if(string_set_contains(*set, str)){
772
return true;
773
}
774
error_t error = argz_add(&set->argz, &set->argz_len, str);
775
if(error == 0){
776
return true;
777
}
778
errno = error;
779
return false;
780
}
781
782
__attribute__((nonnull))
783
void string_set_clear(string_set *set){
784
free(set->argz);
785
set->argz = NULL;
786
set->argz_len = 0;
787
}
788
789
__attribute__((nonnull))
790
void string_set_swap(string_set *const set1, string_set *const set2){
791
/* Swap contents of two string sets */
792
{
793
char *const tmp_argz = set1->argz;
794
set1->argz = set2->argz;
795
set2->argz = tmp_argz;
796
}
797
{
798
const size_t tmp_argz_len = set1->argz_len;
799
set1->argz_len = set2->argz_len;
800
set2->argz_len = tmp_argz_len;
801
}
802
}
803
804
__attribute__((nonnull, warn_unused_result))
805
bool start_mandos_client(task_queue *const queue,
806
const int epoll_fd,
807
bool *const mandos_client_exited,
808
bool *const quit_now, buffer *const password,
809
bool *const password_is_read,
810
const struct sigaction *const
811
old_sigchld_action, const sigset_t sigmask,
812
const char *const helper_directory,
813
const uid_t user, const gid_t group,
814
const char *const *const argv){
815
int pipefds[2];
816
if(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK) != 0){
817
error(0, errno, "Failed to pipe2(..., O_CLOEXEC | O_NONBLOCK)");
818
return false;
819
}
820
821
const pid_t pid = fork();
822
if(pid == 0){
823
if(not restore_signal_handler(old_sigchld_action)){
824
_exit(EXIT_FAILURE);
825
}
826
if(not restore_sigmask(&sigmask)){
827
_exit(EXIT_FAILURE);
828
}
829
if(close(pipefds[0]) != 0){
830
error(0, errno, "Failed to close() parent pipe fd");
831
_exit(EXIT_FAILURE);
832
}
833
if(dup2(pipefds[1], STDOUT_FILENO) == -1){
834
error(0, errno, "Failed to dup2() pipe fd to stdout");
835
_exit(EXIT_FAILURE);
836
}
837
if(close(pipefds[1]) != 0){
838
error(0, errno, "Failed to close() old child pipe fd");
839
_exit(EXIT_FAILURE);
840
}
841
if(setenv("MANDOSPLUGINHELPERDIR", helper_directory, 1) != 0){
842
error(0, errno, "Failed to setenv(\"MANDOSPLUGINHELPERDIR\","
843
" \"%s\", 1)", helper_directory);
844
_exit(EXIT_FAILURE);
845
}
846
if(group != 0 and setresgid(group, 0, 0) == -1){
847
error(0, errno, "Failed to setresgid(-1, %" PRIuMAX ", %"
848
PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
849
_exit(EXIT_FAILURE);
850
}
851
if(user != 0 and setresuid(user, 0, 0) == -1){
852
error(0, errno, "Failed to setresuid(-1, %" PRIuMAX ", %"
853
PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
854
_exit(EXIT_FAILURE);
855
}
856
#ifdef __GNUC__
857
#pragma GCC diagnostic push
858
/* For historical reasons, the "argv" argument to execv() is not
859
const, but it is safe to override this. */
860
#pragma GCC diagnostic ignored "-Wcast-qual"
861
#endif
862
execv(argv[0], (char **)argv);
863
#ifdef __GNUC__
864
#pragma GCC diagnostic pop
865
#endif
866
error(0, errno, "execv(\"%s\", ...) failed", argv[0]);
867
_exit(EXIT_FAILURE);
868
}
869
close(pipefds[1]);
870
871
if(pid == -1){
872
error(0, errno, "Failed to fork()");
873
close(pipefds[0]);
874
return false;
875
}
876
877
if(not add_to_queue(queue, (task_context){
878
.func=wait_for_mandos_client_exit,
879
.pid=pid,
880
.mandos_client_exited=mandos_client_exited,
881
.quit_now=quit_now,
882
})){
883
error(0, errno, "Failed to add wait_for_mandos_client to queue");
884
close(pipefds[0]);
885
return false;
886
}
887
888
const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, pipefds[0],
889
&(struct epoll_event)
890
{ .events=EPOLLIN | EPOLLRDHUP });
891
if(ret != 0 and errno != EEXIST){
892
error(0, errno, "Failed to add file descriptor to epoll set");
893
close(pipefds[0]);
894
return false;
895
}
896
897
return add_to_queue(queue, (task_context){
898
.func=read_mandos_client_output,
899
.epoll_fd=epoll_fd,
900
.fd=pipefds[0],
901
.quit_now=quit_now,
902
.password=password,
903
.password_is_read=password_is_read,
904
});
905
}
906
907
__attribute__((nonnull))
908
void wait_for_mandos_client_exit(const task_context task,
909
task_queue *const queue){
910
const pid_t pid = task.pid;
911
bool *const mandos_client_exited = task.mandos_client_exited;
912
bool *const quit_now = task.quit_now;
913
914
int status;
915
switch(waitpid(pid, &status, WNOHANG)){
916
case 0: /* Not exited yet */
917
if(not add_to_queue(queue, task)){
918
error(0, errno, "Failed to add myself to queue");
919
*quit_now = true;
920
}
921
break;
922
case -1: /* Error */
923
error(0, errno, "waitpid(%" PRIdMAX ") failed", (intmax_t)pid);
924
if(errno != ECHILD){
925
kill(pid, SIGTERM);
926
}
927
*quit_now = true;
928
break;
929
default: /* Has exited */
930
*mandos_client_exited = true;
931
if((not WIFEXITED(status))
932
or (WEXITSTATUS(status) != EXIT_SUCCESS)){
933
error(0, 0, "Mandos client failed or was killed");
934
*quit_now = true;
935
}
936
}
937
}
938
939
__attribute__((nonnull))
940
void read_mandos_client_output(const task_context task,
941
task_queue *const queue){
942
buffer *const password = task.password;
943
bool *const quit_now = task.quit_now;
944
bool *const password_is_read = task.password_is_read;
945
const int fd = task.fd;
946
const int epoll_fd = task.epoll_fd;
947
948
const size_t new_potential_size = (password->length + PIPE_BUF);
949
if(password->allocated < new_potential_size){
950
char *const new_buffer = calloc(new_potential_size, 1);
951
if(new_buffer == NULL){
952
error(0, errno, "Failed to allocate %" PRIuMAX
953
" bytes for password", (uintmax_t)new_potential_size);
954
*quit_now = true;
955
close(fd);
956
return;
957
}
958
if(mlock(new_buffer, new_potential_size) != 0){
959
/* Warn but do not treat as fatal error */
960
if(errno != EPERM and errno != ENOMEM){
961
error(0, errno, "Failed to lock memory for password");
962
}
963
}
964
if(password->length > 0){
965
memcpy(new_buffer, password->data, password->length);
966
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
967
explicit_bzero(password->data, password->allocated);
968
#else
969
memset(password->data, '\0', password->allocated);
970
#endif
971
}
972
if(password->data != NULL){
973
if(munlock(password->data, password->allocated) != 0){
974
error(0, errno, "Failed to unlock memory of old buffer");
975
}
976
free(password->data);
977
}
978
password->data = new_buffer;
979
password->allocated = new_potential_size;
980
}
981
982
const ssize_t read_length = read(fd, password->data
983
+ password->length, PIPE_BUF);
984
985
if(read_length == 0){ /* EOF */
986
*password_is_read = true;
987
close(fd);
988
return;
989
}
990
if(read_length < 0 and errno != EAGAIN){ /* Actual error */
991
error(0, errno, "Failed to read password from Mandos client");
992
*quit_now = true;
993
close(fd);
994
return;
995
}
996
if(read_length > 0){ /* Data has been read */
997
password->length += (size_t)read_length;
998
}
999
1000
/* Either data was read, or EAGAIN was indicated, meaning no data
1001
available yet */
1002
1003
/* Re-add the fd to the epoll set */
1004
const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1005
&(struct epoll_event)
1006
{ .events=EPOLLIN | EPOLLRDHUP });
1007
if(ret != 0 and errno != EEXIST){
1008
error(0, errno, "Failed to re-add file descriptor to epoll set");
1009
*quit_now = true;
1010
close(fd);
1011
return;
1012
}
1013
1014
/* Re-add myself to the queue */
1015
if(not add_to_queue(queue, task)){
1016
error(0, errno, "Failed to add myself to queue");
1017
*quit_now = true;
1018
close(fd);
1019
}
1020
}
1021
1022
__attribute__((nonnull, warn_unused_result))
1023
bool add_inotify_dir_watch(task_queue *const queue,
1024
const int epoll_fd, bool *const quit_now,
1025
buffer *const password,
1026
const char *const dir,
1027
string_set *cancelled_filenames,
1028
const mono_microsecs *const current_time,
1029
bool *const mandos_client_exited,
1030
bool *const password_is_read){
1031
const int fd = inotify_init1(IN_NONBLOCK | IN_CLOEXEC);
1032
if(fd == -1){
1033
error(0, errno, "Failed to create inotify instance");
1034
return false;
1035
}
1036
1037
if(inotify_add_watch(fd, dir, IN_CLOSE_WRITE | IN_MOVED_TO
1038
| IN_MOVED_FROM| IN_DELETE | IN_EXCL_UNLINK
1039
| IN_ONLYDIR)
1040
== -1){
1041
error(0, errno, "Failed to create inotify watch on %s", dir);
1042
return false;
1043
}
1044
1045
/* Add the inotify fd to the epoll set */
1046
const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1047
&(struct epoll_event)
1048
{ .events=EPOLLIN | EPOLLRDHUP });
1049
if(ret != 0 and errno != EEXIST){
1050
error(0, errno, "Failed to add file descriptor to epoll set");
1051
close(fd);
1052
return false;
1053
}
1054
1055
const task_context read_inotify_event_task = {
1056
.func=read_inotify_event,
1057
.epoll_fd=epoll_fd,
1058
.quit_now=quit_now,
1059
.password=password,
1060
.fd=fd,
1061
.filename=strdup(dir),
1062
.cancelled_filenames=cancelled_filenames,
1063
.current_time=current_time,
1064
.mandos_client_exited=mandos_client_exited,
1065
.password_is_read=password_is_read,
1066
};
1067
if(read_inotify_event_task.filename == NULL){
1068
error(0, errno, "Failed to strdup(\"%s\")", dir);
1069
close(fd);
1070
return false;
1071
}
1072
1073
return add_to_queue(queue, read_inotify_event_task);
1074
}
1075
1076
__attribute__((nonnull))
1077
void read_inotify_event(const task_context task,
1078
task_queue *const queue){
1079
const int fd = task.fd;
1080
const int epoll_fd = task.epoll_fd;
1081
char *const filename = task.filename;
1082
bool *quit_now = task.quit_now;
1083
buffer *const password = task.password;
1084
string_set *const cancelled_filenames = task.cancelled_filenames;
1085
const mono_microsecs *const current_time = task.current_time;
1086
bool *const mandos_client_exited = task.mandos_client_exited;
1087
bool *const password_is_read = task.password_is_read;
1088
1089
/* "sufficient to read at least one event." - inotify(7) */
1090
const size_t ievent_size = (sizeof(struct inotify_event)
1091
+ NAME_MAX + 1);
1092
struct {
1093
struct inotify_event event;
1094
char name_buffer[NAME_MAX + 1];
1095
} ievent_buffer;
1096
struct inotify_event *const ievent = &ievent_buffer.event;
1097
1098
const ssize_t read_length = read(fd, ievent, ievent_size);
1099
if(read_length == 0){ /* EOF */
1100
error(0, 0, "Got EOF from inotify fd for directory %s", filename);
1101
*quit_now = true;
1102
cleanup_task(&task);
1103
return;
1104
}
1105
if(read_length < 0 and errno != EAGAIN){ /* Actual error */
1106
error(0, errno, "Failed to read from inotify fd for directory %s",
1107
filename);
1108
*quit_now = true;
1109
cleanup_task(&task);
1110
return;
1111
}
1112
if(read_length > 0 /* Data has been read */
1113
and fnmatch("ask.*", ievent->name, FNM_FILE_NAME) == 0){
1114
char *question_filename = NULL;
1115
const ssize_t question_filename_length
1116
= asprintf(&question_filename, "%s/%s", filename, ievent->name);
1117
if(question_filename_length < 0){
1118
error(0, errno, "Failed to create file name from directory name"
1119
" %s and file name %s", filename, ievent->name);
1120
} else {
1121
if(ievent->mask & (IN_CLOSE_WRITE | IN_MOVED_TO)){
1122
if(not add_to_queue(queue, (task_context){
1123
.func=open_and_parse_question,
1124
.epoll_fd=epoll_fd,
1125
.question_filename=question_filename,
1126
.filename=question_filename,
1127
.password=password,
1128
.cancelled_filenames=cancelled_filenames,
1129
.current_time=current_time,
1130
.mandos_client_exited=mandos_client_exited,
1131
.password_is_read=password_is_read,
1132
})){
1133
error(0, errno, "Failed to add open_and_parse_question task"
1134
" for file name %s to queue", filename);
1135
} else {
1136
/* Force the added task (open_and_parse_question) to run
1137
immediately */
1138
queue->next_run = 1;
1139
}
1140
} else if(ievent->mask & (IN_MOVED_FROM | IN_DELETE)){
1141
if(not string_set_add(cancelled_filenames,
1142
question_filename)){
1143
error(0, errno, "Could not add question %s to"
1144
" cancelled_questions", question_filename);
1145
*quit_now = true;
1146
free(question_filename);
1147
cleanup_task(&task);
1148
return;
1149
}
1150
free(question_filename);
1151
}
1152
}
1153
}
1154
1155
/* Either data was read, or EAGAIN was indicated, meaning no data
1156
available yet */
1157
1158
/* Re-add myself to the queue */
1159
if(not add_to_queue(queue, task)){
1160
error(0, errno, "Failed to re-add read_inotify_event(%s) to"
1161
" queue", filename);
1162
*quit_now = true;
1163
cleanup_task(&task);
1164
return;
1165
}
1166
1167
/* Re-add the fd to the epoll set */
1168
const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1169
&(struct epoll_event)
1170
{ .events=EPOLLIN | EPOLLRDHUP });
1171
if(ret != 0 and errno != EEXIST){
1172
error(0, errno, "Failed to re-add inotify file descriptor %d for"
1173
" directory %s to epoll set", fd, filename);
1174
/* Force the added task (read_inotify_event) to run again, at most
1175
one second from now */
1176
if((queue->next_run == 0)
1177
or (queue->next_run > (*current_time + 1000000))){
1178
queue->next_run = *current_time + 1000000;
1179
}
1180
}
1181
}
1182
1183
__attribute__((nonnull))
1184
void open_and_parse_question(const task_context task,
1185
task_queue *const queue){
1186
__attribute__((cleanup(cleanup_string)))
1187
char *question_filename = task.question_filename;
1188
const int epoll_fd = task.epoll_fd;
1189
buffer *const password = task.password;
1190
string_set *const cancelled_filenames = task.cancelled_filenames;
1191
const mono_microsecs *const current_time = task.current_time;
1192
bool *const mandos_client_exited = task.mandos_client_exited;
1193
bool *const password_is_read = task.password_is_read;
1194
1195
/* We use the GLib "Key-value file parser" functions to parse the
1196
question file. See <https://www.freedesktop.org/wiki/Software
1197
/systemd/PasswordAgents/> for specification of contents */
1198
__attribute__((nonnull))
1199
void cleanup_g_key_file(GKeyFile **key_file){
1200
if(*key_file != NULL){
1201
g_key_file_free(*key_file);
1202
}
1203
}
1204
1205
__attribute__((cleanup(cleanup_g_key_file)))
1206
GKeyFile *key_file = g_key_file_new();
1207
if(key_file == NULL){
1208
error(0, errno, "Failed g_key_file_new() for \"%s\"",
1209
question_filename);
1210
return;
1211
}
1212
GError *glib_error = NULL;
1213
if(g_key_file_load_from_file(key_file, question_filename,
1214
G_KEY_FILE_NONE, &glib_error) != TRUE){
1215
/* If a file was removed, we should ignore it, so */
1216
/* only show error message if file actually existed */
1217
if(glib_error->code != G_FILE_ERROR_NOENT){
1218
error(0, 0, "Failed to load question data from file \"%s\": %s",
1219
question_filename, glib_error->message);
1220
}
1221
return;
1222
}
1223
1224
__attribute__((cleanup(cleanup_string)))
1225
char *socket_name = g_key_file_get_string(key_file, "Ask",
1226
"Socket",
1227
&glib_error);
1228
if(socket_name == NULL){
1229
error(0, 0, "Question file \"%s\" did not contain \"Socket\": %s",
1230
question_filename, glib_error->message);
1231
return;
1232
}
1233
1234
if(strlen(socket_name) == 0){
1235
error(0, 0, "Question file \"%s\" had empty \"Socket\" value",
1236
question_filename);
1237
return;
1238
}
1239
1240
const guint64 pid = g_key_file_get_uint64(key_file, "Ask", "PID",
1241
&glib_error);
1242
if(glib_error != NULL){
1243
error(0, 0, "Question file \"%s\" contained bad \"PID\": %s",
1244
question_filename, glib_error->message);
1245
return;
1246
}
1247
1248
if((pid != (guint64)((pid_t)pid))
1249
or (kill((pid_t)pid, 0) != 0)){
1250
error(0, 0, "PID %" PRIuMAX " in question file \"%s\" is bad or"
1251
" does not exist", (uintmax_t)pid, question_filename);
1252
return;
1253
}
1254
1255
guint64 notafter = g_key_file_get_uint64(key_file, "Ask",
1256
"NotAfter", &glib_error);
1257
if(glib_error != NULL){
1258
if(glib_error->code != G_KEY_FILE_ERROR_KEY_NOT_FOUND){
1259
error(0, 0, "Question file \"%s\" contained bad \"NotAfter\":"
1260
" %s", question_filename, glib_error->message);
1261
}
1262
notafter = 0;
1263
}
1264
if(notafter != 0){
1265
if(queue->next_run == 0 or (queue->next_run > notafter)){
1266
queue->next_run = notafter;
1267
}
1268
if(*current_time >= notafter){
1269
return;
1270
}
1271
}
1272
1273
const task_context connect_question_socket_task = {
1274
.func=connect_question_socket,
1275
.question_filename=strdup(question_filename),
1276
.epoll_fd=epoll_fd,
1277
.password=password,
1278
.filename=strdup(socket_name),
1279
.cancelled_filenames=task.cancelled_filenames,
1280
.mandos_client_exited=mandos_client_exited,
1281
.password_is_read=password_is_read,
1282
.current_time=current_time,
1283
};
1284
if(connect_question_socket_task.question_filename == NULL
1285
or connect_question_socket_task.filename == NULL
1286
or not add_to_queue(queue, connect_question_socket_task)){
1287
error(0, errno, "Failed to add connect_question_socket for socket"
1288
" %s (from \"%s\") to queue", socket_name,
1289
question_filename);
1290
cleanup_task(&connect_question_socket_task);
1291
return;
1292
}
1293
/* Force the added task (connect_question_socket) to run
1294
immediately */
1295
queue->next_run = 1;
1296
1297
if(notafter > 0){
1298
char *const dup_filename = strdup(question_filename);
1299
const task_context cancel_old_question_task = {
1300
.func=cancel_old_question,
1301
.question_filename=dup_filename,
1302
.notafter=notafter,
1303
.filename=dup_filename,
1304
.cancelled_filenames=cancelled_filenames,
1305
.current_time=current_time,
1306
};
1307
if(cancel_old_question_task.question_filename == NULL
1308
or not add_to_queue(queue, cancel_old_question_task)){
1309
error(0, errno, "Failed to add cancel_old_question for file "
1310
"\"%s\" to queue", question_filename);
1311
cleanup_task(&cancel_old_question_task);
1312
return;
1313
}
1314
}
1315
}
1316
1317
__attribute__((nonnull))
1318
void cancel_old_question(const task_context task,
1319
task_queue *const queue){
1320
char *const question_filename = task.question_filename;
1321
string_set *const cancelled_filenames = task.cancelled_filenames;
1322
const mono_microsecs notafter = task.notafter;
1323
const mono_microsecs *const current_time = task.current_time;
1324
1325
if(*current_time >= notafter){
1326
if(not string_set_add(cancelled_filenames, question_filename)){
1327
error(0, errno, "Failed to cancel question for file %s",
1328
question_filename);
1329
}
1330
cleanup_task(&task);
1331
return;
1332
}
1333
1334
if(not add_to_queue(queue, task)){
1335
error(0, errno, "Failed to add cancel_old_question for file "
1336
"%s to queue", question_filename);
1337
cleanup_task(&task);
1338
return;
1339
}
1340
1341
if((queue->next_run == 0) or (queue->next_run > notafter)){
1342
queue->next_run = notafter;
1343
}
1344
}
1345
1346
__attribute__((nonnull))
1347
void connect_question_socket(const task_context task,
1348
task_queue *const queue){
1349
char *const question_filename = task.question_filename;
1350
char *const filename = task.filename;
1351
const int epoll_fd = task.epoll_fd;
1352
buffer *const password = task.password;
1353
string_set *const cancelled_filenames = task.cancelled_filenames;
1354
bool *const mandos_client_exited = task.mandos_client_exited;
1355
bool *const password_is_read = task.password_is_read;
1356
const mono_microsecs *const current_time = task.current_time;
1357
1358
struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
1359
1360
if(sizeof(sock_name.sun_path) <= strlen(filename)){
1361
error(0, 0, "Socket filename is larger than"
1362
" sizeof(sockaddr_un.sun_path); %" PRIuMAX ": \"%s\"",
1363
(uintmax_t)sizeof(sock_name.sun_path), filename);
1364
if(not string_set_add(cancelled_filenames, question_filename)){
1365
error(0, errno, "Failed to cancel question for file %s",
1366
question_filename);
1367
}
1368
cleanup_task(&task);
1369
return;
1370
}
1371
1372
const int fd = socket(PF_LOCAL, SOCK_DGRAM
1373
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
1374
if(fd < 0){
1375
error(0, errno,
1376
"Failed to create socket(PF_LOCAL, SOCK_DGRAM, 0)");
1377
if(not add_to_queue(queue, task)){
1378
error(0, errno, "Failed to add connect_question_socket for file"
1379
" \"%s\" and socket \"%s\" to queue", question_filename,
1380
filename);
1381
cleanup_task(&task);
1382
} else {
1383
/* Force the added task (connect_question_socket) to run
1384
immediately */
1385
queue->next_run = 1;
1386
}
1387
return;
1388
}
1389
1390
strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
1391
if(connect(fd, (struct sockaddr *)&sock_name,
1392
(socklen_t)SUN_LEN(&sock_name)) != 0){
1393
error(0, errno, "Failed to connect socket to \"%s\"", filename);
1394
if(not add_to_queue(queue, task)){
1395
error(0, errno, "Failed to add connect_question_socket for file"
1396
" \"%s\" and socket \"%s\" to queue", question_filename,
1397
filename);
1398
cleanup_task(&task);
1399
} else {
1400
/* Force the added task (connect_question_socket) to run again,
1401
at most one second from now */
1402
if((queue->next_run == 0)
1403
or (queue->next_run > (*current_time + 1000000))){
1404
queue->next_run = *current_time + 1000000;
1405
}
1406
}
1407
return;
1408
}
1409
1410
/* Not necessary, but we can try, and merely warn on failure */
1411
if(shutdown(fd, SHUT_RD) != 0){
1412
error(0, errno, "Failed to shutdown reading from socket \"%s\"",
1413
filename);
1414
}
1415
1416
/* Add the fd to the epoll set */
1417
if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1418
&(struct epoll_event){ .events=EPOLLOUT })
1419
!= 0){
1420
error(0, errno, "Failed to add inotify file descriptor %d for"
1421
" socket %s to epoll set", fd, filename);
1422
if(not add_to_queue(queue, task)){
1423
error(0, errno, "Failed to add connect_question_socket for file"
1424
" \"%s\" and socket \"%s\" to queue", question_filename,
1425
filename);
1426
cleanup_task(&task);
1427
} else {
1428
/* Force the added task (connect_question_socket) to run again,
1429
at most one second from now */
1430
if((queue->next_run == 0)
1431
or (queue->next_run > (*current_time + 1000000))){
1432
queue->next_run = *current_time + 1000000;
1433
}
1434
}
1435
return;
1436
}
1437
1438
/* add task send_password_to_socket to queue */
1439
const task_context send_password_to_socket_task = {
1440
.func=send_password_to_socket,
1441
.question_filename=question_filename,
1442
.filename=filename,
1443
.epoll_fd=epoll_fd,
1444
.fd=fd,
1445
.password=password,
1446
.cancelled_filenames=cancelled_filenames,
1447
.mandos_client_exited=mandos_client_exited,
1448
.password_is_read=password_is_read,
1449
.current_time=current_time,
1450
};
1451
1452
if(not add_to_queue(queue, send_password_to_socket_task)){
1453
error(0, errno, "Failed to add send_password_to_socket for"
1454
" file \"%s\" and socket \"%s\" to queue",
1455
question_filename, filename);
1456
cleanup_task(&send_password_to_socket_task);
1457
}
1458
}
1459
1460
__attribute__((nonnull))
1461
void send_password_to_socket(const task_context task,
1462
task_queue *const queue){
1463
char *const question_filename=task.question_filename;
1464
char *const filename=task.filename;
1465
const int epoll_fd=task.epoll_fd;
1466
const int fd=task.fd;
1467
buffer *const password=task.password;
1468
string_set *const cancelled_filenames=task.cancelled_filenames;
1469
bool *const mandos_client_exited = task.mandos_client_exited;
1470
bool *const password_is_read = task.password_is_read;
1471
const mono_microsecs *const current_time = task.current_time;
1472
1473
if(*mandos_client_exited and *password_is_read){
1474
1475
const size_t send_buffer_length = password->length + 2;
1476
char *send_buffer = malloc(send_buffer_length);
1477
if(send_buffer == NULL){
1478
error(0, errno, "Failed to allocate send_buffer");
1479
} else {
1480
if(mlock(send_buffer, send_buffer_length) != 0){
1481
/* Warn but do not treat as fatal error */
1482
if(errno != EPERM and errno != ENOMEM){
1483
error(0, errno, "Failed to lock memory for password"
1484
" buffer");
1485
}
1486
}
1487
/* “[…] send a single datagram to the socket consisting of the
1488
password string either prefixed with "+" or with "-"
1489
depending on whether the password entry was successful or
1490
not. You may but don't have to include a final NUL byte in
1491
your message.
1492
1493
— <https://www.freedesktop.org/wiki/Software/systemd/
1494
PasswordAgents/> (Wed 08 Oct 2014 02:14:28 AM UTC)
1495
*/
1496
send_buffer[0] = '+'; /* Prefix with "+" */
1497
/* Always add an extra NUL */
1498
send_buffer[password->length + 1] = '\0';
1499
if(password->length > 0){
1500
memcpy(send_buffer + 1, password->data, password->length);
1501
}
1502
errno = 0;
1503
ssize_t ssret = send(fd, send_buffer, send_buffer_length,
1504
MSG_NOSIGNAL);
1505
const error_t saved_errno = errno;
1506
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
1507
explicit_bzero(send_buffer, send_buffer_length);
1508
#else
1509
memset(send_buffer, '\0', send_buffer_length);
1510
#endif
1511
if(munlock(send_buffer, send_buffer_length) != 0){
1512
error(0, errno, "Failed to unlock memory of send buffer");
1513
}
1514
free(send_buffer);
1515
if(ssret < 0 or ssret < (ssize_t)send_buffer_length){
1516
switch(saved_errno){
1517
case EINTR:
1518
case ENOBUFS:
1519
case ENOMEM:
1520
case EADDRINUSE:
1521
case ECONNREFUSED:
1522
case ECONNRESET:
1523
case ENOENT:
1524
case ETOOMANYREFS:
1525
case EAGAIN:
1526
/* Retry, below */
1527
break;
1528
case EMSGSIZE:
1529
error(0, 0, "Password of size %" PRIuMAX " is too big",
1530
(uintmax_t)password->length);
1531
#if __GNUC__ < 7
1532
/* FALLTHROUGH */
1533
#else
1534
__attribute__((fallthrough));
1535
#endif
1536
case 0:
1537
if(ssret >= 0 and ssret < (ssize_t)send_buffer_length){
1538
error(0, 0, "Password only partially sent to socket");
1539
}
1540
#if __GNUC__ < 7
1541
/* FALLTHROUGH */
1542
#else
1543
__attribute__((fallthrough));
1544
#endif
1545
default:
1546
error(0, saved_errno, "Failed to send() to socket %s",
1547
filename);
1548
if(not string_set_add(cancelled_filenames,
1549
question_filename)){
1550
error(0, errno, "Failed to cancel question for file %s",
1551
question_filename);
1552
}
1553
cleanup_task(&task);
1554
return;
1555
}
1556
} else {
1557
/* Success */
1558
cleanup_task(&task);
1559
return;
1560
}
1561
}
1562
}
1563
1564
/* We failed or are not ready yet; retry later */
1565
1566
if(not add_to_queue(queue, task)){
1567
error(0, errno, "Failed to add send_password_to_socket for"
1568
" file %s and socket %s to queue", question_filename,
1569
filename);
1570
cleanup_task(&task);
1571
}
1572
1573
/* Add the fd to the epoll set */
1574
if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1575
&(struct epoll_event){ .events=EPOLLOUT })
1576
!= 0){
1577
error(0, errno, "Failed to add socket file descriptor %d for"
1578
" socket %s to epoll set", fd, filename);
1579
/* Force the added task (send_password_to_socket) to run again, at
1580
most one second from now */
1581
if((queue->next_run == 0)
1582
or (queue->next_run > (*current_time + 1000000))){
1583
queue->next_run = *current_time + 1000000;
1584
}
1585
}
1586
}
1587
1588
__attribute__((warn_unused_result))
1589
bool add_existing_questions(task_queue *const queue,
1590
const int epoll_fd,
1591
buffer *const password,
1592
string_set *cancelled_filenames,
1593
const mono_microsecs *const current_time,
1594
bool *const mandos_client_exited,
1595
bool *const password_is_read,
1596
const char *const dirname){
1597
__attribute__((cleanup(cleanup_string)))
1598
char *dir_pattern = NULL;
1599
const int ret = asprintf(&dir_pattern, "%s/ask.*", dirname);
1600
if(ret < 0 or dir_pattern == NULL){
1601
error(0, errno, "Could not create glob pattern for directory %s",
1602
dirname);
1603
return false;
1604
}
1605
__attribute__((cleanup(globfree)))
1606
glob_t question_filenames = {};
1607
switch(glob(dir_pattern, GLOB_ERR | GLOB_NOSORT | GLOB_MARK,
1608
NULL, &question_filenames)){
1609
case GLOB_ABORTED:
1610
default:
1611
error(0, errno, "Failed to open directory %s", dirname);
1612
return false;
1613
case GLOB_NOMATCH:
1614
error(0, errno, "There are no question files in %s", dirname);
1615
return false;
1616
case GLOB_NOSPACE:
1617
error(0, errno, "Could not allocate memory for question file"
1618
" names in %s", dirname);
1619
#if __GNUC__ < 7
1620
/* FALLTHROUGH */
1621
#else
1622
__attribute__((fallthrough));
1623
#endif
1624
case 0:
1625
for(size_t i = 0; i < question_filenames.gl_pathc; i++){
1626
char *const question_filename = strdup(question_filenames
1627
.gl_pathv[i]);
1628
const task_context task = {
1629
.func=open_and_parse_question,
1630
.epoll_fd=epoll_fd,
1631
.question_filename=question_filename,
1632
.filename=question_filename,
1633
.password=password,
1634
.cancelled_filenames=cancelled_filenames,
1635
.current_time=current_time,
1636
.mandos_client_exited=mandos_client_exited,
1637
.password_is_read=password_is_read,
1638
};
1639
1640
if(question_filename == NULL
1641
or not add_to_queue(queue, task)){
1642
error(0, errno, "Failed to add open_and_parse_question for"
1643
" file %s to queue",
1644
question_filenames.gl_pathv[i]);
1645
free(question_filename);
1646
} else {
1647
queue->next_run = 1;
1648
}
1649
}
1650
return true;
1651
}
1652
}
1653
1654
__attribute__((nonnull, warn_unused_result))
1655
bool wait_for_event(const int epoll_fd,
1656
const mono_microsecs queue_next_run,
1657
const mono_microsecs current_time){
1658
__attribute__((const))
1659
int milliseconds_to_wait(const mono_microsecs currtime,
1660
const mono_microsecs nextrun){
1661
if(currtime >= nextrun){
1662
return 0;
1663
}
1664
const uintmax_t wait_time_ms = (nextrun - currtime) / 1000;
1665
if(wait_time_ms > (uintmax_t)INT_MAX){
1666
return INT_MAX;
1667
}
1668
return (int)wait_time_ms;
1669
}
1670
1671
const int wait_time_ms = milliseconds_to_wait(current_time,
1672
queue_next_run);
1673
1674
/* Prepare unblocking of SIGCHLD during epoll_pwait */
1675
sigset_t temporary_unblocked_sigmask;
1676
/* Get current signal mask */
1677
if(pthread_sigmask(-1, NULL, &temporary_unblocked_sigmask) != 0){
1678
return false;
1679
}
1680
/* Remove SIGCHLD from the signal mask */
1681
if(sigdelset(&temporary_unblocked_sigmask, SIGCHLD) != 0){
1682
return false;
1683
}
1684
struct epoll_event events[8]; /* Ignored */
1685
int ret = epoll_pwait(epoll_fd, events,
1686
sizeof(events) / sizeof(struct epoll_event),
1687
queue_next_run == 0 ? -1 : (int)wait_time_ms,
1688
&temporary_unblocked_sigmask);
1689
if(ret < 0 and errno != EINTR){
1690
error(0, errno, "Failed epoll_pwait(epfd=%d, ..., timeout=%d,"
1691
" ...", epoll_fd,
1692
queue_next_run == 0 ? -1 : (int)wait_time_ms);
1693
return false;
1694
}
1695
return clear_all_fds_from_epoll_set(epoll_fd);
1696
}
1697
1698
bool clear_all_fds_from_epoll_set(const int epoll_fd){
1699
/* Create a new empty epoll set */
1700
__attribute__((cleanup(cleanup_close)))
1701
const int new_epoll_fd = epoll_create1(EPOLL_CLOEXEC);
1702
if(new_epoll_fd < 0){
1703
return false;
1704
}
1705
/* dup3() the new epoll set fd over the old one, replacing it */
1706
if(dup3(new_epoll_fd, epoll_fd, O_CLOEXEC) < 0){
1707
return false;
1708
}
1709
return true;
1710
}
1711
1712
__attribute__((nonnull, warn_unused_result))
1713
bool run_queue(task_queue **const queue,
1714
string_set *const cancelled_filenames,
1715
bool *const quit_now){
1716
1717
task_queue *new_queue = create_queue();
1718
if(new_queue == NULL){
1719
return false;
1720
}
1721
1722
__attribute__((cleanup(string_set_clear)))
1723
string_set old_cancelled_filenames = {};
1724
string_set_swap(cancelled_filenames, &old_cancelled_filenames);
1725
1726
/* Declare i outside the for loop, since we might need i after the
1727
loop in case we aborted in the middle */
1728
size_t i;
1729
for(i=0; i < (*queue)->length and not *quit_now; i++){
1730
task_context *const task = &((*queue)->tasks[i]);
1731
const char *const question_filename = task->question_filename;
1732
/* Skip any task referencing a cancelled question filename */
1733
if(question_filename != NULL
1734
and string_set_contains(old_cancelled_filenames,
1735
question_filename)){
1736
cleanup_task(task);
1737
continue;
1738
}
1739
task->func(*task, new_queue);
1740
}
1741
1742
if(*quit_now){
1743
/* we might be in the middle of the queue, so clean up any
1744
remaining tasks in the current queue */
1745
for(; i < (*queue)->length; i++){
1746
cleanup_task(&((*queue)->tasks[i]));
1747
}
1748
free_queue(*queue);
1749
*queue = new_queue;
1750
new_queue = NULL;
1751
return false;
1752
}
1753
free_queue(*queue);
1754
*queue = new_queue;
1755
new_queue = NULL;
1756
1757
return true;
1758
}
1759
1760
/* End of regular code section */
1761
1762
/* Start of tests section; here are the tests for the above code */
1763
1764
/* This "fixture" data structure is used by the test setup and
1765
teardown functions */
1766
typedef struct {
1767
struct sigaction orig_sigaction;
1768
sigset_t orig_sigmask;
1769
} test_fixture;
1770
1771
static void test_setup(test_fixture *fixture,
1772
__attribute__((unused))
1773
gconstpointer user_data){
1774
g_assert_true(setup_signal_handler(&fixture->orig_sigaction));
1775
g_assert_true(block_sigchld(&fixture->orig_sigmask));
1776
}
1777
1778
static void test_teardown(test_fixture *fixture,
1779
__attribute__((unused))
1780
gconstpointer user_data){
1781
g_assert_true(restore_signal_handler(&fixture->orig_sigaction));
1782
g_assert_true(restore_sigmask(&fixture->orig_sigmask));
1783
}
1784
1785
/* Utility function used by tests to search queue for matching task */
1786
__attribute__((pure, nonnull, warn_unused_result))
1787
static task_context *find_matching_task(const task_queue *const queue,
1788
const task_context task){
1789
/* The argument "task" structure is a pattern to match; 0 in any
1790
member means any value matches, otherwise the value must match.
1791
The filename strings are compared by strcmp(), not by pointer. */
1792
for(size_t i = 0; i < queue->length; i++){
1793
task_context *const current_task = queue->tasks+i;
1794
/* Check all members of task_context, if set to a non-zero value.
1795
If a member does not match, continue to next task in queue */
1796
1797
/* task_func *const func */
1798
if(task.func != NULL and current_task->func != task.func){
1799
continue;
1800
}
1801
/* char *const question_filename; */
1802
if(task.question_filename != NULL
1803
and (current_task->question_filename == NULL
1804
or strcmp(current_task->question_filename,
1805
task.question_filename) != 0)){
1806
continue;
1807
}
1808
/* const pid_t pid; */
1809
if(task.pid != 0 and current_task->pid != task.pid){
1810
continue;
1811
}
1812
/* const int epoll_fd; */
1813
if(task.epoll_fd != 0
1814
and current_task->epoll_fd != task.epoll_fd){
1815
continue;
1816
}
1817
/* bool *const quit_now; */
1818
if(task.quit_now != NULL
1819
and current_task->quit_now != task.quit_now){
1820
continue;
1821
}
1822
/* const int fd; */
1823
if(task.fd != 0 and current_task->fd != task.fd){
1824
continue;
1825
}
1826
/* bool *const mandos_client_exited; */
1827
if(task.mandos_client_exited != NULL
1828
and current_task->mandos_client_exited
1829
!= task.mandos_client_exited){
1830
continue;
1831
}
1832
/* buffer *const password; */
1833
if(task.password != NULL
1834
and current_task->password != task.password){
1835
continue;
1836
}
1837
/* bool *const password_is_read; */
1838
if(task.password_is_read != NULL
1839
and current_task->password_is_read != task.password_is_read){
1840
continue;
1841
}
1842
/* char *filename; */
1843
if(task.filename != NULL
1844
and (current_task->filename == NULL
1845
or strcmp(current_task->filename, task.filename) != 0)){
1846
continue;
1847
}
1848
/* string_set *const cancelled_filenames; */
1849
if(task.cancelled_filenames != NULL
1850
and current_task->cancelled_filenames
1851
!= task.cancelled_filenames){
1852
continue;
1853
}
1854
/* const mono_microsecs notafter; */
1855
if(task.notafter != 0
1856
and current_task->notafter != task.notafter){
1857
continue;
1858
}
1859
/* const mono_microsecs *const current_time; */
1860
if(task.current_time != NULL
1861
and current_task->current_time != task.current_time){
1862
continue;
1863
}
1864
/* Current task matches all members; return it */
1865
return current_task;
1866
}
1867
/* No task in queue matches passed pattern task */
1868
return NULL;
1869
}
1870
1871
static void test_create_queue(__attribute__((unused))
1872
test_fixture *fixture,
1873
__attribute__((unused))
1874
gconstpointer user_data){
1875
__attribute__((cleanup(cleanup_queue)))
1876
task_queue *const queue = create_queue();
1877
g_assert_nonnull(queue);
1878
g_assert_null(queue->tasks);
1879
g_assert_true(queue->length == 0);
1880
g_assert_true(queue->next_run == 0);
1881
}
1882
1883
static task_func dummy_func;
1884
1885
static void test_add_to_queue(__attribute__((unused))
1886
test_fixture *fixture,
1887
__attribute__((unused))
1888
gconstpointer user_data){
1889
__attribute__((cleanup(cleanup_queue)))
1890
task_queue *queue = create_queue();
1891
g_assert_nonnull(queue);
1892
1893
g_assert_true(add_to_queue(queue,
1894
(task_context){ .func=dummy_func }));
1895
g_assert_true(queue->length == 1);
1896
g_assert_nonnull(queue->tasks);
1897
g_assert_true(queue->tasks[0].func == dummy_func);
1898
}
1899
1900
static void test_add_to_queue_overflow(__attribute__((unused))
1901
test_fixture *fixture,
1902
__attribute__((unused))
1903
gconstpointer user_data){
1904
__attribute__((cleanup(cleanup_queue)))
1905
task_queue *queue = create_queue();
1906
g_assert_nonnull(queue);
1907
g_assert_true(queue->length == 0);
1908
queue->length = SIZE_MAX / sizeof(task_context); /* fake max size */
1909
1910
FILE *real_stderr = stderr;
1911
FILE *devnull = fopen("/dev/null", "we");
1912
g_assert_nonnull(devnull);
1913
stderr = devnull;
1914
const bool ret = add_to_queue(queue,
1915
(task_context){ .func=dummy_func });
1916
g_assert_true(errno == ENOMEM);
1917
g_assert_false(ret);
1918
stderr = real_stderr;
1919
g_assert_cmpint(fclose(devnull), ==, 0);
1920
queue->length = 0; /* Restore real size */
1921
}
1922
1923
static void dummy_func(__attribute__((unused))
1924
const task_context task,
1925
__attribute__((unused))
1926
task_queue *const queue){
1927
}
1928
1929
static void test_queue_has_question_empty(__attribute__((unused))
1930
test_fixture *fixture,
1931
__attribute__((unused))
1932
gconstpointer user_data){
1933
__attribute__((cleanup(cleanup_queue)))
1934
task_queue *queue = create_queue();
1935
g_assert_nonnull(queue);
1936
g_assert_false(queue_has_question(queue));
1937
}
1938
1939
static void test_queue_has_question_false(__attribute__((unused))
1940
test_fixture *fixture,
1941
__attribute__((unused))
1942
gconstpointer user_data){
1943
__attribute__((cleanup(cleanup_queue)))
1944
task_queue *queue = create_queue();
1945
g_assert_nonnull(queue);
1946
g_assert_true(add_to_queue(queue,
1947
(task_context){ .func=dummy_func }));
1948
g_assert_false(queue_has_question(queue));
1949
}
1950
1951
static void test_queue_has_question_true(__attribute__((unused))
1952
test_fixture *fixture,
1953
__attribute__((unused))
1954
gconstpointer user_data){
1955
__attribute__((cleanup(cleanup_queue)))
1956
task_queue *queue = create_queue();
1957
g_assert_nonnull(queue);
1958
char *const question_filename
1959
= strdup("/nonexistent/question_filename");
1960
g_assert_nonnull(question_filename);
1961
task_context task = {
1962
.func=dummy_func,
1963
.question_filename=question_filename,
1964
};
1965
g_assert_true(add_to_queue(queue, task));
1966
g_assert_true(queue_has_question(queue));
1967
}
1968
1969
static void test_queue_has_question_false2(__attribute__((unused))
1970
test_fixture *fixture,
1971
__attribute__((unused))
1972
gconstpointer user_data){
1973
__attribute__((cleanup(cleanup_queue)))
1974
task_queue *queue = create_queue();
1975
g_assert_nonnull(queue);
1976
task_context task = { .func=dummy_func };
1977
g_assert_true(add_to_queue(queue, task));
1978
g_assert_true(add_to_queue(queue, task));
1979
g_assert_cmpint((int)queue->length, ==, 2);
1980
g_assert_false(queue_has_question(queue));
1981
}
1982
1983
static void test_queue_has_question_true2(__attribute__((unused))
1984
test_fixture *fixture,
1985
__attribute__((unused))
1986
gconstpointer user_data){
1987
__attribute__((cleanup(cleanup_queue)))
1988
task_queue *queue = create_queue();
1989
g_assert_nonnull(queue);
1990
task_context task1 = { .func=dummy_func };
1991
g_assert_true(add_to_queue(queue, task1));
1992
char *const question_filename
1993
= strdup("/nonexistent/question_filename");
1994
g_assert_nonnull(question_filename);
1995
task_context task2 = {
1996
.func=dummy_func,
1997
.question_filename=question_filename,
1998
};
1999
g_assert_true(add_to_queue(queue, task2));
2000
g_assert_cmpint((int)queue->length, ==, 2);
2001
g_assert_true(queue_has_question(queue));
2002
}
2003
2004
static void test_cleanup_buffer(__attribute__((unused))
2005
test_fixture *fixture,
2006
__attribute__((unused))
2007
gconstpointer user_data){
2008
buffer buf = {};
2009
2010
const size_t buffersize = 10;
2011
2012
buf.data = malloc(buffersize);
2013
g_assert_nonnull(buf.data);
2014
if(mlock(buf.data, buffersize) != 0){
2015
g_assert_true(errno == EPERM or errno == ENOMEM);
2016
}
2017
2018
cleanup_buffer(&buf);
2019
g_assert_null(buf.data);
2020
}
2021
2022
static
2023
void test_string_set_new_set_contains_nothing(__attribute__((unused))
2024
test_fixture *fixture,
2025
__attribute__((unused))
2026
gconstpointer
2027
user_data){
2028
__attribute__((cleanup(string_set_clear)))
2029
string_set set = {};
2030
g_assert_false(string_set_contains(set, "")); /* Empty string */
2031
g_assert_false(string_set_contains(set, "test_string"));
2032
}
2033
2034
static void
2035
test_string_set_with_added_string_contains_it(__attribute__((unused))
2036
test_fixture *fixture,
2037
__attribute__((unused))
2038
gconstpointer
2039
user_data){
2040
__attribute__((cleanup(string_set_clear)))
2041
string_set set = {};
2042
g_assert_true(string_set_add(&set, "test_string"));
2043
g_assert_true(string_set_contains(set, "test_string"));
2044
}
2045
2046
static void
2047
test_string_set_cleared_does_not_contain_str(__attribute__((unused))
2048
test_fixture *fixture,
2049
__attribute__((unused))
2050
gconstpointer user_data){
2051
__attribute__((cleanup(string_set_clear)))
2052
string_set set = {};
2053
g_assert_true(string_set_add(&set, "test_string"));
2054
string_set_clear(&set);
2055
g_assert_false(string_set_contains(set, "test_string"));
2056
}
2057
2058
static
2059
void test_string_set_swap_one_with_empty(__attribute__((unused))
2060
test_fixture *fixture,
2061
__attribute__((unused))
2062
gconstpointer user_data){
2063
__attribute__((cleanup(string_set_clear)))
2064
string_set set1 = {};
2065
__attribute__((cleanup(string_set_clear)))
2066
string_set set2 = {};
2067
g_assert_true(string_set_add(&set1, "test_string1"));
2068
string_set_swap(&set1, &set2);
2069
g_assert_false(string_set_contains(set1, "test_string1"));
2070
g_assert_true(string_set_contains(set2, "test_string1"));
2071
}
2072
2073
static
2074
void test_string_set_swap_empty_with_one(__attribute__((unused))
2075
test_fixture *fixture,
2076
__attribute__((unused))
2077
gconstpointer user_data){
2078
__attribute__((cleanup(string_set_clear)))
2079
string_set set1 = {};
2080
__attribute__((cleanup(string_set_clear)))
2081
string_set set2 = {};
2082
g_assert_true(string_set_add(&set2, "test_string2"));
2083
string_set_swap(&set1, &set2);
2084
g_assert_true(string_set_contains(set1, "test_string2"));
2085
g_assert_false(string_set_contains(set2, "test_string2"));
2086
}
2087
2088
static void test_string_set_swap_one_with_one(__attribute__((unused))
2089
test_fixture *fixture,
2090
__attribute__((unused))
2091
gconstpointer
2092
user_data){
2093
__attribute__((cleanup(string_set_clear)))
2094
string_set set1 = {};
2095
__attribute__((cleanup(string_set_clear)))
2096
string_set set2 = {};
2097
g_assert_true(string_set_add(&set1, "test_string1"));
2098
g_assert_true(string_set_add(&set2, "test_string2"));
2099
string_set_swap(&set1, &set2);
2100
g_assert_false(string_set_contains(set1, "test_string1"));
2101
g_assert_true(string_set_contains(set1, "test_string2"));
2102
g_assert_false(string_set_contains(set2, "test_string2"));
2103
g_assert_true(string_set_contains(set2, "test_string1"));
2104
}
2105
2106
static bool fd_has_cloexec_and_nonblock(const int);
2107
2108
static bool epoll_set_contains(int, int, uint32_t);
2109
2110
static void test_start_mandos_client(test_fixture *fixture,
2111
__attribute__((unused))
2112
gconstpointer user_data){
2113
2114
bool mandos_client_exited = false;
2115
bool quit_now = false;
2116
__attribute__((cleanup(cleanup_close)))
2117
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2118
g_assert_cmpint(epoll_fd, >=, 0);
2119
__attribute__((cleanup(cleanup_queue)))
2120
task_queue *queue = create_queue();
2121
g_assert_nonnull(queue);
2122
buffer password = {};
2123
bool password_is_read = false;
2124
const char helper_directory[] = "/nonexistent";
2125
const char *const argv[] = { "/bin/true", NULL };
2126
2127
g_assert_true(start_mandos_client(queue, epoll_fd,
2128
&mandos_client_exited, &quit_now,
2129
&password, &password_is_read,
2130
&fixture->orig_sigaction,
2131
fixture->orig_sigmask,
2132
helper_directory, 0, 0, argv));
2133
2134
g_assert_cmpuint((unsigned int)queue->length, >=, 2);
2135
2136
const task_context *const added_wait_task
2137
= find_matching_task(queue, (task_context){
2138
.func=wait_for_mandos_client_exit,
2139
.mandos_client_exited=&mandos_client_exited,
2140
.quit_now=&quit_now,
2141
});
2142
g_assert_nonnull(added_wait_task);
2143
g_assert_cmpint(added_wait_task->pid, >, 0);
2144
g_assert_cmpint(kill(added_wait_task->pid, SIGKILL), ==, 0);
2145
waitpid(added_wait_task->pid, NULL, 0);
2146
2147
const task_context *const added_read_task
2148
= find_matching_task(queue, (task_context){
2149
.func=read_mandos_client_output,
2150
.epoll_fd=epoll_fd,
2151
.password=&password,
2152
.password_is_read=&password_is_read,
2153
.quit_now=&quit_now,
2154
});
2155
g_assert_nonnull(added_read_task);
2156
g_assert_cmpint(added_read_task->fd, >, 2);
2157
g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
2158
g_assert_true(epoll_set_contains(epoll_fd, added_read_task->fd,
2159
EPOLLIN | EPOLLRDHUP));
2160
}
2161
2162
static bool fd_has_cloexec_and_nonblock(const int fd){
2163
const int socket_fd_flags = fcntl(fd, F_GETFD, 0);
2164
const int socket_file_flags = fcntl(fd, F_GETFL, 0);
2165
return ((socket_fd_flags >= 0)
2166
and (socket_fd_flags & FD_CLOEXEC)
2167
and (socket_file_flags >= 0)
2168
and (socket_file_flags & O_NONBLOCK));
2169
}
2170
2171
__attribute__((const))
2172
bool is_privileged(void){
2173
uid_t user = getuid() + 1;
2174
if(user == 0){ /* Overflow check */
2175
user++;
2176
}
2177
gid_t group = getuid() + 1;
2178
if(group == 0){ /* Overflow check */
2179
group++;
2180
}
2181
const pid_t pid = fork();
2182
if(pid == 0){ /* Child */
2183
if(setresgid((uid_t)-1, group, group) == -1){
2184
if(errno != EPERM){
2185
error(EXIT_FAILURE, errno, "Failed to setresgid(-1, %" PRIuMAX
2186
", %" PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
2187
}
2188
exit(EXIT_FAILURE);
2189
}
2190
if(setresuid((uid_t)-1, user, user) == -1){
2191
if(errno != EPERM){
2192
error(EXIT_FAILURE, errno, "Failed to setresuid(-1, %" PRIuMAX
2193
", %" PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
2194
}
2195
exit(EXIT_FAILURE);
2196
}
2197
exit(EXIT_SUCCESS);
2198
}
2199
if(pid == -1){
2200
error(EXIT_FAILURE, errno, "Failed to fork()");
2201
}
2202
2203
int status;
2204
waitpid(pid, &status, 0);
2205
if(WIFEXITED(status) and (WEXITSTATUS(status) == EXIT_SUCCESS)){
2206
return true;
2207
}
2208
return false;
2209
}
2210
2211
static bool epoll_set_contains(int epoll_fd, int fd, uint32_t events){
2212
/* Only scan for events in this eventmask */
2213
const uint32_t eventmask = EPOLLIN | EPOLLOUT | EPOLLRDHUP;
2214
__attribute__((cleanup(cleanup_string)))
2215
char *fdinfo_name = NULL;
2216
int ret = asprintf(&fdinfo_name, "/proc/self/fdinfo/%d", epoll_fd);
2217
g_assert_cmpint(ret, >, 0);
2218
g_assert_nonnull(fdinfo_name);
2219
2220
FILE *fdinfo = fopen(fdinfo_name, "r");
2221
g_assert_nonnull(fdinfo);
2222
uint32_t reported_events;
2223
buffer line = {};
2224
int found_fd = -1;
2225
2226
do {
2227
if(getline(&line.data, &line.allocated, fdinfo) < 0){
2228
break;
2229
}
2230
/* See proc(5) for format of /proc/PID/fdinfo/FD for epoll fd's */
2231
if(sscanf(line.data, "tfd: %d events: %" SCNx32 " ",
2232
&found_fd, &reported_events) == 2){
2233
if(found_fd == fd){
2234
break;
2235
}
2236
}
2237
} while(not feof(fdinfo) and not ferror(fdinfo));
2238
g_assert_cmpint(fclose(fdinfo), ==, 0);
2239
free(line.data);
2240
if(found_fd != fd){
2241
return false;
2242
}
2243
2244
if(events == 0){
2245
/* Don't check events if none are given */
2246
return true;
2247
}
2248
return (reported_events & eventmask) == (events & eventmask);
2249
}
2250
2251
static void test_start_mandos_client_execv(test_fixture *fixture,
2252
__attribute__((unused))
2253
gconstpointer user_data){
2254
bool mandos_client_exited = false;
2255
bool quit_now = false;
2256
__attribute__((cleanup(cleanup_close)))
2257
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2258
g_assert_cmpint(epoll_fd, >=, 0);
2259
__attribute__((cleanup(cleanup_queue)))
2260
task_queue *queue = create_queue();
2261
g_assert_nonnull(queue);
2262
__attribute__((cleanup(cleanup_buffer)))
2263
buffer password = {};
2264
const char helper_directory[] = "/nonexistent";
2265
/* Can't execv("/", ...), so this should fail */
2266
const char *const argv[] = { "/", NULL };
2267
2268
{
2269
__attribute__((cleanup(cleanup_close)))
2270
const int devnull_fd = open("/dev/null",
2271
O_WRONLY | O_CLOEXEC | O_NOCTTY);
2272
g_assert_cmpint(devnull_fd, >=, 0);
2273
__attribute__((cleanup(cleanup_close)))
2274
const int real_stderr_fd = dup(STDERR_FILENO);
2275
g_assert_cmpint(real_stderr_fd, >=, 0);
2276
dup2(devnull_fd, STDERR_FILENO);
2277
2278
const bool success = start_mandos_client(queue, epoll_fd,
2279
&mandos_client_exited,
2280
&quit_now,
2281
&password,
2282
(bool[]){false},
2283
&fixture->orig_sigaction,
2284
fixture->orig_sigmask,
2285
helper_directory, 0, 0,
2286
argv);
2287
dup2(real_stderr_fd, STDERR_FILENO);
2288
g_assert_true(success);
2289
}
2290
g_assert_cmpuint((unsigned int)queue->length, ==, 2);
2291
2292
struct timespec starttime, currtime;
2293
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2294
do {
2295
queue->next_run = 0;
2296
string_set cancelled_filenames = {};
2297
2298
{
2299
__attribute__((cleanup(cleanup_close)))
2300
const int devnull_fd = open("/dev/null",
2301
O_WRONLY | O_CLOEXEC | O_NOCTTY);
2302
g_assert_cmpint(devnull_fd, >=, 0);
2303
__attribute__((cleanup(cleanup_close)))
2304
const int real_stderr_fd = dup(STDERR_FILENO);
2305
g_assert_cmpint(real_stderr_fd, >=, 0);
2306
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2307
dup2(devnull_fd, STDERR_FILENO);
2308
const bool success = run_queue(&queue, &cancelled_filenames,
2309
&quit_now);
2310
dup2(real_stderr_fd, STDERR_FILENO);
2311
if(not success){
2312
break;
2313
}
2314
}
2315
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2316
} while(((queue->length) > 0)
2317
and (not quit_now)
2318
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2319
2320
g_assert_true(quit_now);
2321
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2322
g_assert_true(mandos_client_exited);
2323
}
2324
2325
static void test_start_mandos_client_suid_euid(test_fixture *fixture,
2326
__attribute__((unused))
2327
gconstpointer
2328
user_data){
2329
if(not is_privileged()){
2330
g_test_skip("Not privileged");
2331
return;
2332
}
2333
2334
bool mandos_client_exited = false;
2335
bool quit_now = false;
2336
__attribute__((cleanup(cleanup_close)))
2337
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2338
g_assert_cmpint(epoll_fd, >=, 0);
2339
__attribute__((cleanup(cleanup_queue)))
2340
task_queue *queue = create_queue();
2341
g_assert_nonnull(queue);
2342
__attribute__((cleanup(cleanup_buffer)))
2343
buffer password = {};
2344
bool password_is_read = false;
2345
const char helper_directory[] = "/nonexistent";
2346
const char *const argv[] = { "/usr/bin/id", "--user", NULL };
2347
uid_t user = 1000;
2348
gid_t group = 1001;
2349
2350
const bool success = start_mandos_client(queue, epoll_fd,
2351
&mandos_client_exited,
2352
&quit_now, &password,
2353
&password_is_read,
2354
&fixture->orig_sigaction,
2355
fixture->orig_sigmask,
2356
helper_directory, user,
2357
group, argv);
2358
g_assert_true(success);
2359
g_assert_cmpuint((unsigned int)queue->length, >, 0);
2360
2361
struct timespec starttime, currtime;
2362
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2363
do {
2364
queue->next_run = 0;
2365
string_set cancelled_filenames = {};
2366
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2367
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2368
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2369
} while(((queue->length) > 0)
2370
and (not quit_now)
2371
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2372
2373
g_assert_false(quit_now);
2374
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2375
g_assert_true(mandos_client_exited);
2376
2377
g_assert_true(password_is_read);
2378
g_assert_nonnull(password.data);
2379
2380
uintmax_t id;
2381
g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
2382
==, 1);
2383
g_assert_true((uid_t)id == id);
2384
2385
g_assert_cmpuint((unsigned int)id, ==, 0);
2386
}
2387
2388
static void test_start_mandos_client_suid_egid(test_fixture *fixture,
2389
__attribute__((unused))
2390
gconstpointer
2391
user_data){
2392
if(not is_privileged()){
2393
g_test_skip("Not privileged");
2394
return;
2395
}
2396
2397
bool mandos_client_exited = false;
2398
bool quit_now = false;
2399
__attribute__((cleanup(cleanup_close)))
2400
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2401
g_assert_cmpint(epoll_fd, >=, 0);
2402
__attribute__((cleanup(cleanup_queue)))
2403
task_queue *queue = create_queue();
2404
g_assert_nonnull(queue);
2405
__attribute__((cleanup(cleanup_buffer)))
2406
buffer password = {};
2407
bool password_is_read = false;
2408
const char helper_directory[] = "/nonexistent";
2409
const char *const argv[] = { "/usr/bin/id", "--group", NULL };
2410
uid_t user = 1000;
2411
gid_t group = 1001;
2412
2413
const bool success = start_mandos_client(queue, epoll_fd,
2414
&mandos_client_exited,
2415
&quit_now, &password,
2416
&password_is_read,
2417
&fixture->orig_sigaction,
2418
fixture->orig_sigmask,
2419
helper_directory, user,
2420
group, argv);
2421
g_assert_true(success);
2422
g_assert_cmpuint((unsigned int)queue->length, >, 0);
2423
2424
struct timespec starttime, currtime;
2425
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2426
do {
2427
queue->next_run = 0;
2428
string_set cancelled_filenames = {};
2429
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2430
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2431
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2432
} while(((queue->length) > 0)
2433
and (not quit_now)
2434
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2435
2436
g_assert_false(quit_now);
2437
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2438
g_assert_true(mandos_client_exited);
2439
2440
g_assert_true(password_is_read);
2441
g_assert_nonnull(password.data);
2442
2443
uintmax_t id;
2444
g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
2445
==, 1);
2446
g_assert_true((gid_t)id == id);
2447
2448
g_assert_cmpuint((unsigned int)id, ==, 0);
2449
}
2450
2451
static void test_start_mandos_client_suid_ruid(test_fixture *fixture,
2452
__attribute__((unused))
2453
gconstpointer
2454
user_data){
2455
if(not is_privileged()){
2456
g_test_skip("Not privileged");
2457
return;
2458
}
2459
2460
bool mandos_client_exited = false;
2461
bool quit_now = false;
2462
__attribute__((cleanup(cleanup_close)))
2463
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2464
g_assert_cmpint(epoll_fd, >=, 0);
2465
__attribute__((cleanup(cleanup_queue)))
2466
task_queue *queue = create_queue();
2467
g_assert_nonnull(queue);
2468
__attribute__((cleanup(cleanup_buffer)))
2469
buffer password = {};
2470
bool password_is_read = false;
2471
const char helper_directory[] = "/nonexistent";
2472
const char *const argv[] = { "/usr/bin/id", "--user", "--real",
2473
NULL };
2474
uid_t user = 1000;
2475
gid_t group = 1001;
2476
2477
const bool success = start_mandos_client(queue, epoll_fd,
2478
&mandos_client_exited,
2479
&quit_now, &password,
2480
&password_is_read,
2481
&fixture->orig_sigaction,
2482
fixture->orig_sigmask,
2483
helper_directory, user,
2484
group, argv);
2485
g_assert_true(success);
2486
g_assert_cmpuint((unsigned int)queue->length, >, 0);
2487
2488
struct timespec starttime, currtime;
2489
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2490
do {
2491
queue->next_run = 0;
2492
string_set cancelled_filenames = {};
2493
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2494
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2495
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2496
} while(((queue->length) > 0)
2497
and (not quit_now)
2498
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2499
2500
g_assert_false(quit_now);
2501
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2502
g_assert_true(mandos_client_exited);
2503
2504
g_assert_true(password_is_read);
2505
g_assert_nonnull(password.data);
2506
2507
uintmax_t id;
2508
g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
2509
==, 1);
2510
g_assert_true((uid_t)id == id);
2511
2512
g_assert_cmpuint((unsigned int)id, ==, user);
2513
}
2514
2515
static void test_start_mandos_client_suid_rgid(test_fixture *fixture,
2516
__attribute__((unused))
2517
gconstpointer
2518
user_data){
2519
if(not is_privileged()){
2520
g_test_skip("Not privileged");
2521
return;
2522
}
2523
2524
bool mandos_client_exited = false;
2525
bool quit_now = false;
2526
__attribute__((cleanup(cleanup_close)))
2527
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2528
g_assert_cmpint(epoll_fd, >=, 0);
2529
__attribute__((cleanup(cleanup_queue)))
2530
task_queue *queue = create_queue();
2531
g_assert_nonnull(queue);
2532
__attribute__((cleanup(cleanup_buffer)))
2533
buffer password = {};
2534
bool password_is_read = false;
2535
const char helper_directory[] = "/nonexistent";
2536
const char *const argv[] = { "/usr/bin/id", "--group", "--real",
2537
NULL };
2538
uid_t user = 1000;
2539
gid_t group = 1001;
2540
2541
const bool success = start_mandos_client(queue, epoll_fd,
2542
&mandos_client_exited,
2543
&quit_now, &password,
2544
&password_is_read,
2545
&fixture->orig_sigaction,
2546
fixture->orig_sigmask,
2547
helper_directory, user,
2548
group, argv);
2549
g_assert_true(success);
2550
g_assert_cmpuint((unsigned int)queue->length, >, 0);
2551
2552
struct timespec starttime, currtime;
2553
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2554
do {
2555
queue->next_run = 0;
2556
string_set cancelled_filenames = {};
2557
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2558
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2559
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2560
} while(((queue->length) > 0)
2561
and (not quit_now)
2562
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2563
2564
g_assert_false(quit_now);
2565
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2566
g_assert_true(mandos_client_exited);
2567
2568
g_assert_true(password_is_read);
2569
g_assert_nonnull(password.data);
2570
2571
uintmax_t id;
2572
g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
2573
==, 1);
2574
g_assert_true((gid_t)id == id);
2575
2576
g_assert_cmpuint((unsigned int)id, ==, group);
2577
}
2578
2579
static void test_start_mandos_client_read(test_fixture *fixture,
2580
__attribute__((unused))
2581
gconstpointer user_data){
2582
bool mandos_client_exited = false;
2583
bool quit_now = false;
2584
__attribute__((cleanup(cleanup_close)))
2585
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2586
g_assert_cmpint(epoll_fd, >=, 0);
2587
__attribute__((cleanup(cleanup_queue)))
2588
task_queue *queue = create_queue();
2589
g_assert_nonnull(queue);
2590
__attribute__((cleanup(cleanup_buffer)))
2591
buffer password = {};
2592
bool password_is_read = false;
2593
const char dummy_test_password[] = "dummy test password";
2594
const char helper_directory[] = "/nonexistent";
2595
const char *const argv[] = { "/bin/echo", "-n", dummy_test_password,
2596
NULL };
2597
2598
const bool success = start_mandos_client(queue, epoll_fd,
2599
&mandos_client_exited,
2600
&quit_now, &password,
2601
&password_is_read,
2602
&fixture->orig_sigaction,
2603
fixture->orig_sigmask,
2604
helper_directory, 0, 0,
2605
argv);
2606
g_assert_true(success);
2607
g_assert_cmpuint((unsigned int)queue->length, >, 0);
2608
2609
struct timespec starttime, currtime;
2610
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2611
do {
2612
queue->next_run = 0;
2613
string_set cancelled_filenames = {};
2614
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2615
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2616
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2617
} while(((queue->length) > 0)
2618
and (not quit_now)
2619
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2620
2621
g_assert_false(quit_now);
2622
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2623
g_assert_true(mandos_client_exited);
2624
2625
g_assert_true(password_is_read);
2626
g_assert_cmpint((int)password.length, ==,
2627
sizeof(dummy_test_password)-1);
2628
g_assert_nonnull(password.data);
2629
g_assert_cmpint(memcmp(dummy_test_password, password.data,
2630
sizeof(dummy_test_password)-1), ==, 0);
2631
}
2632
2633
static
2634
void test_start_mandos_client_helper_directory(test_fixture *fixture,
2635
__attribute__((unused))
2636
gconstpointer
2637
user_data){
2638
bool mandos_client_exited = false;
2639
bool quit_now = false;
2640
__attribute__((cleanup(cleanup_close)))
2641
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2642
g_assert_cmpint(epoll_fd, >=, 0);
2643
__attribute__((cleanup(cleanup_queue)))
2644
task_queue *queue = create_queue();
2645
g_assert_nonnull(queue);
2646
__attribute__((cleanup(cleanup_buffer)))
2647
buffer password = {};
2648
bool password_is_read = false;
2649
const char helper_directory[] = "/nonexistent";
2650
const char *const argv[] = { "/bin/sh", "-c",
2651
"echo -n ${MANDOSPLUGINHELPERDIR}", NULL };
2652
2653
const bool success = start_mandos_client(queue, epoll_fd,
2654
&mandos_client_exited,
2655
&quit_now, &password,
2656
&password_is_read,
2657
&fixture->orig_sigaction,
2658
fixture->orig_sigmask,
2659
helper_directory, 0, 0,
2660
argv);
2661
g_assert_true(success);
2662
g_assert_cmpuint((unsigned int)queue->length, >, 0);
2663
2664
struct timespec starttime, currtime;
2665
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2666
do {
2667
queue->next_run = 0;
2668
string_set cancelled_filenames = {};
2669
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2670
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2671
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2672
} while(((queue->length) > 0)
2673
and (not quit_now)
2674
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2675
2676
g_assert_false(quit_now);
2677
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2678
g_assert_true(mandos_client_exited);
2679
2680
g_assert_true(password_is_read);
2681
g_assert_cmpint((int)password.length, ==,
2682
sizeof(helper_directory)-1);
2683
g_assert_nonnull(password.data);
2684
g_assert_cmpint(memcmp(helper_directory, password.data,
2685
sizeof(helper_directory)-1), ==, 0);
2686
}
2687
2688
__attribute__((nonnull, warn_unused_result))
2689
static bool proc_status_sigblk_to_sigset(const char *const,
2690
sigset_t *const);
2691
2692
static void test_start_mandos_client_sigmask(test_fixture *fixture,
2693
__attribute__((unused))
2694
gconstpointer user_data){
2695
bool mandos_client_exited = false;
2696
bool quit_now = false;
2697
__attribute__((cleanup(cleanup_close)))
2698
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2699
g_assert_cmpint(epoll_fd, >=, 0);
2700
__attribute__((cleanup(cleanup_queue)))
2701
task_queue *queue = create_queue();
2702
g_assert_nonnull(queue);
2703
__attribute__((cleanup(cleanup_buffer)))
2704
buffer password = {};
2705
bool password_is_read = false;
2706
const char helper_directory[] = "/nonexistent";
2707
/* see proc(5) for format of /proc/self/status */
2708
const char *const argv[] = { "/usr/bin/awk",
2709
"$1==\"SigBlk:\"{ print $2 }", "/proc/self/status", NULL };
2710
2711
g_assert_true(start_mandos_client(queue, epoll_fd,
2712
&mandos_client_exited, &quit_now,
2713
&password, &password_is_read,
2714
&fixture->orig_sigaction,
2715
fixture->orig_sigmask,
2716
helper_directory, 0, 0, argv));
2717
2718
struct timespec starttime, currtime;
2719
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2720
do {
2721
queue->next_run = 0;
2722
string_set cancelled_filenames = {};
2723
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2724
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2725
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2726
} while((not (mandos_client_exited and password_is_read))
2727
and (not quit_now)
2728
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2729
g_assert_true(mandos_client_exited);
2730
g_assert_true(password_is_read);
2731
2732
sigset_t parsed_sigmask;
2733
g_assert_true(proc_status_sigblk_to_sigset(password.data,
2734
&parsed_sigmask));
2735
2736
for(int signum = 1; signum < NSIG; signum++){
2737
const bool has_signal = sigismember(&parsed_sigmask, signum);
2738
if(sigismember(&fixture->orig_sigmask, signum)){
2739
g_assert_true(has_signal);
2740
} else {
2741
g_assert_false(has_signal);
2742
}
2743
}
2744
}
2745
2746
__attribute__((nonnull, warn_unused_result))
2747
static bool proc_status_sigblk_to_sigset(const char *const sigblk,
2748
sigset_t *const sigmask){
2749
/* parse /proc/PID/status SigBlk value and convert to a sigset_t */
2750
uintmax_t scanned_sigmask;
2751
if(sscanf(sigblk, "%" SCNxMAX " ", &scanned_sigmask) != 1){
2752
return false;
2753
}
2754
if(sigemptyset(sigmask) != 0){
2755
return false;
2756
}
2757
for(int signum = 1; signum < NSIG; signum++){
2758
if(scanned_sigmask & ((uintmax_t)1 << (signum-1))){
2759
if(sigaddset(sigmask, signum) != 0){
2760
return false;
2761
}
2762
}
2763
}
2764
return true;
2765
}
2766
2767
static void run_task_with_stderr_to_dev_null(const task_context task,
2768
task_queue *const queue);
2769
2770
static
2771
void test_wait_for_mandos_client_exit_badpid(__attribute__((unused))
2772
test_fixture *fixture,
2773
__attribute__((unused))
2774
gconstpointer user_data){
2775
2776
bool mandos_client_exited = false;
2777
bool quit_now = false;
2778
2779
__attribute__((cleanup(cleanup_queue)))
2780
task_queue *queue = create_queue();
2781
g_assert_nonnull(queue);
2782
const task_context task = {
2783
.func=wait_for_mandos_client_exit,
2784
.pid=1,
2785
.mandos_client_exited=&mandos_client_exited,
2786
.quit_now=&quit_now,
2787
};
2788
run_task_with_stderr_to_dev_null(task, queue);
2789
2790
g_assert_false(mandos_client_exited);
2791
g_assert_true(quit_now);
2792
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2793
}
2794
2795
static void run_task_with_stderr_to_dev_null(const task_context task,
2796
task_queue *const queue){
2797
FILE *real_stderr = stderr;
2798
FILE *devnull = fopen("/dev/null", "we");
2799
g_assert_nonnull(devnull);
2800
2801
stderr = devnull;
2802
task.func(task, queue);
2803
stderr = real_stderr;
2804
2805
g_assert_cmpint(fclose(devnull), ==, 0);
2806
}
2807
2808
static
2809
void test_wait_for_mandos_client_exit_noexit(test_fixture *fixture,
2810
__attribute__((unused))
2811
gconstpointer user_data){
2812
bool mandos_client_exited = false;
2813
bool quit_now = false;
2814
2815
pid_t create_eternal_process(void){
2816
const pid_t pid = fork();
2817
if(pid == 0){ /* Child */
2818
if(not restore_signal_handler(&fixture->orig_sigaction)){
2819
_exit(EXIT_FAILURE);
2820
}
2821
if(not restore_sigmask(&fixture->orig_sigmask)){
2822
_exit(EXIT_FAILURE);
2823
}
2824
while(true){
2825
pause();
2826
}
2827
}
2828
return pid;
2829
}
2830
pid_t pid = create_eternal_process();
2831
g_assert_true(pid != -1);
2832
2833
__attribute__((cleanup(cleanup_queue)))
2834
task_queue *queue = create_queue();
2835
g_assert_nonnull(queue);
2836
const task_context task = {
2837
.func=wait_for_mandos_client_exit,
2838
.pid=pid,
2839
.mandos_client_exited=&mandos_client_exited,
2840
.quit_now=&quit_now,
2841
};
2842
task.func(task, queue);
2843
2844
g_assert_false(mandos_client_exited);
2845
g_assert_false(quit_now);
2846
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
2847
2848
g_assert_nonnull(find_matching_task(queue, (task_context){
2849
.func=wait_for_mandos_client_exit,
2850
.pid=task.pid,
2851
.mandos_client_exited=&mandos_client_exited,
2852
.quit_now=&quit_now,
2853
}));
2854
}
2855
2856
static
2857
void test_wait_for_mandos_client_exit_success(test_fixture *fixture,
2858
__attribute__((unused))
2859
gconstpointer
2860
user_data){
2861
bool mandos_client_exited = false;
2862
bool quit_now = false;
2863
2864
pid_t create_successful_process(void){
2865
const pid_t pid = fork();
2866
if(pid == 0){ /* Child */
2867
if(not restore_signal_handler(&fixture->orig_sigaction)){
2868
_exit(EXIT_FAILURE);
2869
}
2870
if(not restore_sigmask(&fixture->orig_sigmask)){
2871
_exit(EXIT_FAILURE);
2872
}
2873
exit(EXIT_SUCCESS);
2874
}
2875
return pid;
2876
}
2877
const pid_t pid = create_successful_process();
2878
g_assert_true(pid != -1);
2879
2880
__attribute__((cleanup(cleanup_queue)))
2881
task_queue *queue = create_queue();
2882
g_assert_nonnull(queue);
2883
const task_context initial_task = {
2884
.func=wait_for_mandos_client_exit,
2885
.pid=pid,
2886
.mandos_client_exited=&mandos_client_exited,
2887
.quit_now=&quit_now,
2888
};
2889
g_assert_true(add_to_queue(queue, initial_task));
2890
2891
struct timespec starttime, currtime;
2892
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2893
__attribute__((cleanup(cleanup_close)))
2894
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2895
do {
2896
queue->next_run = 0;
2897
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2898
g_assert_true(run_queue(&queue, (string_set[]){{}}, &quit_now));
2899
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2900
} while((not mandos_client_exited)
2901
and (not quit_now)
2902
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2903
2904
g_assert_true(mandos_client_exited);
2905
g_assert_false(quit_now);
2906
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2907
}
2908
2909
static
2910
void test_wait_for_mandos_client_exit_failure(test_fixture *fixture,
2911
__attribute__((unused))
2912
gconstpointer
2913
user_data){
2914
bool mandos_client_exited = false;
2915
bool quit_now = false;
2916
2917
pid_t create_failing_process(void){
2918
const pid_t pid = fork();
2919
if(pid == 0){ /* Child */
2920
if(not restore_signal_handler(&fixture->orig_sigaction)){
2921
_exit(EXIT_FAILURE);
2922
}
2923
if(not restore_sigmask(&fixture->orig_sigmask)){
2924
_exit(EXIT_FAILURE);
2925
}
2926
exit(EXIT_FAILURE);
2927
}
2928
return pid;
2929
}
2930
const pid_t pid = create_failing_process();
2931
g_assert_true(pid != -1);
2932
2933
__attribute__((cleanup(string_set_clear)))
2934
string_set cancelled_filenames = {};
2935
__attribute__((cleanup(cleanup_close)))
2936
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2937
g_assert_cmpint(epoll_fd, >=, 0);
2938
__attribute__((cleanup(cleanup_queue)))
2939
task_queue *queue = create_queue();
2940
g_assert_nonnull(queue);
2941
g_assert_true(add_to_queue(queue, (task_context){
2942
.func=wait_for_mandos_client_exit,
2943
.pid=pid,
2944
.mandos_client_exited=&mandos_client_exited,
2945
.quit_now=&quit_now,
2946
}));
2947
2948
g_assert_true(sigismember(&fixture->orig_sigmask, SIGCHLD) == 0);
2949
2950
__attribute__((cleanup(cleanup_close)))
2951
const int devnull_fd = open("/dev/null",
2952
O_WRONLY | O_CLOEXEC | O_NOCTTY);
2953
g_assert_cmpint(devnull_fd, >=, 0);
2954
__attribute__((cleanup(cleanup_close)))
2955
const int real_stderr_fd = dup(STDERR_FILENO);
2956
g_assert_cmpint(real_stderr_fd, >=, 0);
2957
2958
struct timespec starttime, currtime;
2959
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2960
do {
2961
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2962
dup2(devnull_fd, STDERR_FILENO);
2963
const bool success = run_queue(&queue, &cancelled_filenames,
2964
&quit_now);
2965
dup2(real_stderr_fd, STDERR_FILENO);
2966
if(not success){
2967
break;
2968
}
2969
2970
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2971
} while((not mandos_client_exited)
2972
and (not quit_now)
2973
and ((currtime.tv_sec - starttime.tv_sec) < 10));
2974
2975
g_assert_true(quit_now);
2976
g_assert_true(mandos_client_exited);
2977
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2978
}
2979
2980
static
2981
void test_wait_for_mandos_client_exit_killed(test_fixture *fixture,
2982
__attribute__((unused))
2983
gconstpointer user_data){
2984
bool mandos_client_exited = false;
2985
bool quit_now = false;
2986
2987
pid_t create_killed_process(void){
2988
const pid_t pid = fork();
2989
if(pid == 0){ /* Child */
2990
if(not restore_signal_handler(&fixture->orig_sigaction)){
2991
_exit(EXIT_FAILURE);
2992
}
2993
if(not restore_sigmask(&fixture->orig_sigmask)){
2994
_exit(EXIT_FAILURE);
2995
}
2996
while(true){
2997
pause();
2998
}
2999
}
3000
kill(pid, SIGKILL);
3001
return pid;
3002
}
3003
const pid_t pid = create_killed_process();
3004
g_assert_true(pid != -1);
3005
3006
__attribute__((cleanup(string_set_clear)))
3007
string_set cancelled_filenames = {};
3008
__attribute__((cleanup(cleanup_close)))
3009
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3010
g_assert_cmpint(epoll_fd, >=, 0);
3011
__attribute__((cleanup(cleanup_queue)))
3012
task_queue *queue = create_queue();
3013
g_assert_nonnull(queue);
3014
g_assert_true(add_to_queue(queue, (task_context){
3015
.func=wait_for_mandos_client_exit,
3016
.pid=pid,
3017
.mandos_client_exited=&mandos_client_exited,
3018
.quit_now=&quit_now,
3019
}));
3020
3021
__attribute__((cleanup(cleanup_close)))
3022
const int devnull_fd = open("/dev/null",
3023
O_WRONLY | O_CLOEXEC, O_NOCTTY);
3024
g_assert_cmpint(devnull_fd, >=, 0);
3025
__attribute__((cleanup(cleanup_close)))
3026
const int real_stderr_fd = dup(STDERR_FILENO);
3027
g_assert_cmpint(real_stderr_fd, >=, 0);
3028
3029
struct timespec starttime, currtime;
3030
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
3031
do {
3032
g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
3033
dup2(devnull_fd, STDERR_FILENO);
3034
const bool success = run_queue(&queue, &cancelled_filenames,
3035
&quit_now);
3036
dup2(real_stderr_fd, STDERR_FILENO);
3037
if(not success){
3038
break;
3039
}
3040
3041
g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
3042
} while((not mandos_client_exited)
3043
and (not quit_now)
3044
and ((currtime.tv_sec - starttime.tv_sec) < 10));
3045
3046
g_assert_true(mandos_client_exited);
3047
g_assert_true(quit_now);
3048
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3049
}
3050
3051
static bool epoll_set_does_not_contain(int, int);
3052
3053
static
3054
void test_read_mandos_client_output_readerror(__attribute__((unused))
3055
test_fixture *fixture,
3056
__attribute__((unused))
3057
gconstpointer
3058
user_data){
3059
__attribute__((cleanup(cleanup_close)))
3060
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3061
g_assert_cmpint(epoll_fd, >=, 0);
3062
3063
__attribute__((cleanup(cleanup_buffer)))
3064
buffer password = {};
3065
3066
/* Reading /proc/self/mem from offset 0 will always give EIO */
3067
const int fd = open("/proc/self/mem",
3068
O_RDONLY | O_CLOEXEC | O_NOCTTY);
3069
3070
bool password_is_read = false;
3071
bool quit_now = false;
3072
__attribute__((cleanup(cleanup_queue)))
3073
task_queue *queue = create_queue();
3074
g_assert_nonnull(queue);
3075
3076
task_context task = {
3077
.func=read_mandos_client_output,
3078
.epoll_fd=epoll_fd,
3079
.fd=fd,
3080
.password=&password,
3081
.password_is_read=&password_is_read,
3082
.quit_now=&quit_now,
3083
};
3084
run_task_with_stderr_to_dev_null(task, queue);
3085
g_assert_false(password_is_read);
3086
g_assert_cmpint((int)password.length, ==, 0);
3087
g_assert_true(quit_now);
3088
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3089
3090
g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
3091
3092
g_assert_cmpint(close(fd), ==, -1);
3093
}
3094
3095
static bool epoll_set_does_not_contain(int epoll_fd, int fd){
3096
return not epoll_set_contains(epoll_fd, fd, 0);
3097
}
3098
3099
static
3100
void test_read_mandos_client_output_nodata(__attribute__((unused))
3101
test_fixture *fixture,
3102
__attribute__((unused))
3103
gconstpointer user_data){
3104
__attribute__((cleanup(cleanup_close)))
3105
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3106
g_assert_cmpint(epoll_fd, >=, 0);
3107
3108
int pipefds[2];
3109
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3110
3111
__attribute__((cleanup(cleanup_buffer)))
3112
buffer password = {};
3113
3114
bool password_is_read = false;
3115
bool quit_now = false;
3116
__attribute__((cleanup(cleanup_queue)))
3117
task_queue *queue = create_queue();
3118
g_assert_nonnull(queue);
3119
3120
task_context task = {
3121
.func=read_mandos_client_output,
3122
.epoll_fd=epoll_fd,
3123
.fd=pipefds[0],
3124
.password=&password,
3125
.password_is_read=&password_is_read,
3126
.quit_now=&quit_now,
3127
};
3128
task.func(task, queue);
3129
g_assert_false(password_is_read);
3130
g_assert_cmpint((int)password.length, ==, 0);
3131
g_assert_false(quit_now);
3132
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3133
3134
g_assert_nonnull(find_matching_task(queue, (task_context){
3135
.func=read_mandos_client_output,
3136
.epoll_fd=epoll_fd,
3137
.fd=pipefds[0],
3138
.password=&password,
3139
.password_is_read=&password_is_read,
3140
.quit_now=&quit_now,
3141
}));
3142
3143
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3144
EPOLLIN | EPOLLRDHUP));
3145
3146
g_assert_cmpint(close(pipefds[1]), ==, 0);
3147
}
3148
3149
static void test_read_mandos_client_output_eof(__attribute__((unused))
3150
test_fixture *fixture,
3151
__attribute__((unused))
3152
gconstpointer
3153
user_data){
3154
__attribute__((cleanup(cleanup_close)))
3155
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3156
g_assert_cmpint(epoll_fd, >=, 0);
3157
3158
int pipefds[2];
3159
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3160
g_assert_cmpint(close(pipefds[1]), ==, 0);
3161
3162
__attribute__((cleanup(cleanup_buffer)))
3163
buffer password = {};
3164
3165
bool password_is_read = false;
3166
bool quit_now = false;
3167
__attribute__((cleanup(cleanup_queue)))
3168
task_queue *queue = create_queue();
3169
g_assert_nonnull(queue);
3170
3171
task_context task = {
3172
.func=read_mandos_client_output,
3173
.epoll_fd=epoll_fd,
3174
.fd=pipefds[0],
3175
.password=&password,
3176
.password_is_read=&password_is_read,
3177
.quit_now=&quit_now,
3178
};
3179
task.func(task, queue);
3180
g_assert_true(password_is_read);
3181
g_assert_cmpint((int)password.length, ==, 0);
3182
g_assert_false(quit_now);
3183
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3184
3185
g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
3186
3187
g_assert_cmpint(close(pipefds[0]), ==, -1);
3188
}
3189
3190
static
3191
void test_read_mandos_client_output_once(__attribute__((unused))
3192
test_fixture *fixture,
3193
__attribute__((unused))
3194
gconstpointer user_data){
3195
__attribute__((cleanup(cleanup_close)))
3196
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3197
g_assert_cmpint(epoll_fd, >=, 0);
3198
3199
int pipefds[2];
3200
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3201
3202
const char dummy_test_password[] = "dummy test password";
3203
/* Start with a pre-allocated buffer */
3204
__attribute__((cleanup(cleanup_buffer)))
3205
buffer password = {
3206
.data=malloc(sizeof(dummy_test_password)),
3207
.length=0,
3208
.allocated=sizeof(dummy_test_password),
3209
};
3210
g_assert_nonnull(password.data);
3211
if(mlock(password.data, password.allocated) != 0){
3212
g_assert_true(errno == EPERM or errno == ENOMEM);
3213
}
3214
3215
bool password_is_read = false;
3216
bool quit_now = false;
3217
__attribute__((cleanup(cleanup_queue)))
3218
task_queue *queue = create_queue();
3219
g_assert_nonnull(queue);
3220
3221
g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
3222
g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
3223
sizeof(dummy_test_password)),
3224
==, (int)sizeof(dummy_test_password));
3225
3226
task_context task = {
3227
.func=read_mandos_client_output,
3228
.epoll_fd=epoll_fd,
3229
.fd=pipefds[0],
3230
.password=&password,
3231
.password_is_read=&password_is_read,
3232
.quit_now=&quit_now,
3233
};
3234
task.func(task, queue);
3235
3236
g_assert_false(password_is_read);
3237
g_assert_cmpint((int)password.length, ==,
3238
(int)sizeof(dummy_test_password));
3239
g_assert_nonnull(password.data);
3240
g_assert_cmpint(memcmp(password.data, dummy_test_password,
3241
sizeof(dummy_test_password)), ==, 0);
3242
3243
g_assert_false(quit_now);
3244
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3245
3246
g_assert_nonnull(find_matching_task(queue, (task_context){
3247
.func=read_mandos_client_output,
3248
.epoll_fd=epoll_fd,
3249
.fd=pipefds[0],
3250
.password=&password,
3251
.password_is_read=&password_is_read,
3252
.quit_now=&quit_now,
3253
}));
3254
3255
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3256
EPOLLIN | EPOLLRDHUP));
3257
3258
g_assert_cmpint(close(pipefds[1]), ==, 0);
3259
}
3260
3261
static
3262
void test_read_mandos_client_output_malloc(__attribute__((unused))
3263
test_fixture *fixture,
3264
__attribute__((unused))
3265
gconstpointer user_data){
3266
__attribute__((cleanup(cleanup_close)))
3267
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3268
g_assert_cmpint(epoll_fd, >=, 0);
3269
3270
int pipefds[2];
3271
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3272
3273
const char dummy_test_password[] = "dummy test password";
3274
/* Start with an empty buffer */
3275
__attribute__((cleanup(cleanup_buffer)))
3276
buffer password = {};
3277
3278
bool password_is_read = false;
3279
bool quit_now = false;
3280
__attribute__((cleanup(cleanup_queue)))
3281
task_queue *queue = create_queue();
3282
g_assert_nonnull(queue);
3283
3284
g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
3285
g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
3286
sizeof(dummy_test_password)),
3287
==, (int)sizeof(dummy_test_password));
3288
3289
task_context task = {
3290
.func=read_mandos_client_output,
3291
.epoll_fd=epoll_fd,
3292
.fd=pipefds[0],
3293
.password=&password,
3294
.password_is_read=&password_is_read,
3295
.quit_now=&quit_now,
3296
};
3297
task.func(task, queue);
3298
3299
g_assert_false(password_is_read);
3300
g_assert_cmpint((int)password.length, ==,
3301
(int)sizeof(dummy_test_password));
3302
g_assert_nonnull(password.data);
3303
g_assert_cmpint(memcmp(password.data, dummy_test_password,
3304
sizeof(dummy_test_password)), ==, 0);
3305
3306
g_assert_false(quit_now);
3307
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3308
3309
g_assert_nonnull(find_matching_task(queue, (task_context){
3310
.func=read_mandos_client_output,
3311
.epoll_fd=epoll_fd,
3312
.fd=pipefds[0],
3313
.password=&password,
3314
.password_is_read=&password_is_read,
3315
.quit_now=&quit_now,
3316
}));
3317
3318
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3319
EPOLLIN | EPOLLRDHUP));
3320
3321
g_assert_cmpint(close(pipefds[1]), ==, 0);
3322
}
3323
3324
static
3325
void test_read_mandos_client_output_append(__attribute__((unused))
3326
test_fixture *fixture,
3327
__attribute__((unused))
3328
gconstpointer user_data){
3329
__attribute__((cleanup(cleanup_close)))
3330
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3331
g_assert_cmpint(epoll_fd, >=, 0);
3332
3333
int pipefds[2];
3334
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3335
3336
const char dummy_test_password[] = "dummy test password";
3337
__attribute__((cleanup(cleanup_buffer)))
3338
buffer password = {
3339
.data=malloc(PIPE_BUF),
3340
.length=PIPE_BUF,
3341
.allocated=PIPE_BUF,
3342
};
3343
g_assert_nonnull(password.data);
3344
if(mlock(password.data, password.allocated) != 0){
3345
g_assert_true(errno == EPERM or errno == ENOMEM);
3346
}
3347
3348
memset(password.data, 'x', PIPE_BUF);
3349
char password_expected[PIPE_BUF];
3350
memcpy(password_expected, password.data, PIPE_BUF);
3351
3352
bool password_is_read = false;
3353
bool quit_now = false;
3354
__attribute__((cleanup(cleanup_queue)))
3355
task_queue *queue = create_queue();
3356
g_assert_nonnull(queue);
3357
3358
g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
3359
g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
3360
sizeof(dummy_test_password)),
3361
==, (int)sizeof(dummy_test_password));
3362
3363
task_context task = {
3364
.func=read_mandos_client_output,
3365
.epoll_fd=epoll_fd,
3366
.fd=pipefds[0],
3367
.password=&password,
3368
.password_is_read=&password_is_read,
3369
.quit_now=&quit_now,
3370
};
3371
task.func(task, queue);
3372
3373
g_assert_false(password_is_read);
3374
g_assert_cmpint((int)password.length, ==,
3375
PIPE_BUF + sizeof(dummy_test_password));
3376
g_assert_nonnull(password.data);
3377
g_assert_cmpint(memcmp(password_expected, password.data, PIPE_BUF),
3378
==, 0);
3379
g_assert_cmpint(memcmp(password.data + PIPE_BUF,
3380
dummy_test_password,
3381
sizeof(dummy_test_password)), ==, 0);
3382
g_assert_false(quit_now);
3383
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3384
3385
g_assert_nonnull(find_matching_task(queue, (task_context){
3386
.func=read_mandos_client_output,
3387
.epoll_fd=epoll_fd,
3388
.fd=pipefds[0],
3389
.password=&password,
3390
.password_is_read=&password_is_read,
3391
.quit_now=&quit_now,
3392
}));
3393
3394
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3395
EPOLLIN | EPOLLRDHUP));
3396
}
3397
3398
static char *make_temporary_directory(void);
3399
3400
static void test_add_inotify_dir_watch(__attribute__((unused))
3401
test_fixture *fixture,
3402
__attribute__((unused))
3403
gconstpointer user_data){
3404
__attribute__((cleanup(cleanup_close)))
3405
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3406
g_assert_cmpint(epoll_fd, >=, 0);
3407
__attribute__((cleanup(cleanup_queue)))
3408
task_queue *queue = create_queue();
3409
g_assert_nonnull(queue);
3410
__attribute__((cleanup(string_set_clear)))
3411
string_set cancelled_filenames = {};
3412
const mono_microsecs current_time = 0;
3413
3414
bool quit_now = false;
3415
buffer password = {};
3416
bool mandos_client_exited = false;
3417
bool password_is_read = false;
3418
3419
__attribute__((cleanup(cleanup_string)))
3420
char *tempdir = make_temporary_directory();
3421
g_assert_nonnull(tempdir);
3422
3423
g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3424
&password, tempdir,
3425
&cancelled_filenames,
3426
¤t_time,
3427
&mandos_client_exited,
3428
&password_is_read));
3429
3430
g_assert_cmpuint((unsigned int)queue->length, >, 0);
3431
3432
const task_context *const added_read_task
3433
= find_matching_task(queue, (task_context){
3434
.func=read_inotify_event,
3435
.epoll_fd=epoll_fd,
3436
.quit_now=&quit_now,
3437
.password=&password,
3438
.filename=tempdir,
3439
.cancelled_filenames=&cancelled_filenames,
3440
.current_time=¤t_time,
3441
.mandos_client_exited=&mandos_client_exited,
3442
.password_is_read=&password_is_read,
3443
});
3444
g_assert_nonnull(added_read_task);
3445
3446
g_assert_cmpint(added_read_task->fd, >, 2);
3447
g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3448
g_assert_true(epoll_set_contains(added_read_task->epoll_fd,
3449
added_read_task->fd,
3450
EPOLLIN | EPOLLRDHUP));
3451
3452
g_assert_cmpint(rmdir(tempdir), ==, 0);
3453
}
3454
3455
static char *make_temporary_directory(void){
3456
char *name = strdup("/tmp/mandosXXXXXX");
3457
g_assert_nonnull(name);
3458
char *result = mkdtemp(name);
3459
if(result == NULL){
3460
free(name);
3461
}
3462
return result;
3463
}
3464
3465
static void test_add_inotify_dir_watch_fail(__attribute__((unused))
3466
test_fixture *fixture,
3467
__attribute__((unused))
3468
gconstpointer user_data){
3469
__attribute__((cleanup(cleanup_close)))
3470
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3471
g_assert_cmpint(epoll_fd, >=, 0);
3472
__attribute__((cleanup(cleanup_queue)))
3473
task_queue *queue = create_queue();
3474
g_assert_nonnull(queue);
3475
__attribute__((cleanup(string_set_clear)))
3476
string_set cancelled_filenames = {};
3477
const mono_microsecs current_time = 0;
3478
3479
bool quit_now = false;
3480
buffer password = {};
3481
bool mandos_client_exited = false;
3482
bool password_is_read = false;
3483
3484
const char nonexistent_dir[] = "/nonexistent";
3485
3486
FILE *real_stderr = stderr;
3487
FILE *devnull = fopen("/dev/null", "we");
3488
g_assert_nonnull(devnull);
3489
stderr = devnull;
3490
g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3491
&password, nonexistent_dir,
3492
&cancelled_filenames,
3493
¤t_time,
3494
&mandos_client_exited,
3495
&password_is_read));
3496
stderr = real_stderr;
3497
g_assert_cmpint(fclose(devnull), ==, 0);
3498
3499
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3500
}
3501
3502
static void test_add_inotify_dir_watch_nondir(__attribute__((unused))
3503
test_fixture *fixture,
3504
__attribute__((unused))
3505
gconstpointer
3506
user_data){
3507
__attribute__((cleanup(cleanup_close)))
3508
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3509
g_assert_cmpint(epoll_fd, >=, 0);
3510
__attribute__((cleanup(cleanup_queue)))
3511
task_queue *queue = create_queue();
3512
g_assert_nonnull(queue);
3513
__attribute__((cleanup(string_set_clear)))
3514
string_set cancelled_filenames = {};
3515
const mono_microsecs current_time = 0;
3516
3517
bool quit_now = false;
3518
buffer password = {};
3519
bool mandos_client_exited = false;
3520
bool password_is_read = false;
3521
3522
const char not_a_directory[] = "/dev/tty";
3523
3524
FILE *real_stderr = stderr;
3525
FILE *devnull = fopen("/dev/null", "we");
3526
g_assert_nonnull(devnull);
3527
stderr = devnull;
3528
g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3529
&password, not_a_directory,
3530
&cancelled_filenames,
3531
¤t_time,
3532
&mandos_client_exited,
3533
&password_is_read));
3534
stderr = real_stderr;
3535
g_assert_cmpint(fclose(devnull), ==, 0);
3536
3537
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3538
}
3539
3540
static void test_add_inotify_dir_watch_EAGAIN(__attribute__((unused))
3541
test_fixture *fixture,
3542
__attribute__((unused))
3543
gconstpointer
3544
user_data){
3545
__attribute__((cleanup(cleanup_close)))
3546
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3547
g_assert_cmpint(epoll_fd, >=, 0);
3548
__attribute__((cleanup(cleanup_queue)))
3549
task_queue *queue = create_queue();
3550
g_assert_nonnull(queue);
3551
__attribute__((cleanup(string_set_clear)))
3552
string_set cancelled_filenames = {};
3553
const mono_microsecs current_time = 0;
3554
3555
bool quit_now = false;
3556
buffer password = {};
3557
bool mandos_client_exited = false;
3558
bool password_is_read = false;
3559
3560
__attribute__((cleanup(cleanup_string)))
3561
char *tempdir = make_temporary_directory();
3562
g_assert_nonnull(tempdir);
3563
3564
g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3565
&password, tempdir,
3566
&cancelled_filenames,
3567
¤t_time,
3568
&mandos_client_exited,
3569
&password_is_read));
3570
3571
g_assert_cmpuint((unsigned int)queue->length, >, 0);
3572
3573
const task_context *const added_read_task
3574
= find_matching_task(queue,
3575
(task_context){ .func=read_inotify_event });
3576
g_assert_nonnull(added_read_task);
3577
3578
g_assert_cmpint(added_read_task->fd, >, 2);
3579
g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3580
3581
/* "sufficient to read at least one event." - inotify(7) */
3582
const size_t ievent_size = (sizeof(struct inotify_event)
3583
+ NAME_MAX + 1);
3584
struct inotify_event *ievent = malloc(ievent_size);
3585
g_assert_nonnull(ievent);
3586
3587
g_assert_cmpint(read(added_read_task->fd, ievent, ievent_size), ==,
3588
-1);
3589
g_assert_cmpint(errno, ==, EAGAIN);
3590
3591
free(ievent);
3592
3593
g_assert_cmpint(rmdir(tempdir), ==, 0);
3594
}
3595
3596
static char *make_temporary_file_in_directory(const char
3597
*const dir);
3598
3599
static
3600
void test_add_inotify_dir_watch_IN_CLOSE_WRITE(__attribute__((unused))
3601
test_fixture *fixture,
3602
__attribute__((unused))
3603
gconstpointer
3604
user_data){
3605
__attribute__((cleanup(cleanup_close)))
3606
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3607
g_assert_cmpint(epoll_fd, >=, 0);
3608
__attribute__((cleanup(cleanup_queue)))
3609
task_queue *queue = create_queue();
3610
g_assert_nonnull(queue);
3611
__attribute__((cleanup(string_set_clear)))
3612
string_set cancelled_filenames = {};
3613
const mono_microsecs current_time = 0;
3614
3615
bool quit_now = false;
3616
buffer password = {};
3617
bool mandos_client_exited = false;
3618
bool password_is_read = false;
3619
3620
__attribute__((cleanup(cleanup_string)))
3621
char *tempdir = make_temporary_directory();
3622
g_assert_nonnull(tempdir);
3623
3624
g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3625
&password, tempdir,
3626
&cancelled_filenames,
3627
¤t_time,
3628
&mandos_client_exited,
3629
&password_is_read));
3630
3631
g_assert_cmpuint((unsigned int)queue->length, >, 0);
3632
3633
const task_context *const added_read_task
3634
= find_matching_task(queue,
3635
(task_context){ .func=read_inotify_event });
3636
g_assert_nonnull(added_read_task);
3637
3638
g_assert_cmpint(added_read_task->fd, >, 2);
3639
g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3640
3641
__attribute__((cleanup(cleanup_string)))
3642
char *filename = make_temporary_file_in_directory(tempdir);
3643
g_assert_nonnull(filename);
3644
3645
/* "sufficient to read at least one event." - inotify(7) */
3646
const size_t ievent_size = (sizeof(struct inotify_event)
3647
+ NAME_MAX + 1);
3648
struct inotify_event *ievent = malloc(ievent_size);
3649
g_assert_nonnull(ievent);
3650
3651
ssize_t read_size = 0;
3652
read_size = read(added_read_task->fd, ievent, ievent_size);
3653
3654
g_assert_cmpint((int)read_size, >, 0);
3655
g_assert_true(ievent->mask & IN_CLOSE_WRITE);
3656
g_assert_cmpstr(ievent->name, ==, basename(filename));
3657
3658
free(ievent);
3659
3660
g_assert_cmpint(unlink(filename), ==, 0);
3661
g_assert_cmpint(rmdir(tempdir), ==, 0);
3662
}
3663
3664
static char *make_temporary_prefixed_file_in_directory(const char
3665
*const prefix,
3666
const char
3667
*const dir){
3668
char *filename = NULL;
3669
g_assert_cmpint(asprintf(&filename, "%s/%sXXXXXX", dir, prefix),
3670
>, 0);
3671
g_assert_nonnull(filename);
3672
const int fd = mkostemp(filename, O_CLOEXEC);
3673
g_assert_cmpint(fd, >=, 0);
3674
g_assert_cmpint(close(fd), ==, 0);
3675
return filename;
3676
}
3677
3678
static char *make_temporary_file_in_directory(const char
3679
*const dir){
3680
return make_temporary_prefixed_file_in_directory("temp", dir);
3681
}
3682
3683
static
3684
void test_add_inotify_dir_watch_IN_MOVED_TO(__attribute__((unused))
3685
test_fixture *fixture,
3686
__attribute__((unused))
3687
gconstpointer user_data){
3688
__attribute__((cleanup(cleanup_close)))
3689
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3690
g_assert_cmpint(epoll_fd, >=, 0);
3691
__attribute__((cleanup(cleanup_queue)))
3692
task_queue *queue = create_queue();
3693
g_assert_nonnull(queue);
3694
__attribute__((cleanup(string_set_clear)))
3695
string_set cancelled_filenames = {};
3696
const mono_microsecs current_time = 0;
3697
3698
bool quit_now = false;
3699
buffer password = {};
3700
bool mandos_client_exited = false;
3701
bool password_is_read = false;
3702
3703
__attribute__((cleanup(cleanup_string)))
3704
char *watchdir = make_temporary_directory();
3705
g_assert_nonnull(watchdir);
3706
3707
g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3708
&password, watchdir,
3709
&cancelled_filenames,
3710
¤t_time,
3711
&mandos_client_exited,
3712
&password_is_read));
3713
3714
g_assert_cmpuint((unsigned int)queue->length, >, 0);
3715
3716
const task_context *const added_read_task
3717
= find_matching_task(queue,
3718
(task_context){ .func=read_inotify_event });
3719
g_assert_nonnull(added_read_task);
3720
3721
g_assert_cmpint(added_read_task->fd, >, 2);
3722
g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3723
3724
char *sourcedir = make_temporary_directory();
3725
g_assert_nonnull(sourcedir);
3726
3727
__attribute__((cleanup(cleanup_string)))
3728
char *filename = make_temporary_file_in_directory(sourcedir);
3729
g_assert_nonnull(filename);
3730
3731
__attribute__((cleanup(cleanup_string)))
3732
char *targetfilename = NULL;
3733
g_assert_cmpint(asprintf(&targetfilename, "%s/%s", watchdir,
3734
basename(filename)), >, 0);
3735
g_assert_nonnull(targetfilename);
3736
3737
g_assert_cmpint(rename(filename, targetfilename), ==, 0);
3738
g_assert_cmpint(rmdir(sourcedir), ==, 0);
3739
free(sourcedir);
3740
3741
/* "sufficient to read at least one event." - inotify(7) */
3742
const size_t ievent_size = (sizeof(struct inotify_event)
3743
+ NAME_MAX + 1);
3744
struct inotify_event *ievent = malloc(ievent_size);
3745
g_assert_nonnull(ievent);
3746
3747
ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
3748
3749
g_assert_cmpint((int)read_size, >, 0);
3750
g_assert_true(ievent->mask & IN_MOVED_TO);
3751
g_assert_cmpstr(ievent->name, ==, basename(targetfilename));
3752
3753
free(ievent);
3754
3755
g_assert_cmpint(unlink(targetfilename), ==, 0);
3756
g_assert_cmpint(rmdir(watchdir), ==, 0);
3757
}
3758
3759
static
3760
void test_add_inotify_dir_watch_IN_MOVED_FROM(__attribute__((unused))
3761
test_fixture *fixture,
3762
__attribute__((unused))
3763
gconstpointer
3764
user_data){
3765
__attribute__((cleanup(cleanup_close)))
3766
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3767
g_assert_cmpint(epoll_fd, >=, 0);
3768
__attribute__((cleanup(cleanup_queue)))
3769
task_queue *queue = create_queue();
3770
g_assert_nonnull(queue);
3771
__attribute__((cleanup(string_set_clear)))
3772
string_set cancelled_filenames = {};
3773
const mono_microsecs current_time = 0;
3774
3775
bool quit_now = false;
3776
buffer password = {};
3777
bool mandos_client_exited = false;
3778
bool password_is_read = false;
3779
3780
__attribute__((cleanup(cleanup_string)))
3781
char *tempdir = make_temporary_directory();
3782
g_assert_nonnull(tempdir);
3783
3784
__attribute__((cleanup(cleanup_string)))
3785
char *tempfilename = make_temporary_file_in_directory(tempdir);
3786
g_assert_nonnull(tempfilename);
3787
3788
__attribute__((cleanup(cleanup_string)))
3789
char *targetdir = make_temporary_directory();
3790
g_assert_nonnull(targetdir);
3791
3792
__attribute__((cleanup(cleanup_string)))
3793
char *targetfilename = NULL;
3794
g_assert_cmpint(asprintf(&targetfilename, "%s/%s", targetdir,
3795
basename(tempfilename)), >, 0);
3796
g_assert_nonnull(targetfilename);
3797
3798
g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3799
&password, tempdir,
3800
&cancelled_filenames,
3801
¤t_time,
3802
&mandos_client_exited,
3803
&password_is_read));
3804
3805
g_assert_cmpint(rename(tempfilename, targetfilename), ==, 0);
3806
3807
const task_context *const added_read_task
3808
= find_matching_task(queue,
3809
(task_context){ .func=read_inotify_event });
3810
g_assert_nonnull(added_read_task);
3811
3812
/* "sufficient to read at least one event." - inotify(7) */
3813
const size_t ievent_size = (sizeof(struct inotify_event)
3814
+ NAME_MAX + 1);
3815
struct inotify_event *ievent = malloc(ievent_size);
3816
g_assert_nonnull(ievent);
3817
3818
ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
3819
3820
g_assert_cmpint((int)read_size, >, 0);
3821
g_assert_true(ievent->mask & IN_MOVED_FROM);
3822
g_assert_cmpstr(ievent->name, ==, basename(tempfilename));
3823
3824
free(ievent);
3825
3826
g_assert_cmpint(unlink(targetfilename), ==, 0);
3827
g_assert_cmpint(rmdir(targetdir), ==, 0);
3828
g_assert_cmpint(rmdir(tempdir), ==, 0);
3829
}
3830
3831
static
3832
void test_add_inotify_dir_watch_IN_DELETE(__attribute__((unused))
3833
test_fixture *fixture,
3834
__attribute__((unused))
3835
gconstpointer user_data){
3836
__attribute__((cleanup(cleanup_close)))
3837
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3838
g_assert_cmpint(epoll_fd, >=, 0);
3839
__attribute__((cleanup(cleanup_queue)))
3840
task_queue *queue = create_queue();
3841
g_assert_nonnull(queue);
3842
__attribute__((cleanup(string_set_clear)))
3843
string_set cancelled_filenames = {};
3844
const mono_microsecs current_time = 0;
3845
3846
bool quit_now = false;
3847
buffer password = {};
3848
bool mandos_client_exited = false;
3849
bool password_is_read = false;
3850
3851
__attribute__((cleanup(cleanup_string)))
3852
char *tempdir = make_temporary_directory();
3853
g_assert_nonnull(tempdir);
3854
3855
__attribute__((cleanup(cleanup_string)))
3856
char *tempfile = make_temporary_file_in_directory(tempdir);
3857
g_assert_nonnull(tempfile);
3858
3859
g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3860
&password, tempdir,
3861
&cancelled_filenames,
3862
¤t_time,
3863
&mandos_client_exited,
3864
&password_is_read));
3865
g_assert_cmpint(unlink(tempfile), ==, 0);
3866
3867
g_assert_cmpuint((unsigned int)queue->length, >, 0);
3868
3869
const task_context *const added_read_task
3870
= find_matching_task(queue,
3871
(task_context){ .func=read_inotify_event });
3872
g_assert_nonnull(added_read_task);
3873
3874
g_assert_cmpint(added_read_task->fd, >, 2);
3875
g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3876
3877
/* "sufficient to read at least one event." - inotify(7) */
3878
const size_t ievent_size = (sizeof(struct inotify_event)
3879
+ NAME_MAX + 1);
3880
struct inotify_event *ievent = malloc(ievent_size);
3881
g_assert_nonnull(ievent);
3882
3883
ssize_t read_size = 0;
3884
read_size = read(added_read_task->fd, ievent, ievent_size);
3885
3886
g_assert_cmpint((int)read_size, >, 0);
3887
g_assert_true(ievent->mask & IN_DELETE);
3888
g_assert_cmpstr(ievent->name, ==, basename(tempfile));
3889
3890
free(ievent);
3891
3892
g_assert_cmpint(rmdir(tempdir), ==, 0);
3893
}
3894
3895
static
3896
void test_add_inotify_dir_watch_IN_EXCL_UNLINK(__attribute__((unused))
3897
test_fixture *fixture,
3898
__attribute__((unused))
3899
gconstpointer
3900
user_data){
3901
__attribute__((cleanup(cleanup_close)))
3902
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3903
g_assert_cmpint(epoll_fd, >=, 0);
3904
__attribute__((cleanup(cleanup_queue)))
3905
task_queue *queue = create_queue();
3906
g_assert_nonnull(queue);
3907
__attribute__((cleanup(string_set_clear)))
3908
string_set cancelled_filenames = {};
3909
const mono_microsecs current_time = 0;
3910
3911
bool quit_now = false;
3912
buffer password = {};
3913
bool mandos_client_exited = false;
3914
bool password_is_read = false;
3915
3916
__attribute__((cleanup(cleanup_string)))
3917
char *tempdir = make_temporary_directory();
3918
g_assert_nonnull(tempdir);
3919
3920
__attribute__((cleanup(cleanup_string)))
3921
char *tempfile = make_temporary_file_in_directory(tempdir);
3922
g_assert_nonnull(tempfile);
3923
int tempfile_fd = open(tempfile, O_WRONLY | O_CLOEXEC | O_NOCTTY
3924
| O_NOFOLLOW);
3925
g_assert_cmpint(tempfile_fd, >, 2);
3926
3927
g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3928
&password, tempdir,
3929
&cancelled_filenames,
3930
¤t_time,
3931
&mandos_client_exited,
3932
&password_is_read));
3933
g_assert_cmpint(unlink(tempfile), ==, 0);
3934
3935
g_assert_cmpuint((unsigned int)queue->length, >, 0);
3936
3937
const task_context *const added_read_task
3938
= find_matching_task(queue,
3939
(task_context){ .func=read_inotify_event });
3940
g_assert_nonnull(added_read_task);
3941
3942
g_assert_cmpint(added_read_task->fd, >, 2);
3943
g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3944
3945
/* "sufficient to read at least one event." - inotify(7) */
3946
const size_t ievent_size = (sizeof(struct inotify_event)
3947
+ NAME_MAX + 1);
3948
struct inotify_event *ievent = malloc(ievent_size);
3949
g_assert_nonnull(ievent);
3950
3951
ssize_t read_size = 0;
3952
read_size = read(added_read_task->fd, ievent, ievent_size);
3953
3954
g_assert_cmpint((int)read_size, >, 0);
3955
g_assert_true(ievent->mask & IN_DELETE);
3956
g_assert_cmpstr(ievent->name, ==, basename(tempfile));
3957
3958
g_assert_cmpint(close(tempfile_fd), ==, 0);
3959
3960
/* IN_EXCL_UNLINK should make the closing of the previously unlinked
3961
file not appear as an ievent, so we should not see it now. */
3962
read_size = read(added_read_task->fd, ievent, ievent_size);
3963
g_assert_cmpint((int)read_size, ==, -1);
3964
g_assert_true(errno == EAGAIN);
3965
3966
free(ievent);
3967
3968
g_assert_cmpint(rmdir(tempdir), ==, 0);
3969
}
3970
3971
static void test_read_inotify_event_readerror(__attribute__((unused))
3972
test_fixture *fixture,
3973
__attribute__((unused))
3974
gconstpointer
3975
user_data){
3976
__attribute__((cleanup(cleanup_close)))
3977
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3978
g_assert_cmpint(epoll_fd, >=, 0);
3979
const mono_microsecs current_time = 0;
3980
3981
/* Reading /proc/self/mem from offset 0 will always result in EIO */
3982
const int fd = open("/proc/self/mem",
3983
O_RDONLY | O_CLOEXEC | O_NOCTTY);
3984
3985
bool quit_now = false;
3986
__attribute__((cleanup(cleanup_queue)))
3987
task_queue *queue = create_queue();
3988
g_assert_nonnull(queue);
3989
3990
task_context task = {
3991
.func=read_inotify_event,
3992
.epoll_fd=epoll_fd,
3993
.fd=fd,
3994
.quit_now=&quit_now,
3995
.filename=strdup("/nonexistent"),
3996
.cancelled_filenames = &(string_set){},
3997
.notafter=0,
3998
.current_time=¤t_time,
3999
};
4000
g_assert_nonnull(task.filename);
4001
run_task_with_stderr_to_dev_null(task, queue);
4002
g_assert_true(quit_now);
4003
g_assert_true(queue->next_run == 0);
4004
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4005
4006
g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
4007
4008
g_assert_cmpint(close(fd), ==, -1);
4009
}
4010
4011
static void test_read_inotify_event_bad_epoll(__attribute__((unused))
4012
test_fixture *fixture,
4013
__attribute__((unused))
4014
gconstpointer
4015
user_data){
4016
const mono_microsecs current_time = 17;
4017
4018
int pipefds[2];
4019
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4020
const int epoll_fd = pipefds[0]; /* This will obviously fail */
4021
4022
bool quit_now = false;
4023
buffer password = {};
4024
bool mandos_client_exited = false;
4025
bool password_is_read = false;
4026
__attribute__((cleanup(cleanup_queue)))
4027
task_queue *queue = create_queue();
4028
g_assert_nonnull(queue);
4029
4030
task_context task = {
4031
.func=read_inotify_event,
4032
.epoll_fd=epoll_fd,
4033
.fd=pipefds[0],
4034
.quit_now=&quit_now,
4035
.password=&password,
4036
.filename=strdup("/nonexistent"),
4037
.cancelled_filenames = &(string_set){},
4038
.notafter=0,
4039
.current_time=¤t_time,
4040
.mandos_client_exited=&mandos_client_exited,
4041
.password_is_read=&password_is_read,
4042
};
4043
g_assert_nonnull(task.filename);
4044
run_task_with_stderr_to_dev_null(task, queue);
4045
4046
g_assert_nonnull(find_matching_task(queue, task));
4047
g_assert_true(queue->next_run == 1000000 + current_time);
4048
4049
g_assert_cmpint(close(pipefds[0]), ==, 0);
4050
g_assert_cmpint(close(pipefds[1]), ==, 0);
4051
}
4052
4053
static void test_read_inotify_event_nodata(__attribute__((unused))
4054
test_fixture *fixture,
4055
__attribute__((unused))
4056
gconstpointer user_data){
4057
__attribute__((cleanup(cleanup_close)))
4058
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4059
g_assert_cmpint(epoll_fd, >=, 0);
4060
const mono_microsecs current_time = 0;
4061
4062
int pipefds[2];
4063
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4064
4065
bool quit_now = false;
4066
buffer password = {};
4067
bool mandos_client_exited = false;
4068
bool password_is_read = false;
4069
__attribute__((cleanup(cleanup_queue)))
4070
task_queue *queue = create_queue();
4071
g_assert_nonnull(queue);
4072
4073
task_context task = {
4074
.func=read_inotify_event,
4075
.epoll_fd=epoll_fd,
4076
.fd=pipefds[0],
4077
.quit_now=&quit_now,
4078
.password=&password,
4079
.filename=strdup("/nonexistent"),
4080
.cancelled_filenames = &(string_set){},
4081
.notafter=0,
4082
.current_time=¤t_time,
4083
.mandos_client_exited=&mandos_client_exited,
4084
.password_is_read=&password_is_read,
4085
};
4086
g_assert_nonnull(task.filename);
4087
task.func(task, queue);
4088
g_assert_false(quit_now);
4089
g_assert_true(queue->next_run == 0);
4090
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4091
4092
g_assert_nonnull(find_matching_task(queue, (task_context){
4093
.func=read_inotify_event,
4094
.epoll_fd=epoll_fd,
4095
.fd=pipefds[0],
4096
.quit_now=&quit_now,
4097
.password=&password,
4098
.filename=task.filename,
4099
.cancelled_filenames=task.cancelled_filenames,
4100
.current_time=¤t_time,
4101
.mandos_client_exited=&mandos_client_exited,
4102
.password_is_read=&password_is_read,
4103
}));
4104
4105
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4106
EPOLLIN | EPOLLRDHUP));
4107
4108
g_assert_cmpint(close(pipefds[1]), ==, 0);
4109
}
4110
4111
static void test_read_inotify_event_eof(__attribute__((unused))
4112
test_fixture *fixture,
4113
__attribute__((unused))
4114
gconstpointer user_data){
4115
__attribute__((cleanup(cleanup_close)))
4116
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4117
g_assert_cmpint(epoll_fd, >=, 0);
4118
const mono_microsecs current_time = 0;
4119
4120
int pipefds[2];
4121
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4122
g_assert_cmpint(close(pipefds[1]), ==, 0);
4123
4124
bool quit_now = false;
4125
buffer password = {};
4126
__attribute__((cleanup(cleanup_queue)))
4127
task_queue *queue = create_queue();
4128
g_assert_nonnull(queue);
4129
4130
task_context task = {
4131
.func=read_inotify_event,
4132
.epoll_fd=epoll_fd,
4133
.fd=pipefds[0],
4134
.quit_now=&quit_now,
4135
.password=&password,
4136
.filename=strdup("/nonexistent"),
4137
.cancelled_filenames = &(string_set){},
4138
.notafter=0,
4139
.current_time=¤t_time,
4140
};
4141
run_task_with_stderr_to_dev_null(task, queue);
4142
g_assert_true(quit_now);
4143
g_assert_true(queue->next_run == 0);
4144
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4145
4146
g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
4147
4148
g_assert_cmpint(close(pipefds[0]), ==, -1);
4149
}
4150
4151
static
4152
void test_read_inotify_event_IN_CLOSE_WRITE(__attribute__((unused))
4153
test_fixture *fixture,
4154
__attribute__((unused))
4155
gconstpointer user_data){
4156
__attribute__((cleanup(cleanup_close)))
4157
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4158
g_assert_cmpint(epoll_fd, >=, 0);
4159
const mono_microsecs current_time = 0;
4160
4161
int pipefds[2];
4162
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4163
4164
/* "sufficient to read at least one event." - inotify(7) */
4165
const size_t ievent_max_size = (sizeof(struct inotify_event)
4166
+ NAME_MAX + 1);
4167
g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4168
struct {
4169
struct inotify_event event;
4170
char name_buffer[NAME_MAX + 1];
4171
} ievent_buffer;
4172
struct inotify_event *const ievent = &ievent_buffer.event;
4173
4174
const char dummy_file_name[] = "ask.dummy_file_name";
4175
ievent->mask = IN_CLOSE_WRITE;
4176
ievent->len = sizeof(dummy_file_name);
4177
memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4178
const size_t ievent_size = (sizeof(struct inotify_event)
4179
+ sizeof(dummy_file_name));
4180
g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
4181
==, ievent_size);
4182
g_assert_cmpint(close(pipefds[1]), ==, 0);
4183
4184
bool quit_now = false;
4185
buffer password = {};
4186
bool mandos_client_exited = false;
4187
bool password_is_read = false;
4188
__attribute__((cleanup(cleanup_queue)))
4189
task_queue *queue = create_queue();
4190
g_assert_nonnull(queue);
4191
4192
task_context task = {
4193
.func=read_inotify_event,
4194
.epoll_fd=epoll_fd,
4195
.fd=pipefds[0],
4196
.quit_now=&quit_now,
4197
.password=&password,
4198
.filename=strdup("/nonexistent"),
4199
.cancelled_filenames = &(string_set){},
4200
.notafter=0,
4201
.current_time=¤t_time,
4202
.mandos_client_exited=&mandos_client_exited,
4203
.password_is_read=&password_is_read,
4204
};
4205
task.func(task, queue);
4206
g_assert_false(quit_now);
4207
g_assert_true(queue->next_run != 0);
4208
g_assert_cmpuint((unsigned int)queue->length, >=, 1);
4209
4210
g_assert_nonnull(find_matching_task(queue, (task_context){
4211
.func=read_inotify_event,
4212
.epoll_fd=epoll_fd,
4213
.fd=pipefds[0],
4214
.quit_now=&quit_now,
4215
.password=&password,
4216
.filename=task.filename,
4217
.cancelled_filenames=task.cancelled_filenames,
4218
.current_time=¤t_time,
4219
.mandos_client_exited=&mandos_client_exited,
4220
.password_is_read=&password_is_read,
4221
}));
4222
4223
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4224
EPOLLIN | EPOLLRDHUP));
4225
4226
g_assert_cmpuint((unsigned int)queue->length, >=, 2);
4227
4228
__attribute__((cleanup(cleanup_string)))
4229
char *filename = NULL;
4230
g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4231
dummy_file_name), >, 0);
4232
g_assert_nonnull(filename);
4233
g_assert_nonnull(find_matching_task(queue, (task_context){
4234
.func=open_and_parse_question,
4235
.epoll_fd=epoll_fd,
4236
.filename=filename,
4237
.question_filename=filename,
4238
.password=&password,
4239
.cancelled_filenames=task.cancelled_filenames,
4240
.current_time=¤t_time,
4241
.mandos_client_exited=&mandos_client_exited,
4242
.password_is_read=&password_is_read,
4243
}));
4244
}
4245
4246
static
4247
void test_read_inotify_event_IN_MOVED_TO(__attribute__((unused))
4248
test_fixture *fixture,
4249
__attribute__((unused))
4250
gconstpointer user_data){
4251
__attribute__((cleanup(cleanup_close)))
4252
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4253
g_assert_cmpint(epoll_fd, >=, 0);
4254
const mono_microsecs current_time = 0;
4255
4256
int pipefds[2];
4257
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4258
4259
/* "sufficient to read at least one event." - inotify(7) */
4260
const size_t ievent_max_size = (sizeof(struct inotify_event)
4261
+ NAME_MAX + 1);
4262
g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4263
struct {
4264
struct inotify_event event;
4265
char name_buffer[NAME_MAX + 1];
4266
} ievent_buffer;
4267
struct inotify_event *const ievent = &ievent_buffer.event;
4268
4269
const char dummy_file_name[] = "ask.dummy_file_name";
4270
ievent->mask = IN_MOVED_TO;
4271
ievent->len = sizeof(dummy_file_name);
4272
memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4273
const size_t ievent_size = (sizeof(struct inotify_event)
4274
+ sizeof(dummy_file_name));
4275
g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
4276
==, ievent_size);
4277
g_assert_cmpint(close(pipefds[1]), ==, 0);
4278
4279
bool quit_now = false;
4280
buffer password = {};
4281
bool mandos_client_exited = false;
4282
bool password_is_read = false;
4283
__attribute__((cleanup(cleanup_queue)))
4284
task_queue *queue = create_queue();
4285
g_assert_nonnull(queue);
4286
4287
task_context task = {
4288
.func=read_inotify_event,
4289
.epoll_fd=epoll_fd,
4290
.fd=pipefds[0],
4291
.quit_now=&quit_now,
4292
.password=&password,
4293
.filename=strdup("/nonexistent"),
4294
.cancelled_filenames = &(string_set){},
4295
.notafter=0,
4296
.current_time=¤t_time,
4297
.mandos_client_exited=&mandos_client_exited,
4298
.password_is_read=&password_is_read,
4299
};
4300
task.func(task, queue);
4301
g_assert_false(quit_now);
4302
g_assert_true(queue->next_run != 0);
4303
g_assert_cmpuint((unsigned int)queue->length, >=, 1);
4304
4305
g_assert_nonnull(find_matching_task(queue, (task_context){
4306
.func=read_inotify_event,
4307
.epoll_fd=epoll_fd,
4308
.fd=pipefds[0],
4309
.quit_now=&quit_now,
4310
.password=&password,
4311
.filename=task.filename,
4312
.cancelled_filenames=task.cancelled_filenames,
4313
.current_time=¤t_time,
4314
.mandos_client_exited=&mandos_client_exited,
4315
.password_is_read=&password_is_read,
4316
}));
4317
4318
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4319
EPOLLIN | EPOLLRDHUP));
4320
4321
g_assert_cmpuint((unsigned int)queue->length, >=, 2);
4322
4323
__attribute__((cleanup(cleanup_string)))
4324
char *filename = NULL;
4325
g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4326
dummy_file_name), >, 0);
4327
g_assert_nonnull(filename);
4328
g_assert_nonnull(find_matching_task(queue, (task_context){
4329
.func=open_and_parse_question,
4330
.epoll_fd=epoll_fd,
4331
.filename=filename,
4332
.question_filename=filename,
4333
.password=&password,
4334
.cancelled_filenames=task.cancelled_filenames,
4335
.current_time=¤t_time,
4336
.mandos_client_exited=&mandos_client_exited,
4337
.password_is_read=&password_is_read,
4338
}));
4339
}
4340
4341
static
4342
void test_read_inotify_event_IN_MOVED_FROM(__attribute__((unused))
4343
test_fixture *fixture,
4344
__attribute__((unused))
4345
gconstpointer user_data){
4346
__attribute__((cleanup(cleanup_close)))
4347
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4348
g_assert_cmpint(epoll_fd, >=, 0);
4349
__attribute__((cleanup(string_set_clear)))
4350
string_set cancelled_filenames = {};
4351
const mono_microsecs current_time = 0;
4352
4353
int pipefds[2];
4354
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4355
4356
/* "sufficient to read at least one event." - inotify(7) */
4357
const size_t ievent_max_size = (sizeof(struct inotify_event)
4358
+ NAME_MAX + 1);
4359
g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4360
struct {
4361
struct inotify_event event;
4362
char name_buffer[NAME_MAX + 1];
4363
} ievent_buffer;
4364
struct inotify_event *const ievent = &ievent_buffer.event;
4365
4366
const char dummy_file_name[] = "ask.dummy_file_name";
4367
ievent->mask = IN_MOVED_FROM;
4368
ievent->len = sizeof(dummy_file_name);
4369
memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4370
const size_t ievent_size = (sizeof(struct inotify_event)
4371
+ sizeof(dummy_file_name));
4372
g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
4373
==, ievent_size);
4374
g_assert_cmpint(close(pipefds[1]), ==, 0);
4375
4376
bool quit_now = false;
4377
buffer password = {};
4378
bool mandos_client_exited = false;
4379
bool password_is_read = false;
4380
__attribute__((cleanup(cleanup_queue)))
4381
task_queue *queue = create_queue();
4382
g_assert_nonnull(queue);
4383
4384
task_context task = {
4385
.func=read_inotify_event,
4386
.epoll_fd=epoll_fd,
4387
.fd=pipefds[0],
4388
.quit_now=&quit_now,
4389
.password=&password,
4390
.filename=strdup("/nonexistent"),
4391
.cancelled_filenames=&cancelled_filenames,
4392
.current_time=¤t_time,
4393
.mandos_client_exited=&mandos_client_exited,
4394
.password_is_read=&password_is_read,
4395
};
4396
task.func(task, queue);
4397
g_assert_false(quit_now);
4398
g_assert_true(queue->next_run == 0);
4399
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4400
4401
g_assert_nonnull(find_matching_task(queue, (task_context){
4402
.func=read_inotify_event,
4403
.epoll_fd=epoll_fd,
4404
.fd=pipefds[0],
4405
.quit_now=&quit_now,
4406
.password=&password,
4407
.filename=task.filename,
4408
.cancelled_filenames=&cancelled_filenames,
4409
.current_time=¤t_time,
4410
.mandos_client_exited=&mandos_client_exited,
4411
.password_is_read=&password_is_read,
4412
}));
4413
4414
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4415
EPOLLIN | EPOLLRDHUP));
4416
4417
__attribute__((cleanup(cleanup_string)))
4418
char *filename = NULL;
4419
g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4420
dummy_file_name), >, 0);
4421
g_assert_nonnull(filename);
4422
g_assert_true(string_set_contains(*task.cancelled_filenames,
4423
filename));
4424
}
4425
4426
static void test_read_inotify_event_IN_DELETE(__attribute__((unused))
4427
test_fixture *fixture,
4428
__attribute__((unused))
4429
gconstpointer
4430
user_data){
4431
__attribute__((cleanup(cleanup_close)))
4432
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4433
g_assert_cmpint(epoll_fd, >=, 0);
4434
__attribute__((cleanup(string_set_clear)))
4435
string_set cancelled_filenames = {};
4436
const mono_microsecs current_time = 0;
4437
4438
int pipefds[2];
4439
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4440
4441
/* "sufficient to read at least one event." - inotify(7) */
4442
const size_t ievent_max_size = (sizeof(struct inotify_event)
4443
+ NAME_MAX + 1);
4444
g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4445
struct {
4446
struct inotify_event event;
4447
char name_buffer[NAME_MAX + 1];
4448
} ievent_buffer;
4449
struct inotify_event *const ievent = &ievent_buffer.event;
4450
4451
const char dummy_file_name[] = "ask.dummy_file_name";
4452
ievent->mask = IN_DELETE;
4453
ievent->len = sizeof(dummy_file_name);
4454
memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4455
const size_t ievent_size = (sizeof(struct inotify_event)
4456
+ sizeof(dummy_file_name));
4457
g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
4458
==, ievent_size);
4459
g_assert_cmpint(close(pipefds[1]), ==, 0);
4460
4461
bool quit_now = false;
4462
buffer password = {};
4463
bool mandos_client_exited = false;
4464
bool password_is_read = false;
4465
__attribute__((cleanup(cleanup_queue)))
4466
task_queue *queue = create_queue();
4467
g_assert_nonnull(queue);
4468
4469
task_context task = {
4470
.func=read_inotify_event,
4471
.epoll_fd=epoll_fd,
4472
.fd=pipefds[0],
4473
.quit_now=&quit_now,
4474
.password=&password,
4475
.filename=strdup("/nonexistent"),
4476
.cancelled_filenames=&cancelled_filenames,
4477
.current_time=¤t_time,
4478
.mandos_client_exited=&mandos_client_exited,
4479
.password_is_read=&password_is_read,
4480
};
4481
task.func(task, queue);
4482
g_assert_false(quit_now);
4483
g_assert_true(queue->next_run == 0);
4484
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4485
4486
g_assert_nonnull(find_matching_task(queue, (task_context){
4487
.func=read_inotify_event,
4488
.epoll_fd=epoll_fd,
4489
.fd=pipefds[0],
4490
.quit_now=&quit_now,
4491
.password=&password,
4492
.filename=task.filename,
4493
.cancelled_filenames=&cancelled_filenames,
4494
.current_time=¤t_time,
4495
.mandos_client_exited=&mandos_client_exited,
4496
.password_is_read=&password_is_read,
4497
}));
4498
4499
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4500
EPOLLIN | EPOLLRDHUP));
4501
4502
__attribute__((cleanup(cleanup_string)))
4503
char *filename = NULL;
4504
g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4505
dummy_file_name), >, 0);
4506
g_assert_nonnull(filename);
4507
g_assert_true(string_set_contains(*task.cancelled_filenames,
4508
filename));
4509
}
4510
4511
static void
4512
test_read_inotify_event_IN_CLOSE_WRITE_badname(__attribute__((unused))
4513
test_fixture *fixture,
4514
__attribute__((unused))
4515
gconstpointer
4516
user_data){
4517
__attribute__((cleanup(cleanup_close)))
4518
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4519
g_assert_cmpint(epoll_fd, >=, 0);
4520
const mono_microsecs current_time = 0;
4521
4522
int pipefds[2];
4523
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4524
4525
/* "sufficient to read at least one event." - inotify(7) */
4526
const size_t ievent_max_size = (sizeof(struct inotify_event)
4527
+ NAME_MAX + 1);
4528
g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4529
struct {
4530
struct inotify_event event;
4531
char name_buffer[NAME_MAX + 1];
4532
} ievent_buffer;
4533
struct inotify_event *const ievent = &ievent_buffer.event;
4534
4535
const char dummy_file_name[] = "ignored.dummy_file_name";
4536
ievent->mask = IN_CLOSE_WRITE;
4537
ievent->len = sizeof(dummy_file_name);
4538
memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4539
const size_t ievent_size = (sizeof(struct inotify_event)
4540
+ sizeof(dummy_file_name));
4541
g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
4542
==, ievent_size);
4543
g_assert_cmpint(close(pipefds[1]), ==, 0);
4544
4545
bool quit_now = false;
4546
buffer password = {};
4547
bool mandos_client_exited = false;
4548
bool password_is_read = false;
4549
__attribute__((cleanup(cleanup_queue)))
4550
task_queue *queue = create_queue();
4551
g_assert_nonnull(queue);
4552
4553
task_context task = {
4554
.func=read_inotify_event,
4555
.epoll_fd=epoll_fd,
4556
.fd=pipefds[0],
4557
.quit_now=&quit_now,
4558
.password=&password,
4559
.filename=strdup("/nonexistent"),
4560
.cancelled_filenames = &(string_set){},
4561
.notafter=0,
4562
.current_time=¤t_time,
4563
.mandos_client_exited=&mandos_client_exited,
4564
.password_is_read=&password_is_read,
4565
};
4566
task.func(task, queue);
4567
g_assert_false(quit_now);
4568
g_assert_true(queue->next_run == 0);
4569
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4570
4571
g_assert_nonnull(find_matching_task(queue, (task_context){
4572
.func=read_inotify_event,
4573
.epoll_fd=epoll_fd,
4574
.fd=pipefds[0],
4575
.quit_now=&quit_now,
4576
.password=&password,
4577
.filename=task.filename,
4578
.cancelled_filenames=task.cancelled_filenames,
4579
.current_time=¤t_time,
4580
.mandos_client_exited=&mandos_client_exited,
4581
.password_is_read=&password_is_read,
4582
}));
4583
4584
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4585
EPOLLIN | EPOLLRDHUP));
4586
}
4587
4588
static void
4589
test_read_inotify_event_IN_MOVED_TO_badname(__attribute__((unused))
4590
test_fixture *fixture,
4591
__attribute__((unused))
4592
gconstpointer user_data){
4593
__attribute__((cleanup(cleanup_close)))
4594
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4595
g_assert_cmpint(epoll_fd, >=, 0);
4596
const mono_microsecs current_time = 0;
4597
4598
int pipefds[2];
4599
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4600
4601
/* "sufficient to read at least one event." - inotify(7) */
4602
const size_t ievent_max_size = (sizeof(struct inotify_event)
4603
+ NAME_MAX + 1);
4604
g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4605
struct {
4606
struct inotify_event event;
4607
char name_buffer[NAME_MAX + 1];
4608
} ievent_buffer;
4609
struct inotify_event *const ievent = &ievent_buffer.event;
4610
4611
const char dummy_file_name[] = "ignored.dummy_file_name";
4612
ievent->mask = IN_MOVED_TO;
4613
ievent->len = sizeof(dummy_file_name);
4614
memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4615
const size_t ievent_size = (sizeof(struct inotify_event)
4616
+ sizeof(dummy_file_name));
4617
g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
4618
==, ievent_size);
4619
g_assert_cmpint(close(pipefds[1]), ==, 0);
4620
4621
bool quit_now = false;
4622
buffer password = {};
4623
bool mandos_client_exited = false;
4624
bool password_is_read = false;
4625
__attribute__((cleanup(cleanup_queue)))
4626
task_queue *queue = create_queue();
4627
g_assert_nonnull(queue);
4628
4629
task_context task = {
4630
.func=read_inotify_event,
4631
.epoll_fd=epoll_fd,
4632
.fd=pipefds[0],
4633
.quit_now=&quit_now,
4634
.password=&password,
4635
.filename=strdup("/nonexistent"),
4636
.cancelled_filenames = &(string_set){},
4637
.notafter=0,
4638
.current_time=¤t_time,
4639
.mandos_client_exited=&mandos_client_exited,
4640
.password_is_read=&password_is_read,
4641
};
4642
task.func(task, queue);
4643
g_assert_false(quit_now);
4644
g_assert_true(queue->next_run == 0);
4645
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4646
4647
g_assert_nonnull(find_matching_task(queue, (task_context){
4648
.func=read_inotify_event,
4649
.epoll_fd=epoll_fd,
4650
.fd=pipefds[0],
4651
.quit_now=&quit_now,
4652
.password=&password,
4653
.filename=task.filename,
4654
.cancelled_filenames=task.cancelled_filenames,
4655
.current_time=¤t_time,
4656
.mandos_client_exited=&mandos_client_exited,
4657
.password_is_read=&password_is_read,
4658
}));
4659
4660
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4661
EPOLLIN | EPOLLRDHUP));
4662
}
4663
4664
static void
4665
test_read_inotify_event_IN_MOVED_FROM_badname(__attribute__((unused))
4666
test_fixture *fixture,
4667
__attribute__((unused))
4668
gconstpointer
4669
user_data){
4670
__attribute__((cleanup(cleanup_close)))
4671
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4672
g_assert_cmpint(epoll_fd, >=, 0);
4673
__attribute__((cleanup(string_set_clear)))
4674
string_set cancelled_filenames = {};
4675
const mono_microsecs current_time = 0;
4676
4677
int pipefds[2];
4678
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4679
4680
/* "sufficient to read at least one event." - inotify(7) */
4681
const size_t ievent_max_size = (sizeof(struct inotify_event)
4682
+ NAME_MAX + 1);
4683
g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4684
struct {
4685
struct inotify_event event;
4686
char name_buffer[NAME_MAX + 1];
4687
} ievent_buffer;
4688
struct inotify_event *const ievent = &ievent_buffer.event;
4689
4690
const char dummy_file_name[] = "ignored.dummy_file_name";
4691
ievent->mask = IN_MOVED_FROM;
4692
ievent->len = sizeof(dummy_file_name);
4693
memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4694
const size_t ievent_size = (sizeof(struct inotify_event)
4695
+ sizeof(dummy_file_name));
4696
g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
4697
==, ievent_size);
4698
g_assert_cmpint(close(pipefds[1]), ==, 0);
4699
4700
bool quit_now = false;
4701
buffer password = {};
4702
bool mandos_client_exited = false;
4703
bool password_is_read = false;
4704
__attribute__((cleanup(cleanup_queue)))
4705
task_queue *queue = create_queue();
4706
g_assert_nonnull(queue);
4707
4708
task_context task = {
4709
.func=read_inotify_event,
4710
.epoll_fd=epoll_fd,
4711
.fd=pipefds[0],
4712
.quit_now=&quit_now,
4713
.password=&password,
4714
.filename=strdup("/nonexistent"),
4715
.cancelled_filenames=&cancelled_filenames,
4716
.current_time=¤t_time,
4717
.mandos_client_exited=&mandos_client_exited,
4718
.password_is_read=&password_is_read,
4719
};
4720
task.func(task, queue);
4721
g_assert_false(quit_now);
4722
g_assert_true(queue->next_run == 0);
4723
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4724
4725
g_assert_nonnull(find_matching_task(queue, (task_context){
4726
.func=read_inotify_event,
4727
.epoll_fd=epoll_fd,
4728
.fd=pipefds[0],
4729
.quit_now=&quit_now,
4730
.password=&password,
4731
.filename=task.filename,
4732
.cancelled_filenames=&cancelled_filenames,
4733
.current_time=¤t_time,
4734
.mandos_client_exited=&mandos_client_exited,
4735
.password_is_read=&password_is_read,
4736
}));
4737
4738
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4739
EPOLLIN | EPOLLRDHUP));
4740
4741
__attribute__((cleanup(cleanup_string)))
4742
char *filename = NULL;
4743
g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4744
dummy_file_name), >, 0);
4745
g_assert_nonnull(filename);
4746
g_assert_false(string_set_contains(cancelled_filenames, filename));
4747
}
4748
4749
static
4750
void test_read_inotify_event_IN_DELETE_badname(__attribute__((unused))
4751
test_fixture *fixture,
4752
__attribute__((unused))
4753
gconstpointer
4754
user_data){
4755
__attribute__((cleanup(cleanup_close)))
4756
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4757
g_assert_cmpint(epoll_fd, >=, 0);
4758
__attribute__((cleanup(string_set_clear)))
4759
string_set cancelled_filenames = {};
4760
const mono_microsecs current_time = 0;
4761
4762
int pipefds[2];
4763
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4764
4765
/* "sufficient to read at least one event." - inotify(7) */
4766
const size_t ievent_max_size = (sizeof(struct inotify_event)
4767
+ NAME_MAX + 1);
4768
g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4769
struct {
4770
struct inotify_event event;
4771
char name_buffer[NAME_MAX + 1];
4772
} ievent_buffer;
4773
struct inotify_event *const ievent = &ievent_buffer.event;
4774
4775
const char dummy_file_name[] = "ignored.dummy_file_name";
4776
ievent->mask = IN_DELETE;
4777
ievent->len = sizeof(dummy_file_name);
4778
memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4779
const size_t ievent_size = (sizeof(struct inotify_event)
4780
+ sizeof(dummy_file_name));
4781
g_assert_cmpint(write(pipefds[1], (char *)ievent, ievent_size),
4782
==, ievent_size);
4783
g_assert_cmpint(close(pipefds[1]), ==, 0);
4784
4785
bool quit_now = false;
4786
buffer password = {};
4787
bool mandos_client_exited = false;
4788
bool password_is_read = false;
4789
__attribute__((cleanup(cleanup_queue)))
4790
task_queue *queue = create_queue();
4791
g_assert_nonnull(queue);
4792
4793
task_context task = {
4794
.func=read_inotify_event,
4795
.epoll_fd=epoll_fd,
4796
.fd=pipefds[0],
4797
.quit_now=&quit_now,
4798
.password=&password,
4799
.filename=strdup("/nonexistent"),
4800
.cancelled_filenames=&cancelled_filenames,
4801
.current_time=¤t_time,
4802
.mandos_client_exited=&mandos_client_exited,
4803
.password_is_read=&password_is_read,
4804
};
4805
task.func(task, queue);
4806
g_assert_false(quit_now);
4807
g_assert_true(queue->next_run == 0);
4808
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4809
4810
g_assert_nonnull(find_matching_task(queue, (task_context){
4811
.func=read_inotify_event,
4812
.epoll_fd=epoll_fd,
4813
.fd=pipefds[0],
4814
.quit_now=&quit_now,
4815
.password=&password,
4816
.filename=task.filename,
4817
.cancelled_filenames=&cancelled_filenames,
4818
.current_time=¤t_time,
4819
.mandos_client_exited=&mandos_client_exited,
4820
.password_is_read=&password_is_read,
4821
}));
4822
4823
g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4824
EPOLLIN | EPOLLRDHUP));
4825
4826
__attribute__((cleanup(cleanup_string)))
4827
char *filename = NULL;
4828
g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4829
dummy_file_name), >, 0);
4830
g_assert_nonnull(filename);
4831
g_assert_false(string_set_contains(cancelled_filenames, filename));
4832
}
4833
4834
static
4835
void test_open_and_parse_question_ENOENT(__attribute__((unused))
4836
test_fixture *fixture,
4837
__attribute__((unused))
4838
gconstpointer user_data){
4839
__attribute__((cleanup(cleanup_close)))
4840
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4841
g_assert_cmpint(epoll_fd, >=, 0);
4842
__attribute__((cleanup(string_set_clear)))
4843
string_set cancelled_filenames = {};
4844
bool mandos_client_exited = false;
4845
bool password_is_read = false;
4846
__attribute__((cleanup(cleanup_queue)))
4847
task_queue *queue = create_queue();
4848
g_assert_nonnull(queue);
4849
4850
char *const filename = strdup("/nonexistent");
4851
g_assert_nonnull(filename);
4852
task_context task = {
4853
.func=open_and_parse_question,
4854
.question_filename=filename,
4855
.epoll_fd=epoll_fd,
4856
.password=(buffer[]){{}},
4857
.filename=filename,
4858
.cancelled_filenames=&cancelled_filenames,
4859
.current_time=(mono_microsecs[]){0},
4860
.mandos_client_exited=&mandos_client_exited,
4861
.password_is_read=&password_is_read,
4862
};
4863
task.func(task, queue);
4864
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4865
}
4866
4867
static void test_open_and_parse_question_EIO(__attribute__((unused))
4868
test_fixture *fixture,
4869
__attribute__((unused))
4870
gconstpointer user_data){
4871
__attribute__((cleanup(cleanup_close)))
4872
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4873
g_assert_cmpint(epoll_fd, >=, 0);
4874
__attribute__((cleanup(string_set_clear)))
4875
string_set cancelled_filenames = {};
4876
buffer password = {};
4877
bool mandos_client_exited = false;
4878
bool password_is_read = false;
4879
__attribute__((cleanup(cleanup_queue)))
4880
task_queue *queue = create_queue();
4881
g_assert_nonnull(queue);
4882
const mono_microsecs current_time = 0;
4883
4884
char *filename = strdup("/proc/self/mem");
4885
task_context task = {
4886
.func=open_and_parse_question,
4887
.question_filename=filename,
4888
.epoll_fd=epoll_fd,
4889
.password=&password,
4890
.filename=filename,
4891
.cancelled_filenames=&cancelled_filenames,
4892
.current_time=¤t_time,
4893
.mandos_client_exited=&mandos_client_exited,
4894
.password_is_read=&password_is_read,
4895
};
4896
run_task_with_stderr_to_dev_null(task, queue);
4897
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4898
}
4899
4900
static void
4901
test_open_and_parse_question_parse_error(__attribute__((unused))
4902
test_fixture *fixture,
4903
__attribute__((unused))
4904
gconstpointer user_data){
4905
__attribute__((cleanup(cleanup_close)))
4906
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4907
g_assert_cmpint(epoll_fd, >=, 0);
4908
__attribute__((cleanup(string_set_clear)))
4909
string_set cancelled_filenames = {};
4910
__attribute__((cleanup(cleanup_queue)))
4911
task_queue *queue = create_queue();
4912
g_assert_nonnull(queue);
4913
4914
__attribute__((cleanup(cleanup_string)))
4915
char *tempfilename = strdup("/tmp/mandosXXXXXX");
4916
g_assert_nonnull(tempfilename);
4917
int tempfile = mkostemp(tempfilename, O_CLOEXEC);
4918
g_assert_cmpint(tempfile, >, 0);
4919
const char bad_data[] = "this is bad syntax\n";
4920
g_assert_cmpint(write(tempfile, bad_data, sizeof(bad_data)),
4921
==, sizeof(bad_data));
4922
g_assert_cmpint(close(tempfile), ==, 0);
4923
4924
char *const filename = strdup(tempfilename);
4925
g_assert_nonnull(filename);
4926
task_context task = {
4927
.func=open_and_parse_question,
4928
.question_filename=filename,
4929
.epoll_fd=epoll_fd,
4930
.password=(buffer[]){{}},
4931
.filename=filename,
4932
.cancelled_filenames=&cancelled_filenames,
4933
.current_time=(mono_microsecs[]){0},
4934
.mandos_client_exited=(bool[]){false},
4935
.password_is_read=(bool[]){false},
4936
};
4937
run_task_with_stderr_to_dev_null(task, queue);
4938
4939
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4940
4941
g_assert_cmpint(unlink(tempfilename), ==, 0);
4942
}
4943
4944
static
4945
void test_open_and_parse_question_nosocket(__attribute__((unused))
4946
test_fixture *fixture,
4947
__attribute__((unused))
4948
gconstpointer user_data){
4949
__attribute__((cleanup(cleanup_close)))
4950
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4951
g_assert_cmpint(epoll_fd, >=, 0);
4952
__attribute__((cleanup(string_set_clear)))
4953
string_set cancelled_filenames = {};
4954
__attribute__((cleanup(cleanup_queue)))
4955
task_queue *queue = create_queue();
4956
g_assert_nonnull(queue);
4957
4958
__attribute__((cleanup(cleanup_string)))
4959
char *tempfilename = strdup("/tmp/mandosXXXXXX");
4960
g_assert_nonnull(tempfilename);
4961
int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4962
g_assert_cmpint(questionfile, >, 0);
4963
FILE *qf = fdopen(questionfile, "w");
4964
g_assert_cmpint(fprintf(qf, "[Ask]\nPID=1\n"), >, 0);
4965
g_assert_cmpint(fclose(qf), ==, 0);
4966
4967
char *const filename = strdup(tempfilename);
4968
g_assert_nonnull(filename);
4969
task_context task = {
4970
.func=open_and_parse_question,
4971
.question_filename=filename,
4972
.epoll_fd=epoll_fd,
4973
.password=(buffer[]){{}},
4974
.filename=filename,
4975
.cancelled_filenames=&cancelled_filenames,
4976
.current_time=(mono_microsecs[]){0},
4977
.mandos_client_exited=(bool[]){false},
4978
.password_is_read=(bool[]){false},
4979
};
4980
run_task_with_stderr_to_dev_null(task, queue);
4981
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4982
4983
g_assert_cmpint(unlink(tempfilename), ==, 0);
4984
}
4985
4986
static
4987
void test_open_and_parse_question_badsocket(__attribute__((unused))
4988
test_fixture *fixture,
4989
__attribute__((unused))
4990
gconstpointer user_data){
4991
__attribute__((cleanup(cleanup_close)))
4992
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4993
g_assert_cmpint(epoll_fd, >=, 0);
4994
__attribute__((cleanup(string_set_clear)))
4995
string_set cancelled_filenames = {};
4996
__attribute__((cleanup(cleanup_queue)))
4997
task_queue *queue = create_queue();
4998
g_assert_nonnull(queue);
4999
5000
__attribute__((cleanup(cleanup_string)))
5001
char *tempfilename = strdup("/tmp/mandosXXXXXX");
5002
g_assert_nonnull(tempfilename);
5003
int questionfile = mkostemp(tempfilename, O_CLOEXEC);
5004
g_assert_cmpint(questionfile, >, 0);
5005
FILE *qf = fdopen(questionfile, "w");
5006
g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=\nPID=1\n"), >, 0);
5007
g_assert_cmpint(fclose(qf), ==, 0);
5008
5009
char *const filename = strdup(tempfilename);
5010
g_assert_nonnull(filename);
5011
task_context task = {
5012
.func=open_and_parse_question,
5013
.question_filename=filename,
5014
.epoll_fd=epoll_fd,
5015
.password=(buffer[]){{}},
5016
.filename=filename,
5017
.cancelled_filenames=&cancelled_filenames,
5018
.current_time=(mono_microsecs[]){0},
5019
.mandos_client_exited=(bool[]){false},
5020
.password_is_read=(bool[]){false},
5021
};
5022
run_task_with_stderr_to_dev_null(task, queue);
5023
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5024
5025
g_assert_cmpint(unlink(tempfilename), ==, 0);
5026
}
5027
5028
static
5029
void test_open_and_parse_question_nopid(__attribute__((unused))
5030
test_fixture *fixture,
5031
__attribute__((unused))
5032
gconstpointer user_data){
5033
__attribute__((cleanup(cleanup_close)))
5034
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5035
g_assert_cmpint(epoll_fd, >=, 0);
5036
__attribute__((cleanup(string_set_clear)))
5037
string_set cancelled_filenames = {};
5038
__attribute__((cleanup(cleanup_queue)))
5039
task_queue *queue = create_queue();
5040
g_assert_nonnull(queue);
5041
5042
__attribute__((cleanup(cleanup_string)))
5043
char *tempfilename = strdup("/tmp/mandosXXXXXX");
5044
g_assert_nonnull(tempfilename);
5045
int questionfile = mkostemp(tempfilename, O_CLOEXEC);
5046
g_assert_cmpint(questionfile, >, 0);
5047
FILE *qf = fdopen(questionfile, "w");
5048
g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\n"), >, 0);
5049
g_assert_cmpint(fclose(qf), ==, 0);
5050
5051
char *const filename = strdup(tempfilename);
5052
g_assert_nonnull(filename);
5053
task_context task = {
5054
.func=open_and_parse_question,
5055
.question_filename=filename,
5056
.epoll_fd=epoll_fd,
5057
.password=(buffer[]){{}},
5058
.filename=filename,
5059
.cancelled_filenames=&cancelled_filenames,
5060
.current_time=(mono_microsecs[]){0},
5061
.mandos_client_exited=(bool[]){false},
5062
.password_is_read=(bool[]){false},
5063
};
5064
run_task_with_stderr_to_dev_null(task, queue);
5065
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5066
5067
g_assert_cmpint(unlink(tempfilename), ==, 0);
5068
}
5069
5070
static
5071
void test_open_and_parse_question_badpid(__attribute__((unused))
5072
test_fixture *fixture,
5073
__attribute__((unused))
5074
gconstpointer user_data){
5075
__attribute__((cleanup(cleanup_close)))
5076
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5077
g_assert_cmpint(epoll_fd, >=, 0);
5078
__attribute__((cleanup(string_set_clear)))
5079
string_set cancelled_filenames = {};
5080
__attribute__((cleanup(cleanup_queue)))
5081
task_queue *queue = create_queue();
5082
g_assert_nonnull(queue);
5083
5084
__attribute__((cleanup(cleanup_string)))
5085
char *tempfilename = strdup("/tmp/mandosXXXXXX");
5086
g_assert_nonnull(tempfilename);
5087
int questionfile = mkostemp(tempfilename, O_CLOEXEC);
5088
g_assert_cmpint(questionfile, >, 0);
5089
FILE *qf = fdopen(questionfile, "w");
5090
g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=\n"),
5091
>, 0);
5092
g_assert_cmpint(fclose(qf), ==, 0);
5093
5094
char *const filename = strdup(tempfilename);
5095
g_assert_nonnull(filename);
5096
task_context task = {
5097
.func=open_and_parse_question,
5098
.question_filename=filename,
5099
.epoll_fd=epoll_fd,
5100
.password=(buffer[]){{}},
5101
.filename=filename,
5102
.cancelled_filenames=&cancelled_filenames,
5103
.current_time=(mono_microsecs[]){0},
5104
.mandos_client_exited=(bool[]){false},
5105
.password_is_read=(bool[]){false},
5106
};
5107
run_task_with_stderr_to_dev_null(task, queue);
5108
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5109
5110
g_assert_cmpint(unlink(tempfilename), ==, 0);
5111
}
5112
5113
static void
5114
test_open_and_parse_question_noexist_pid(__attribute__((unused))
5115
test_fixture *fixture,
5116
__attribute__((unused))
5117
gconstpointer user_data){
5118
__attribute__((cleanup(cleanup_close)))
5119
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5120
g_assert_cmpint(epoll_fd, >=, 0);
5121
__attribute__((cleanup(string_set_clear)))
5122
string_set cancelled_filenames = {};
5123
buffer password = {};
5124
bool mandos_client_exited = false;
5125
bool password_is_read = false;
5126
__attribute__((cleanup(cleanup_queue)))
5127
task_queue *queue = create_queue();
5128
g_assert_nonnull(queue);
5129
const mono_microsecs current_time = 0;
5130
5131
/* Find value of sysctl kernel.pid_max */
5132
uintmax_t pid_max = 0;
5133
FILE *sysctl_pid_max = fopen("/proc/sys/kernel/pid_max", "r");
5134
g_assert_nonnull(sysctl_pid_max);
5135
g_assert_cmpint(fscanf(sysctl_pid_max, "%" PRIuMAX, &pid_max),
5136
==, 1);
5137
g_assert_cmpint(fclose(sysctl_pid_max), ==, 0);
5138
5139
pid_t nonexisting_pid = ((pid_t)pid_max)+1;
5140
g_assert_true(nonexisting_pid > 0); /* Overflow check */
5141
5142
__attribute__((cleanup(cleanup_string)))
5143
char *tempfilename = strdup("/tmp/mandosXXXXXX");
5144
g_assert_nonnull(tempfilename);
5145
int questionfile = mkostemp(tempfilename, O_CLOEXEC);
5146
g_assert_cmpint(questionfile, >, 0);
5147
FILE *qf = fdopen(questionfile, "w");
5148
g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
5149
PRIuMAX"\n", (uintmax_t)nonexisting_pid),
5150
>, 0);
5151
g_assert_cmpint(fclose(qf), ==, 0);
5152
5153
char *const question_filename = strdup(tempfilename);
5154
g_assert_nonnull(question_filename);
5155
task_context task = {
5156
.func=open_and_parse_question,
5157
.question_filename=question_filename,
5158
.epoll_fd=epoll_fd,
5159
.password=&password,
5160
.filename=question_filename,
5161
.cancelled_filenames=&cancelled_filenames,
5162
.current_time=¤t_time,
5163
.mandos_client_exited=&mandos_client_exited,
5164
.password_is_read=&password_is_read,
5165
};
5166
run_task_with_stderr_to_dev_null(task, queue);
5167
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5168
5169
g_assert_cmpint(unlink(tempfilename), ==, 0);
5170
}
5171
5172
static void
5173
test_open_and_parse_question_no_notafter(__attribute__((unused))
5174
test_fixture *fixture,
5175
__attribute__((unused))
5176
gconstpointer user_data){
5177
__attribute__((cleanup(cleanup_close)))
5178
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5179
g_assert_cmpint(epoll_fd, >=, 0);
5180
__attribute__((cleanup(string_set_clear)))
5181
string_set cancelled_filenames = {};
5182
buffer password = {};
5183
bool mandos_client_exited = false;
5184
bool password_is_read = false;
5185
__attribute__((cleanup(cleanup_queue)))
5186
task_queue *queue = create_queue();
5187
g_assert_nonnull(queue);
5188
const mono_microsecs current_time = 0;
5189
5190
__attribute__((cleanup(cleanup_string)))
5191
char *tempfilename = strdup("/tmp/mandosXXXXXX");
5192
g_assert_nonnull(tempfilename);
5193
int questionfile = mkostemp(tempfilename, O_CLOEXEC);
5194
g_assert_cmpint(questionfile, >, 0);
5195
FILE *qf = fdopen(questionfile, "w");
5196
g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
5197
PRIuMAX "\n", (uintmax_t)getpid()), >, 0);
5198
g_assert_cmpint(fclose(qf), ==, 0);
5199
5200
char *const filename = strdup(tempfilename);
5201
g_assert_nonnull(filename);
5202
task_context task = {
5203
.func=open_and_parse_question,
5204
.question_filename=filename,
5205
.epoll_fd=epoll_fd,
5206
.password=&password,
5207
.filename=filename,
5208
.cancelled_filenames=&cancelled_filenames,
5209
.current_time=¤t_time,
5210
.mandos_client_exited=&mandos_client_exited,
5211
.password_is_read=&password_is_read,
5212
};
5213
task.func(task, queue);
5214
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5215
5216
__attribute__((cleanup(cleanup_string)))
5217
char *socket_filename = strdup("/nonexistent");
5218
g_assert_nonnull(socket_filename);
5219
g_assert_nonnull(find_matching_task(queue, (task_context){
5220
.func=connect_question_socket,
5221
.question_filename=tempfilename,
5222
.filename=socket_filename,
5223
.epoll_fd=epoll_fd,
5224
.password=&password,
5225
.current_time=¤t_time,
5226
.mandos_client_exited=&mandos_client_exited,
5227
.password_is_read=&password_is_read,
5228
}));
5229
5230
g_assert_true(queue->next_run != 0);
5231
5232
g_assert_cmpint(unlink(tempfilename), ==, 0);
5233
}
5234
5235
static void
5236
test_open_and_parse_question_bad_notafter(__attribute__((unused))
5237
test_fixture *fixture,
5238
__attribute__((unused))
5239
gconstpointer user_data){
5240
__attribute__((cleanup(cleanup_close)))
5241
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5242
g_assert_cmpint(epoll_fd, >=, 0);
5243
__attribute__((cleanup(string_set_clear)))
5244
string_set cancelled_filenames = {};
5245
buffer password = {};
5246
bool mandos_client_exited = false;
5247
bool password_is_read = false;
5248
__attribute__((cleanup(cleanup_queue)))
5249
task_queue *queue = create_queue();
5250
g_assert_nonnull(queue);
5251
const mono_microsecs current_time = 0;
5252
5253
__attribute__((cleanup(cleanup_string)))
5254
char *tempfilename = strdup("/tmp/mandosXXXXXX");
5255
g_assert_nonnull(tempfilename);
5256
int questionfile = mkostemp(tempfilename, O_CLOEXEC);
5257
g_assert_cmpint(questionfile, >, 0);
5258
FILE *qf = fdopen(questionfile, "w");
5259
g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
5260
PRIuMAX "\nNotAfter=\n",
5261
(uintmax_t)getpid()), >, 0);
5262
g_assert_cmpint(fclose(qf), ==, 0);
5263
5264
char *const filename = strdup(tempfilename);
5265
g_assert_nonnull(filename);
5266
task_context task = {
5267
.func=open_and_parse_question,
5268
.question_filename=filename,
5269
.epoll_fd=epoll_fd,
5270
.password=&password,
5271
.filename=filename,
5272
.cancelled_filenames=&cancelled_filenames,
5273
.current_time=¤t_time,
5274
.mandos_client_exited=&mandos_client_exited,
5275
.password_is_read=&password_is_read,
5276
};
5277
run_task_with_stderr_to_dev_null(task, queue);
5278
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5279
5280
__attribute__((cleanup(cleanup_string)))
5281
char *socket_filename = strdup("/nonexistent");
5282
g_assert_nonnull(find_matching_task(queue, (task_context){
5283
.func=connect_question_socket,
5284
.question_filename=tempfilename,
5285
.filename=socket_filename,
5286
.epoll_fd=epoll_fd,
5287
.password=&password,
5288
.current_time=¤t_time,
5289
.mandos_client_exited=&mandos_client_exited,
5290
.password_is_read=&password_is_read,
5291
}));
5292
g_assert_true(queue->next_run != 0);
5293
5294
g_assert_cmpint(unlink(tempfilename), ==, 0);
5295
}
5296
5297
static
5298
void assert_open_and_parse_question_with_notafter(const mono_microsecs
5299
current_time,
5300
const mono_microsecs
5301
notafter,
5302
const mono_microsecs
5303
next_queue_run){
5304
__attribute__((cleanup(cleanup_close)))
5305
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5306
g_assert_cmpint(epoll_fd, >=, 0);
5307
__attribute__((cleanup(string_set_clear)))
5308
string_set cancelled_filenames = {};
5309
buffer password = {};
5310
bool mandos_client_exited = false;
5311
bool password_is_read = false;
5312
__attribute__((cleanup(cleanup_queue)))
5313
task_queue *queue = create_queue();
5314
g_assert_nonnull(queue);
5315
queue->next_run = next_queue_run;
5316
5317
__attribute__((cleanup(cleanup_string)))
5318
char *tempfilename = strdup("/tmp/mandosXXXXXX");
5319
g_assert_nonnull(tempfilename);
5320
int questionfile = mkostemp(tempfilename, O_CLOEXEC);
5321
g_assert_cmpint(questionfile, >, 0);
5322
FILE *qf = fdopen(questionfile, "w");
5323
g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
5324
PRIuMAX "\nNotAfter=%" PRIuMAX "\n",
5325
(uintmax_t)getpid(), notafter), >, 0);
5326
g_assert_cmpint(fclose(qf), ==, 0);
5327
5328
char *const filename = strdup(tempfilename);
5329
g_assert_nonnull(filename);
5330
task_context task = {
5331
.func=open_and_parse_question,
5332
.question_filename=filename,
5333
.epoll_fd=epoll_fd,
5334
.password=&password,
5335
.filename=filename,
5336
.cancelled_filenames=&cancelled_filenames,
5337
.current_time=¤t_time,
5338
.mandos_client_exited=&mandos_client_exited,
5339
.password_is_read=&password_is_read,
5340
};
5341
task.func(task, queue);
5342
5343
if(queue->length >= 1){
5344
__attribute__((cleanup(cleanup_string)))
5345
char *socket_filename = strdup("/nonexistent");
5346
g_assert_nonnull(find_matching_task(queue, (task_context){
5347
.func=connect_question_socket,
5348
.filename=socket_filename,
5349
.epoll_fd=epoll_fd,
5350
.password=&password,
5351
.current_time=¤t_time,
5352
.cancelled_filenames=&cancelled_filenames,
5353
.mandos_client_exited=&mandos_client_exited,
5354
.password_is_read=&password_is_read,
5355
}));
5356
g_assert_true(queue->next_run != 0);
5357
}
5358
5359
if(notafter == 0){
5360
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5361
} else if(current_time >= notafter) {
5362
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5363
} else {
5364
g_assert_nonnull(find_matching_task(queue, (task_context){
5365
.func=cancel_old_question,
5366
.question_filename=tempfilename,
5367
.filename=tempfilename,
5368
.notafter=notafter,
5369
.cancelled_filenames=&cancelled_filenames,
5370
.current_time=¤t_time,
5371
}));
5372
}
5373
g_assert_true(queue->next_run == 1);
5374
5375
g_assert_cmpint(unlink(tempfilename), ==, 0);
5376
}
5377
5378
static void
5379
test_open_and_parse_question_notafter_0(__attribute__((unused))
5380
test_fixture *fixture,
5381
__attribute__((unused))
5382
gconstpointer user_data){
5383
/* current_time, notafter, next_queue_run */
5384
assert_open_and_parse_question_with_notafter(0, 0, 0);
5385
}
5386
5387
static void
5388
test_open_and_parse_question_notafter_1(__attribute__((unused))
5389
test_fixture *fixture,
5390
__attribute__((unused))
5391
gconstpointer user_data){
5392
/* current_time, notafter, next_queue_run */
5393
assert_open_and_parse_question_with_notafter(0, 1, 0);
5394
}
5395
5396
static void
5397
test_open_and_parse_question_notafter_1_1(__attribute__((unused))
5398
test_fixture *fixture,
5399
__attribute__((unused))
5400
gconstpointer user_data){
5401
/* current_time, notafter, next_queue_run */
5402
assert_open_and_parse_question_with_notafter(0, 1, 1);
5403
}
5404
5405
static void
5406
test_open_and_parse_question_notafter_1_2(__attribute__((unused))
5407
test_fixture *fixture,
5408
__attribute__((unused))
5409
gconstpointer user_data){
5410
/* current_time, notafter, next_queue_run */
5411
assert_open_and_parse_question_with_notafter(0, 1, 2);
5412
}
5413
5414
static void
5415
test_open_and_parse_question_equal_notafter(__attribute__((unused))
5416
test_fixture *fixture,
5417
__attribute__((unused))
5418
gconstpointer user_data){
5419
/* current_time, notafter, next_queue_run */
5420
assert_open_and_parse_question_with_notafter(1, 1, 0);
5421
}
5422
5423
static void
5424
test_open_and_parse_question_late_notafter(__attribute__((unused))
5425
test_fixture *fixture,
5426
__attribute__((unused))
5427
gconstpointer user_data){
5428
/* current_time, notafter, next_queue_run */
5429
assert_open_and_parse_question_with_notafter(2, 1, 0);
5430
}
5431
5432
static void assert_cancel_old_question_param(const mono_microsecs
5433
next_queue_run,
5434
const mono_microsecs
5435
notafter,
5436
const mono_microsecs
5437
current_time,
5438
const mono_microsecs
5439
next_set_to){
5440
__attribute__((cleanup(string_set_clear)))
5441
string_set cancelled_filenames = {};
5442
__attribute__((cleanup(cleanup_queue)))
5443
task_queue *queue = create_queue();
5444
g_assert_nonnull(queue);
5445
queue->next_run = next_queue_run;
5446
5447
char *const question_filename = strdup("/nonexistent");
5448
g_assert_nonnull(question_filename);
5449
task_context task = {
5450
.func=cancel_old_question,
5451
.question_filename=question_filename,
5452
.filename=question_filename,
5453
.notafter=notafter,
5454
.cancelled_filenames=&cancelled_filenames,
5455
.current_time=¤t_time,
5456
};
5457
task.func(task, queue);
5458
5459
if(current_time >= notafter){
5460
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5461
g_assert_true(string_set_contains(cancelled_filenames,
5462
"/nonexistent"));
5463
} else {
5464
g_assert_nonnull(find_matching_task(queue, (task_context){
5465
.func=cancel_old_question,
5466
.question_filename=question_filename,
5467
.filename=question_filename,
5468
.notafter=notafter,
5469
.cancelled_filenames=&cancelled_filenames,
5470
.current_time=¤t_time,
5471
}));
5472
5473
g_assert_false(string_set_contains(cancelled_filenames,
5474
question_filename));
5475
}
5476
g_assert_cmpuint((unsigned int)queue->next_run, ==,
5477
(unsigned int)next_set_to);
5478
}
5479
5480
static void test_cancel_old_question_0_1_2(__attribute__((unused))
5481
test_fixture *fixture,
5482
__attribute__((unused))
5483
gconstpointer user_data){
5484
/* next_queue_run unset,
5485
cancellation should happen because time has come,
5486
next_queue_run should be unchanged */
5487
/* next_queue_run, notafter, current_time, next_set_to */
5488
assert_cancel_old_question_param(0, 1, 2, 0);
5489
}
5490
5491
static void test_cancel_old_question_0_2_1(__attribute__((unused))
5492
test_fixture *fixture,
5493
__attribute__((unused))
5494
gconstpointer user_data){
5495
/* If next_queue_run is 0, meaning unset, and notafter is 2,
5496
and current_time is not yet notafter or greater,
5497
update value of next_queue_run to value of notafter */
5498
/* next_queue_run, notafter, current_time, next_set_to */
5499
assert_cancel_old_question_param(0, 2, 1, 2);
5500
}
5501
5502
static void test_cancel_old_question_1_2_3(__attribute__((unused))
5503
test_fixture *fixture,
5504
__attribute__((unused))
5505
gconstpointer user_data){
5506
/* next_queue_run 1,
5507
cancellation should happen because time has come,
5508
next_queue_run should be unchanged */
5509
/* next_queue_run, notafter, current_time, next_set_to */
5510
assert_cancel_old_question_param(1, 2, 3, 1);
5511
}
5512
5513
static void test_cancel_old_question_1_3_2(__attribute__((unused))
5514
test_fixture *fixture,
5515
__attribute__((unused))
5516
gconstpointer user_data){
5517
/* If next_queue_run is set,
5518
and current_time is not yet notafter or greater,
5519
and notafter is larger than next_queue_run
5520
next_queue_run should be unchanged */
5521
/* next_queue_run, notafter, current_time, next_set_to */
5522
assert_cancel_old_question_param(1, 3, 2, 1);
5523
}
5524
5525
static void test_cancel_old_question_2_1_3(__attribute__((unused))
5526
test_fixture *fixture,
5527
__attribute__((unused))
5528
gconstpointer user_data){
5529
/* next_queue_run 2,
5530
cancellation should happen because time has come,
5531
next_queue_run should be unchanged */
5532
/* next_queue_run, notafter, current_time, next_set_to */
5533
assert_cancel_old_question_param(2, 1, 3, 2);
5534
}
5535
5536
static void test_cancel_old_question_2_3_1(__attribute__((unused))
5537
test_fixture *fixture,
5538
__attribute__((unused))
5539
gconstpointer user_data){
5540
/* If next_queue_run is set,
5541
and current_time is not yet notafter or greater,
5542
and notafter is larger than next_queue_run
5543
next_queue_run should be unchanged */
5544
/* next_queue_run, notafter, current_time, next_set_to */
5545
assert_cancel_old_question_param(2, 3, 1, 2);
5546
}
5547
5548
static void test_cancel_old_question_3_1_2(__attribute__((unused))
5549
test_fixture *fixture,
5550
__attribute__((unused))
5551
gconstpointer user_data){
5552
/* next_queue_run 3,
5553
cancellation should happen because time has come,
5554
next_queue_run should be unchanged */
5555
/* next_queue_run, notafter, current_time, next_set_to */
5556
assert_cancel_old_question_param(3, 1, 2, 3);
5557
}
5558
5559
static void test_cancel_old_question_3_2_1(__attribute__((unused))
5560
test_fixture *fixture,
5561
__attribute__((unused))
5562
gconstpointer user_data){
5563
/* If next_queue_run is set,
5564
and current_time is not yet notafter or greater,
5565
and notafter is smaller than next_queue_run
5566
update value of next_queue_run to value of notafter */
5567
/* next_queue_run, notafter, current_time, next_set_to */
5568
assert_cancel_old_question_param(3, 2, 1, 2);
5569
}
5570
5571
static void
5572
test_connect_question_socket_name_too_long(__attribute__((unused))
5573
test_fixture *fixture,
5574
__attribute__((unused))
5575
gconstpointer user_data){
5576
__attribute__((cleanup(cleanup_close)))
5577
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5578
g_assert_cmpint(epoll_fd, >=, 0);
5579
const char question_filename[] = "/nonexistent/question";
5580
__attribute__((cleanup(string_set_clear)))
5581
string_set cancelled_filenames = {};
5582
__attribute__((cleanup(cleanup_queue)))
5583
task_queue *queue = create_queue();
5584
g_assert_nonnull(queue);
5585
__attribute__((cleanup(cleanup_string)))
5586
char *tempdir = make_temporary_directory();
5587
g_assert_nonnull(tempdir);
5588
struct sockaddr_un unix_socket = { .sun_family=AF_LOCAL };
5589
char socket_name[sizeof(unix_socket.sun_path)];
5590
memset(socket_name, 'x', sizeof(socket_name));
5591
socket_name[sizeof(socket_name)-1] = '\0';
5592
char *filename = NULL;
5593
g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
5594
>, 0);
5595
g_assert_nonnull(filename);
5596
5597
task_context task = {
5598
.func=connect_question_socket,
5599
.question_filename=strdup(question_filename),
5600
.epoll_fd=epoll_fd,
5601
.password=(buffer[]){{}},
5602
.filename=filename,
5603
.cancelled_filenames=&cancelled_filenames,
5604
.mandos_client_exited=(bool[]){false},
5605
.password_is_read=(bool[]){false},
5606
.current_time=(mono_microsecs[]){0},
5607
};
5608
g_assert_nonnull(task.question_filename);
5609
run_task_with_stderr_to_dev_null(task, queue);
5610
5611
g_assert_true(string_set_contains(cancelled_filenames,
5612
question_filename));
5613
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5614
g_assert_true(queue->next_run == 0);
5615
5616
g_assert_cmpint(rmdir(tempdir), ==, 0);
5617
}
5618
5619
static
5620
void test_connect_question_socket_connect_fail(__attribute__((unused))
5621
test_fixture *fixture,
5622
__attribute__((unused))
5623
gconstpointer
5624
user_data){
5625
__attribute__((cleanup(cleanup_close)))
5626
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5627
g_assert_cmpint(epoll_fd, >=, 0);
5628
const char question_filename[] = "/nonexistent/question";
5629
__attribute__((cleanup(string_set_clear)))
5630
string_set cancelled_filenames = {};
5631
const mono_microsecs current_time = 3;
5632
__attribute__((cleanup(cleanup_queue)))
5633
task_queue *queue = create_queue();
5634
g_assert_nonnull(queue);
5635
__attribute__((cleanup(cleanup_string)))
5636
char *tempdir = make_temporary_directory();
5637
g_assert_nonnull(tempdir);
5638
char socket_name[] = "nonexistent";
5639
char *filename = NULL;
5640
g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
5641
>, 0);
5642
g_assert_nonnull(filename);
5643
5644
task_context task = {
5645
.func=connect_question_socket,
5646
.question_filename=strdup(question_filename),
5647
.epoll_fd=epoll_fd,
5648
.password=(buffer[]){{}},
5649
.filename=filename,
5650
.cancelled_filenames=&cancelled_filenames,
5651
.mandos_client_exited=(bool[]){false},
5652
.password_is_read=(bool[]){false},
5653
.current_time=¤t_time,
5654
};
5655
g_assert_nonnull(task.question_filename);
5656
run_task_with_stderr_to_dev_null(task, queue);
5657
5658
g_assert_nonnull(find_matching_task(queue, task));
5659
5660
g_assert_false(string_set_contains(cancelled_filenames,
5661
question_filename));
5662
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5663
g_assert_true(queue->next_run == 1000000 + current_time);
5664
5665
g_assert_cmpint(rmdir(tempdir), ==, 0);
5666
}
5667
5668
static
5669
void test_connect_question_socket_bad_epoll(__attribute__((unused))
5670
test_fixture *fixture,
5671
__attribute__((unused))
5672
gconstpointer user_data){
5673
__attribute__((cleanup(cleanup_close)))
5674
const int epoll_fd = open("/dev/null",
5675
O_WRONLY | O_CLOEXEC | O_NOCTTY);
5676
__attribute__((cleanup(cleanup_string)))
5677
char *const question_filename = strdup("/nonexistent/question");
5678
g_assert_nonnull(question_filename);
5679
__attribute__((cleanup(string_set_clear)))
5680
string_set cancelled_filenames = {};
5681
const mono_microsecs current_time = 5;
5682
__attribute__((cleanup(cleanup_queue)))
5683
task_queue *queue = create_queue();
5684
g_assert_nonnull(queue);
5685
__attribute__((cleanup(cleanup_string)))
5686
char *tempdir = make_temporary_directory();
5687
g_assert_nonnull(tempdir);
5688
__attribute__((cleanup(cleanup_close)))
5689
const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
5690
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
5691
g_assert_cmpint(sock_fd, >=, 0);
5692
struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
5693
const char socket_name[] = "socket_name";
5694
__attribute__((cleanup(cleanup_string)))
5695
char *filename = NULL;
5696
g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
5697
>, 0);
5698
g_assert_nonnull(filename);
5699
g_assert_cmpint((int)strlen(filename), <,
5700
(int)sizeof(sock_name.sun_path));
5701
strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
5702
sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
5703
g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
5704
(socklen_t)SUN_LEN(&sock_name)), >=, 0);
5705
task_context task = {
5706
.func=connect_question_socket,
5707
.question_filename=strdup(question_filename),
5708
.epoll_fd=epoll_fd,
5709
.password=(buffer[]){{}},
5710
.filename=strdup(filename),
5711
.cancelled_filenames=&cancelled_filenames,
5712
.mandos_client_exited=(bool[]){false},
5713
.password_is_read=(bool[]){false},
5714
.current_time=¤t_time,
5715
};
5716
g_assert_nonnull(task.question_filename);
5717
run_task_with_stderr_to_dev_null(task, queue);
5718
5719
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5720
const task_context *const added_task
5721
= find_matching_task(queue, task);
5722
g_assert_nonnull(added_task);
5723
g_assert_true(queue->next_run == 1000000 + current_time);
5724
5725
g_assert_cmpint(unlink(filename), ==, 0);
5726
g_assert_cmpint(rmdir(tempdir), ==, 0);
5727
}
5728
5729
static
5730
void test_connect_question_socket_usable(__attribute__((unused))
5731
test_fixture *fixture,
5732
__attribute__((unused))
5733
gconstpointer user_data){
5734
__attribute__((cleanup(cleanup_close)))
5735
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5736
g_assert_cmpint(epoll_fd, >=, 0);
5737
__attribute__((cleanup(cleanup_string)))
5738
char *const question_filename = strdup("/nonexistent/question");
5739
g_assert_nonnull(question_filename);
5740
__attribute__((cleanup(string_set_clear)))
5741
string_set cancelled_filenames = {};
5742
buffer password = {};
5743
bool mandos_client_exited = false;
5744
bool password_is_read = false;
5745
const mono_microsecs current_time = 0;
5746
__attribute__((cleanup(cleanup_queue)))
5747
task_queue *queue = create_queue();
5748
g_assert_nonnull(queue);
5749
__attribute__((cleanup(cleanup_string)))
5750
char *tempdir = make_temporary_directory();
5751
g_assert_nonnull(tempdir);
5752
__attribute__((cleanup(cleanup_close)))
5753
const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
5754
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
5755
g_assert_cmpint(sock_fd, >=, 0);
5756
struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
5757
const char socket_name[] = "socket_name";
5758
__attribute__((cleanup(cleanup_string)))
5759
char *filename = NULL;
5760
g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
5761
>, 0);
5762
g_assert_nonnull(filename);
5763
g_assert_cmpint((int)strlen(filename), <,
5764
(int)sizeof(sock_name.sun_path));
5765
strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
5766
sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
5767
g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
5768
(socklen_t)SUN_LEN(&sock_name)), >=, 0);
5769
task_context task = {
5770
.func=connect_question_socket,
5771
.question_filename=strdup(question_filename),
5772
.epoll_fd=epoll_fd,
5773
.password=&password,
5774
.filename=strdup(filename),
5775
.cancelled_filenames=&cancelled_filenames,
5776
.mandos_client_exited=&mandos_client_exited,
5777
.password_is_read=&password_is_read,
5778
.current_time=¤t_time,
5779
};
5780
g_assert_nonnull(task.question_filename);
5781
task.func(task, queue);
5782
5783
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5784
const task_context *const added_task
5785
= find_matching_task(queue, (task_context){
5786
.func=send_password_to_socket,
5787
.question_filename=question_filename,
5788
.filename=filename,
5789
.epoll_fd=epoll_fd,
5790
.password=&password,
5791
.cancelled_filenames=&cancelled_filenames,
5792
.mandos_client_exited=&mandos_client_exited,
5793
.password_is_read=&password_is_read,
5794
.current_time=¤t_time,
5795
});
5796
g_assert_nonnull(added_task);
5797
g_assert_cmpint(added_task->fd, >, 0);
5798
5799
g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
5800
EPOLLOUT));
5801
5802
const int fd = added_task->fd;
5803
g_assert_cmpint(fd, >, 0);
5804
g_assert_true(fd_has_cloexec_and_nonblock(fd));
5805
5806
/* write to fd */
5807
char write_data[PIPE_BUF];
5808
{
5809
/* Construct test password buffer */
5810
/* Start with + since that is what the real procotol uses */
5811
write_data[0] = '+';
5812
/* Set a special character at string end just to mark the end */
5813
write_data[sizeof(write_data)-2] = 'y';
5814
/* Set NUL at buffer end, as suggested by the protocol */
5815
write_data[sizeof(write_data)-1] = '\0';
5816
/* Fill rest of password with 'x' */
5817
memset(write_data+1, 'x', sizeof(write_data)-3);
5818
g_assert_cmpint((int)send(fd, write_data, sizeof(write_data),
5819
MSG_NOSIGNAL), ==, sizeof(write_data));
5820
}
5821
5822
/* read from sock_fd */
5823
char read_data[sizeof(write_data)];
5824
g_assert_cmpint((int)read(sock_fd, read_data, sizeof(read_data)),
5825
==, sizeof(read_data));
5826
5827
g_assert_true(memcmp(write_data, read_data, sizeof(write_data))
5828
== 0);
5829
5830
/* writing to sock_fd should fail */
5831
g_assert_cmpint(send(sock_fd, write_data, sizeof(write_data),
5832
MSG_NOSIGNAL), <, 0);
5833
5834
/* reading from fd should fail */
5835
g_assert_cmpint((int)recv(fd, read_data, sizeof(read_data),
5836
MSG_NOSIGNAL), <, 0);
5837
5838
g_assert_cmpint(unlink(filename), ==, 0);
5839
g_assert_cmpint(rmdir(tempdir), ==, 0);
5840
}
5841
5842
static void
5843
test_send_password_to_socket_client_not_exited(__attribute__((unused))
5844
test_fixture *fixture,
5845
__attribute__((unused))
5846
gconstpointer
5847
user_data){
5848
__attribute__((cleanup(cleanup_close)))
5849
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5850
g_assert_cmpint(epoll_fd, >=, 0);
5851
__attribute__((cleanup(cleanup_string)))
5852
char *const question_filename = strdup("/nonexistent/question");
5853
g_assert_nonnull(question_filename);
5854
__attribute__((cleanup(cleanup_string)))
5855
char *const filename = strdup("/nonexistent/socket");
5856
g_assert_nonnull(filename);
5857
__attribute__((cleanup(string_set_clear)))
5858
string_set cancelled_filenames = {};
5859
buffer password = {};
5860
bool password_is_read = true;
5861
__attribute__((cleanup(cleanup_queue)))
5862
task_queue *queue = create_queue();
5863
g_assert_nonnull(queue);
5864
int socketfds[2];
5865
g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5866
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5867
socketfds), ==, 0);
5868
__attribute__((cleanup(cleanup_close)))
5869
const int read_socket = socketfds[0];
5870
const int write_socket = socketfds[1];
5871
task_context task = {
5872
.func=send_password_to_socket,
5873
.question_filename=strdup(question_filename),
5874
.filename=strdup(filename),
5875
.epoll_fd=epoll_fd,
5876
.fd=write_socket,
5877
.password=&password,
5878
.cancelled_filenames=&cancelled_filenames,
5879
.mandos_client_exited=(bool[]){false},
5880
.password_is_read=&password_is_read,
5881
.current_time=(mono_microsecs[]){0},
5882
};
5883
g_assert_nonnull(task.question_filename);
5884
5885
task.func(task, queue);
5886
5887
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5888
5889
const task_context *const added_task
5890
= find_matching_task(queue, task);
5891
g_assert_nonnull(added_task);
5892
g_assert_cmpuint((unsigned int)password.length, ==, 0);
5893
g_assert_true(password_is_read);
5894
5895
g_assert_cmpint(added_task->fd, >, 0);
5896
g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
5897
EPOLLOUT));
5898
}
5899
5900
static void
5901
test_send_password_to_socket_password_not_read(__attribute__((unused))
5902
test_fixture *fixture,
5903
__attribute__((unused))
5904
gconstpointer
5905
user_data){
5906
__attribute__((cleanup(cleanup_close)))
5907
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5908
g_assert_cmpint(epoll_fd, >=, 0);
5909
__attribute__((cleanup(cleanup_string)))
5910
char *const question_filename = strdup("/nonexistent/question");
5911
g_assert_nonnull(question_filename);
5912
__attribute__((cleanup(cleanup_string)))
5913
char *const filename = strdup("/nonexistent/socket");
5914
__attribute__((cleanup(string_set_clear)))
5915
string_set cancelled_filenames = {};
5916
buffer password = {};
5917
__attribute__((cleanup(cleanup_queue)))
5918
task_queue *queue = create_queue();
5919
g_assert_nonnull(queue);
5920
int socketfds[2];
5921
g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5922
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5923
socketfds), ==, 0);
5924
__attribute__((cleanup(cleanup_close)))
5925
const int read_socket = socketfds[0];
5926
const int write_socket = socketfds[1];
5927
task_context task = {
5928
.func=send_password_to_socket,
5929
.question_filename=strdup(question_filename),
5930
.filename=strdup(filename),
5931
.epoll_fd=epoll_fd,
5932
.fd=write_socket,
5933
.password=&password,
5934
.cancelled_filenames=&cancelled_filenames,
5935
.mandos_client_exited=(bool[]){false},
5936
.password_is_read=(bool[]){false},
5937
.current_time=(mono_microsecs[]){0},
5938
};
5939
g_assert_nonnull(task.question_filename);
5940
5941
task.func(task, queue);
5942
5943
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5944
5945
const task_context *const added_task = find_matching_task(queue,
5946
task);
5947
g_assert_nonnull(added_task);
5948
g_assert_cmpuint((unsigned int)password.length, ==, 0);
5949
g_assert_true(queue->next_run == 0);
5950
5951
g_assert_cmpint(added_task->fd, >, 0);
5952
g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
5953
EPOLLOUT));
5954
}
5955
5956
static
5957
void test_send_password_to_socket_EMSGSIZE(__attribute__((unused))
5958
test_fixture *fixture,
5959
__attribute__((unused))
5960
gconstpointer user_data){
5961
#ifndef __amd64__
5962
g_test_skip("Skipping EMSGSIZE test on non-AMD64 platform");
5963
#else
5964
__attribute__((cleanup(cleanup_close)))
5965
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5966
g_assert_cmpint(epoll_fd, >=, 0);
5967
const char question_filename[] = "/nonexistent/question";
5968
char *const filename = strdup("/nonexistent/socket");
5969
__attribute__((cleanup(string_set_clear)))
5970
string_set cancelled_filenames = {};
5971
const size_t oversized = 1024*1024; /* Limit seems to be 212960 */
5972
__attribute__((cleanup(cleanup_buffer)))
5973
buffer password = {
5974
.data=malloc(oversized),
5975
.length=oversized,
5976
.allocated=oversized,
5977
};
5978
g_assert_nonnull(password.data);
5979
if(mlock(password.data, password.allocated) != 0){
5980
g_assert_true(errno == EPERM or errno == ENOMEM);
5981
}
5982
/* Construct test password buffer */
5983
/* Start with + since that is what the real procotol uses */
5984
password.data[0] = '+';
5985
/* Set a special character at string end just to mark the end */
5986
password.data[oversized-3] = 'y';
5987
/* Set NUL at buffer end, as suggested by the protocol */
5988
password.data[oversized-2] = '\0';
5989
/* Fill rest of password with 'x' */
5990
memset(password.data+1, 'x', oversized-3);
5991
5992
__attribute__((cleanup(cleanup_queue)))
5993
task_queue *queue = create_queue();
5994
g_assert_nonnull(queue);
5995
int socketfds[2];
5996
g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5997
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5998
socketfds), ==, 0);
5999
__attribute__((cleanup(cleanup_close)))
6000
const int read_socket = socketfds[0];
6001
__attribute__((cleanup(cleanup_close)))
6002
const int write_socket = socketfds[1];
6003
task_context task = {
6004
.func=send_password_to_socket,
6005
.question_filename=strdup(question_filename),
6006
.filename=filename,
6007
.epoll_fd=epoll_fd,
6008
.fd=write_socket,
6009
.password=&password,
6010
.cancelled_filenames=&cancelled_filenames,
6011
.mandos_client_exited=(bool[]){true},
6012
.password_is_read=(bool[]){true},
6013
.current_time=(mono_microsecs[]){0},
6014
};
6015
g_assert_nonnull(task.question_filename);
6016
6017
run_task_with_stderr_to_dev_null(task, queue);
6018
6019
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
6020
g_assert_true(string_set_contains(cancelled_filenames,
6021
question_filename));
6022
#endif
6023
}
6024
6025
static void test_send_password_to_socket_retry(__attribute__((unused))
6026
test_fixture *fixture,
6027
__attribute__((unused))
6028
gconstpointer
6029
user_data){
6030
__attribute__((cleanup(cleanup_close)))
6031
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6032
g_assert_cmpint(epoll_fd, >=, 0);
6033
__attribute__((cleanup(cleanup_string)))
6034
char *const question_filename = strdup("/nonexistent/question");
6035
g_assert_nonnull(question_filename);
6036
__attribute__((cleanup(cleanup_string)))
6037
char *const filename = strdup("/nonexistent/socket");
6038
g_assert_nonnull(filename);
6039
__attribute__((cleanup(string_set_clear)))
6040
string_set cancelled_filenames = {};
6041
__attribute__((cleanup(cleanup_buffer)))
6042
buffer password = {};
6043
6044
__attribute__((cleanup(cleanup_queue)))
6045
task_queue *queue = create_queue();
6046
g_assert_nonnull(queue);
6047
int socketfds[2];
6048
g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
6049
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
6050
socketfds), ==, 0);
6051
__attribute__((cleanup(cleanup_close)))
6052
const int read_socket = socketfds[0];
6053
const int write_socket = socketfds[1];
6054
/* Close the server side socket to force ECONNRESET on client */
6055
g_assert_cmpint(close(read_socket), ==, 0);
6056
task_context task = {
6057
.func=send_password_to_socket,
6058
.question_filename=strdup(question_filename),
6059
.filename=strdup(filename),
6060
.epoll_fd=epoll_fd,
6061
.fd=write_socket,
6062
.password=&password,
6063
.cancelled_filenames=&cancelled_filenames,
6064
.mandos_client_exited=(bool[]){true},
6065
.password_is_read=(bool[]){true},
6066
.current_time=(mono_microsecs[]){0},
6067
};
6068
g_assert_nonnull(task.question_filename);
6069
6070
task.func(task, queue);
6071
6072
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
6073
6074
const task_context *const added_task = find_matching_task(queue,
6075
task);
6076
g_assert_nonnull(added_task);
6077
g_assert_cmpuint((unsigned int)password.length, ==, 0);
6078
6079
g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
6080
EPOLLOUT));
6081
}
6082
6083
static
6084
void test_send_password_to_socket_bad_epoll(__attribute__((unused))
6085
test_fixture *fixture,
6086
__attribute__((unused))
6087
gconstpointer user_data){
6088
__attribute__((cleanup(cleanup_close)))
6089
const int epoll_fd = open("/dev/null",
6090
O_WRONLY | O_CLOEXEC | O_NOCTTY);
6091
__attribute__((cleanup(cleanup_string)))
6092
char *const question_filename = strdup("/nonexistent/question");
6093
g_assert_nonnull(question_filename);
6094
__attribute__((cleanup(cleanup_string)))
6095
char *const filename = strdup("/nonexistent/socket");
6096
g_assert_nonnull(filename);
6097
__attribute__((cleanup(string_set_clear)))
6098
string_set cancelled_filenames = {};
6099
__attribute__((cleanup(cleanup_buffer)))
6100
buffer password = {};
6101
6102
const mono_microsecs current_time = 11;
6103
__attribute__((cleanup(cleanup_queue)))
6104
task_queue *queue = create_queue();
6105
g_assert_nonnull(queue);
6106
int socketfds[2];
6107
g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
6108
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
6109
socketfds), ==, 0);
6110
__attribute__((cleanup(cleanup_close)))
6111
const int read_socket = socketfds[0];
6112
const int write_socket = socketfds[1];
6113
/* Close the server side socket to force ECONNRESET on client */
6114
g_assert_cmpint(close(read_socket), ==, 0);
6115
task_context task = {
6116
.func=send_password_to_socket,
6117
.question_filename=strdup(question_filename),
6118
.filename=strdup(filename),
6119
.epoll_fd=epoll_fd,
6120
.fd=write_socket,
6121
.password=&password,
6122
.cancelled_filenames=&cancelled_filenames,
6123
.mandos_client_exited=(bool[]){true},
6124
.password_is_read=(bool[]){true},
6125
.current_time=¤t_time,
6126
};
6127
g_assert_nonnull(task.question_filename);
6128
6129
run_task_with_stderr_to_dev_null(task, queue);
6130
6131
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
6132
6133
const task_context *const added_task = find_matching_task(queue,
6134
task);
6135
g_assert_nonnull(added_task);
6136
g_assert_true(queue->next_run == current_time + 1000000);
6137
g_assert_cmpuint((unsigned int)password.length, ==, 0);
6138
}
6139
6140
static void assert_send_password_to_socket_password(buffer password){
6141
__attribute__((cleanup(cleanup_close)))
6142
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6143
g_assert_cmpint(epoll_fd, >=, 0);
6144
char *const question_filename = strdup("/nonexistent/question");
6145
g_assert_nonnull(question_filename);
6146
char *const filename = strdup("/nonexistent/socket");
6147
g_assert_nonnull(filename);
6148
__attribute__((cleanup(string_set_clear)))
6149
string_set cancelled_filenames = {};
6150
6151
__attribute__((cleanup(cleanup_queue)))
6152
task_queue *queue = create_queue();
6153
g_assert_nonnull(queue);
6154
int socketfds[2];
6155
g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
6156
| SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
6157
socketfds), ==, 0);
6158
__attribute__((cleanup(cleanup_close)))
6159
const int read_socket = socketfds[0];
6160
const int write_socket = socketfds[1];
6161
task_context task = {
6162
.func=send_password_to_socket,
6163
.question_filename=question_filename,
6164
.filename=filename,
6165
.epoll_fd=epoll_fd,
6166
.fd=write_socket,
6167
.password=&password,
6168
.cancelled_filenames=&cancelled_filenames,
6169
.mandos_client_exited=(bool[]){true},
6170
.password_is_read=(bool[]){true},
6171
.current_time=(mono_microsecs[]){0},
6172
};
6173
6174
char *expected_written_data = malloc(password.length + 2);
6175
g_assert_nonnull(expected_written_data);
6176
expected_written_data[0] = '+';
6177
expected_written_data[password.length + 1] = '\0';
6178
if(password.length > 0){
6179
g_assert_nonnull(password.data);
6180
memcpy(expected_written_data + 1, password.data, password.length);
6181
}
6182
6183
task.func(task, queue);
6184
6185
char buf[PIPE_BUF];
6186
g_assert_cmpint((int)read(read_socket, buf, PIPE_BUF), ==,
6187
(int)(password.length + 2));
6188
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
6189
6190
g_assert_true(memcmp(expected_written_data, buf,
6191
password.length + 2) == 0);
6192
6193
g_assert_true(epoll_set_does_not_contain(epoll_fd, write_socket));
6194
6195
free(expected_written_data);
6196
}
6197
6198
static void
6199
test_send_password_to_socket_null_password(__attribute__((unused))
6200
test_fixture *fixture,
6201
__attribute__((unused))
6202
gconstpointer user_data){
6203
__attribute__((cleanup(cleanup_buffer)))
6204
buffer password = {};
6205
assert_send_password_to_socket_password(password);
6206
}
6207
6208
static void
6209
test_send_password_to_socket_empty_password(__attribute__((unused))
6210
test_fixture *fixture,
6211
__attribute__((unused))
6212
gconstpointer user_data){
6213
__attribute__((cleanup(cleanup_buffer)))
6214
buffer password = {
6215
.data=malloc(1), /* because malloc(0) may return NULL */
6216
.length=0,
6217
.allocated=0, /* deliberate lie */
6218
};
6219
g_assert_nonnull(password.data);
6220
assert_send_password_to_socket_password(password);
6221
}
6222
6223
static void
6224
test_send_password_to_socket_empty_str_pass(__attribute__((unused))
6225
test_fixture *fixture,
6226
__attribute__((unused))
6227
gconstpointer user_data){
6228
__attribute__((cleanup(cleanup_buffer)))
6229
buffer password = {
6230
.data=strdup(""),
6231
.length=0,
6232
.allocated=1,
6233
};
6234
if(mlock(password.data, password.allocated) != 0){
6235
g_assert_true(errno == EPERM or errno == ENOMEM);
6236
}
6237
assert_send_password_to_socket_password(password);
6238
}
6239
6240
static void
6241
test_send_password_to_socket_text_password(__attribute__((unused))
6242
test_fixture *fixture,
6243
__attribute__((unused))
6244
gconstpointer user_data){
6245
const char dummy_test_password[] = "dummy test password";
6246
__attribute__((cleanup(cleanup_buffer)))
6247
buffer password = {
6248
.data = strdup(dummy_test_password),
6249
.length = strlen(dummy_test_password),
6250
.allocated = sizeof(dummy_test_password),
6251
};
6252
if(mlock(password.data, password.allocated) != 0){
6253
g_assert_true(errno == EPERM or errno == ENOMEM);
6254
}
6255
assert_send_password_to_socket_password(password);
6256
}
6257
6258
static void
6259
test_send_password_to_socket_binary_password(__attribute__((unused))
6260
test_fixture *fixture,
6261
__attribute__((unused))
6262
gconstpointer user_data){
6263
__attribute__((cleanup(cleanup_buffer)))
6264
buffer password = {
6265
.data=malloc(255),
6266
.length=255,
6267
.allocated=255,
6268
};
6269
g_assert_nonnull(password.data);
6270
if(mlock(password.data, password.allocated) != 0){
6271
g_assert_true(errno == EPERM or errno == ENOMEM);
6272
}
6273
char c = 1; /* Start at 1, avoiding NUL */
6274
for(int i=0; i < 255; i++){
6275
password.data[i] = c++;
6276
}
6277
assert_send_password_to_socket_password(password);
6278
}
6279
6280
static void
6281
test_send_password_to_socket_nuls_in_password(__attribute__((unused))
6282
test_fixture *fixture,
6283
__attribute__((unused))
6284
gconstpointer
6285
user_data){
6286
char test_password[] = {'\0', 'a', '\0', 'b', '\0', 'c', '\0'};
6287
__attribute__((cleanup(cleanup_buffer)))
6288
buffer password = {
6289
.data=malloc(sizeof(test_password)),
6290
.length=sizeof(test_password),
6291
.allocated=sizeof(test_password),
6292
};
6293
g_assert_nonnull(password.data);
6294
if(mlock(password.data, password.allocated) !=0){
6295
g_assert_true(errno == EPERM or errno == ENOMEM);
6296
}
6297
memcpy(password.data, test_password, password.allocated);
6298
assert_send_password_to_socket_password(password);
6299
}
6300
6301
static bool assert_add_existing_questions_to_devnull(task_queue
6302
*const,
6303
const int,
6304
buffer *const,
6305
string_set *,
6306
const
6307
mono_microsecs
6308
*const,
6309
bool *const,
6310
bool *const,
6311
const char
6312
*const);
6313
6314
static void test_add_existing_questions_ENOENT(__attribute__((unused))
6315
test_fixture *fixture,
6316
__attribute__((unused))
6317
gconstpointer
6318
user_data){
6319
__attribute__((cleanup(cleanup_queue)))
6320
task_queue *queue = create_queue();
6321
g_assert_nonnull(queue);
6322
__attribute__((cleanup(cleanup_close)))
6323
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6324
g_assert_cmpint(epoll_fd, >=, 0);
6325
__attribute__((cleanup(string_set_clear)))
6326
string_set cancelled_filenames = {};
6327
6328
g_assert_false(assert_add_existing_questions_to_devnull
6329
(queue,
6330
epoll_fd,
6331
(buffer[]){{}}, /* password */
6332
&cancelled_filenames,
6333
(mono_microsecs[]){0}, /* current_time */
6334
(bool[]){false}, /* mandos_client_exited */
6335
(bool[]){false}, /* password_is_read */
6336
"/nonexistent")); /* dirname */
6337
6338
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
6339
}
6340
6341
static
6342
bool assert_add_existing_questions_to_devnull(task_queue
6343
*const queue,
6344
const int
6345
epoll_fd,
6346
buffer *const
6347
password,
6348
string_set
6349
*cancelled_filenames,
6350
const mono_microsecs
6351
*const current_time,
6352
bool *const
6353
mandos_client_exited,
6354
bool *const
6355
password_is_read,
6356
const char *const
6357
dirname){
6358
__attribute__((cleanup(cleanup_close)))
6359
const int devnull_fd = open("/dev/null",
6360
O_WRONLY | O_CLOEXEC | O_NOCTTY);
6361
g_assert_cmpint(devnull_fd, >=, 0);
6362
__attribute__((cleanup(cleanup_close)))
6363
const int real_stderr_fd = dup(STDERR_FILENO);
6364
g_assert_cmpint(real_stderr_fd, >=, 0);
6365
dup2(devnull_fd, STDERR_FILENO);
6366
const bool ret = add_existing_questions(queue, epoll_fd, password,
6367
cancelled_filenames,
6368
current_time,
6369
mandos_client_exited,
6370
password_is_read, dirname);
6371
dup2(real_stderr_fd, STDERR_FILENO);
6372
return ret;
6373
}
6374
6375
static
6376
void test_add_existing_questions_no_questions(__attribute__((unused))
6377
test_fixture *fixture,
6378
__attribute__((unused))
6379
gconstpointer
6380
user_data){
6381
__attribute__((cleanup(cleanup_queue)))
6382
task_queue *queue = create_queue();
6383
g_assert_nonnull(queue);
6384
__attribute__((cleanup(cleanup_close)))
6385
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6386
g_assert_cmpint(epoll_fd, >=, 0);
6387
__attribute__((cleanup(string_set_clear)))
6388
string_set cancelled_filenames = {};
6389
__attribute__((cleanup(cleanup_string)))
6390
char *tempdir = make_temporary_directory();
6391
g_assert_nonnull(tempdir);
6392
6393
g_assert_false(assert_add_existing_questions_to_devnull
6394
(queue,
6395
epoll_fd,
6396
(buffer[]){{}}, /* password */
6397
&cancelled_filenames,
6398
(mono_microsecs[]){0}, /* current_time */
6399
(bool[]){false}, /* mandos_client_exited */
6400
(bool[]){false}, /* password_is_read */
6401
tempdir));
6402
6403
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
6404
6405
g_assert_cmpint(rmdir(tempdir), ==, 0);
6406
}
6407
6408
static char *make_question_file_in_directory(const char *const);
6409
6410
static
6411
void test_add_existing_questions_one_question(__attribute__((unused))
6412
test_fixture *fixture,
6413
__attribute__((unused))
6414
gconstpointer
6415
user_data){
6416
__attribute__((cleanup(cleanup_queue)))
6417
task_queue *queue = create_queue();
6418
g_assert_nonnull(queue);
6419
__attribute__((cleanup(cleanup_close)))
6420
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6421
g_assert_cmpint(epoll_fd, >=, 0);
6422
__attribute__((cleanup(cleanup_buffer)))
6423
buffer password = {};
6424
__attribute__((cleanup(string_set_clear)))
6425
string_set cancelled_filenames = {};
6426
const mono_microsecs current_time = 0;
6427
bool mandos_client_exited = false;
6428
bool password_is_read = false;
6429
__attribute__((cleanup(cleanup_string)))
6430
char *tempdir = make_temporary_directory();
6431
g_assert_nonnull(tempdir);
6432
__attribute__((cleanup(cleanup_string)))
6433
char *question_filename
6434
= make_question_file_in_directory(tempdir);
6435
g_assert_nonnull(question_filename);
6436
6437
g_assert_true(assert_add_existing_questions_to_devnull
6438
(queue,
6439
epoll_fd,
6440
&password,
6441
&cancelled_filenames,
6442
¤t_time,
6443
&mandos_client_exited,
6444
&password_is_read,
6445
tempdir));
6446
6447
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
6448
6449
g_assert_nonnull(find_matching_task(queue, (task_context){
6450
.func=open_and_parse_question,
6451
.epoll_fd=epoll_fd,
6452
.filename=question_filename,
6453
.question_filename=question_filename,
6454
.password=&password,
6455
.cancelled_filenames=&cancelled_filenames,
6456
.current_time=¤t_time,
6457
.mandos_client_exited=&mandos_client_exited,
6458
.password_is_read=&password_is_read,
6459
}));
6460
6461
g_assert_true(queue->next_run == 1);
6462
6463
g_assert_cmpint(unlink(question_filename), ==, 0);
6464
g_assert_cmpint(rmdir(tempdir), ==, 0);
6465
}
6466
6467
static char *make_question_file_in_directory(const char
6468
*const dir){
6469
return make_temporary_prefixed_file_in_directory("ask.", dir);
6470
}
6471
6472
static
6473
void test_add_existing_questions_two_questions(__attribute__((unused))
6474
test_fixture *fixture,
6475
__attribute__((unused))
6476
gconstpointer
6477
user_data){
6478
__attribute__((cleanup(cleanup_queue)))
6479
task_queue *queue = create_queue();
6480
g_assert_nonnull(queue);
6481
__attribute__((cleanup(cleanup_close)))
6482
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6483
g_assert_cmpint(epoll_fd, >=, 0);
6484
__attribute__((cleanup(cleanup_buffer)))
6485
buffer password = {};
6486
__attribute__((cleanup(string_set_clear)))
6487
string_set cancelled_filenames = {};
6488
const mono_microsecs current_time = 0;
6489
bool mandos_client_exited = false;
6490
bool password_is_read = false;
6491
__attribute__((cleanup(cleanup_string)))
6492
char *tempdir = make_temporary_directory();
6493
g_assert_nonnull(tempdir);
6494
__attribute__((cleanup(cleanup_string)))
6495
char *question_filename1
6496
= make_question_file_in_directory(tempdir);
6497
g_assert_nonnull(question_filename1);
6498
__attribute__((cleanup(cleanup_string)))
6499
char *question_filename2
6500
= make_question_file_in_directory(tempdir);
6501
g_assert_nonnull(question_filename2);
6502
6503
g_assert_true(assert_add_existing_questions_to_devnull
6504
(queue,
6505
epoll_fd,
6506
&password,
6507
&cancelled_filenames,
6508
¤t_time,
6509
&mandos_client_exited,
6510
&password_is_read,
6511
tempdir));
6512
6513
g_assert_cmpuint((unsigned int)queue->length, ==, 2);
6514
6515
g_assert_true(queue->next_run == 1);
6516
6517
__attribute__((cleanup(string_set_clear)))
6518
string_set seen_questions = {};
6519
6520
bool queue_contains_question_opener(char *const question_filename){
6521
return(find_matching_task(queue, (task_context){
6522
.func=open_and_parse_question,
6523
.epoll_fd=epoll_fd,
6524
.question_filename=question_filename,
6525
.password=&password,
6526
.cancelled_filenames=&cancelled_filenames,
6527
.current_time=¤t_time,
6528
.mandos_client_exited=&mandos_client_exited,
6529
.password_is_read=&password_is_read,
6530
}) != NULL);
6531
}
6532
6533
g_assert_true(queue_contains_question_opener(question_filename1));
6534
g_assert_true(queue_contains_question_opener(question_filename2));
6535
6536
g_assert_true(queue->next_run == 1);
6537
6538
g_assert_cmpint(unlink(question_filename1), ==, 0);
6539
g_assert_cmpint(unlink(question_filename2), ==, 0);
6540
g_assert_cmpint(rmdir(tempdir), ==, 0);
6541
}
6542
6543
static void
6544
test_add_existing_questions_non_questions(__attribute__((unused))
6545
test_fixture *fixture,
6546
__attribute__((unused))
6547
gconstpointer user_data){
6548
__attribute__((cleanup(cleanup_queue)))
6549
task_queue *queue = create_queue();
6550
g_assert_nonnull(queue);
6551
__attribute__((cleanup(cleanup_close)))
6552
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6553
g_assert_cmpint(epoll_fd, >=, 0);
6554
__attribute__((cleanup(string_set_clear)))
6555
string_set cancelled_filenames = {};
6556
__attribute__((cleanup(cleanup_string)))
6557
char *tempdir = make_temporary_directory();
6558
g_assert_nonnull(tempdir);
6559
__attribute__((cleanup(cleanup_string)))
6560
char *question_filename1
6561
= make_temporary_file_in_directory(tempdir);
6562
g_assert_nonnull(question_filename1);
6563
__attribute__((cleanup(cleanup_string)))
6564
char *question_filename2
6565
= make_temporary_file_in_directory(tempdir);
6566
g_assert_nonnull(question_filename2);
6567
6568
g_assert_false(assert_add_existing_questions_to_devnull
6569
(queue,
6570
epoll_fd,
6571
(buffer[]){{}}, /* password */
6572
&cancelled_filenames,
6573
(mono_microsecs[]){0}, /* current_time */
6574
(bool[]){false}, /* mandos_client_exited */
6575
(bool[]){false}, /* password_is_read */
6576
tempdir));
6577
6578
g_assert_cmpuint((unsigned int)queue->length, ==, 0);
6579
6580
g_assert_cmpint(unlink(question_filename1), ==, 0);
6581
g_assert_cmpint(unlink(question_filename2), ==, 0);
6582
g_assert_cmpint(rmdir(tempdir), ==, 0);
6583
}
6584
6585
static void
6586
test_add_existing_questions_both_types(__attribute__((unused))
6587
test_fixture *fixture,
6588
__attribute__((unused))
6589
gconstpointer user_data){
6590
__attribute__((cleanup(cleanup_queue)))
6591
task_queue *queue = create_queue();
6592
g_assert_nonnull(queue);
6593
__attribute__((cleanup(cleanup_close)))
6594
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6595
g_assert_cmpint(epoll_fd, >=, 0);
6596
__attribute__((cleanup(cleanup_buffer)))
6597
buffer password = {};
6598
__attribute__((cleanup(string_set_clear)))
6599
string_set cancelled_filenames = {};
6600
const mono_microsecs current_time = 0;
6601
bool mandos_client_exited = false;
6602
bool password_is_read = false;
6603
__attribute__((cleanup(cleanup_string)))
6604
char *tempdir = make_temporary_directory();
6605
g_assert_nonnull(tempdir);
6606
__attribute__((cleanup(cleanup_string)))
6607
char *tempfilename1 = make_temporary_file_in_directory(tempdir);
6608
g_assert_nonnull(tempfilename1);
6609
__attribute__((cleanup(cleanup_string)))
6610
char *tempfilename2 = make_temporary_file_in_directory(tempdir);
6611
g_assert_nonnull(tempfilename2);
6612
__attribute__((cleanup(cleanup_string)))
6613
char *question_filename
6614
= make_question_file_in_directory(tempdir);
6615
g_assert_nonnull(question_filename);
6616
6617
g_assert_true(assert_add_existing_questions_to_devnull
6618
(queue,
6619
epoll_fd,
6620
&password,
6621
&cancelled_filenames,
6622
¤t_time,
6623
&mandos_client_exited,
6624
&password_is_read,
6625
tempdir));
6626
6627
g_assert_cmpuint((unsigned int)queue->length, ==, 1);
6628
6629
g_assert_nonnull(find_matching_task(queue, (task_context){
6630
.func=open_and_parse_question,
6631
.epoll_fd=epoll_fd,
6632
.filename=question_filename,
6633
.question_filename=question_filename,
6634
.password=&password,
6635
.cancelled_filenames=&cancelled_filenames,
6636
.current_time=¤t_time,
6637
.mandos_client_exited=&mandos_client_exited,
6638
.password_is_read=&password_is_read,
6639
}));
6640
6641
g_assert_true(queue->next_run == 1);
6642
6643
g_assert_cmpint(unlink(tempfilename1), ==, 0);
6644
g_assert_cmpint(unlink(tempfilename2), ==, 0);
6645
g_assert_cmpint(unlink(question_filename), ==, 0);
6646
g_assert_cmpint(rmdir(tempdir), ==, 0);
6647
}
6648
6649
static void test_wait_for_event_timeout(__attribute__((unused))
6650
test_fixture *fixture,
6651
__attribute__((unused))
6652
gconstpointer user_data){
6653
__attribute__((cleanup(cleanup_close)))
6654
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6655
g_assert_cmpint(epoll_fd, >=, 0);
6656
6657
g_assert_true(wait_for_event(epoll_fd, 1, 0));
6658
}
6659
6660
static void test_wait_for_event_event(__attribute__((unused))
6661
test_fixture *fixture,
6662
__attribute__((unused))
6663
gconstpointer user_data){
6664
__attribute__((cleanup(cleanup_close)))
6665
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6666
g_assert_cmpint(epoll_fd, >=, 0);
6667
int pipefds[2];
6668
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
6669
__attribute__((cleanup(cleanup_close)))
6670
const int read_pipe = pipefds[0];
6671
__attribute__((cleanup(cleanup_close)))
6672
const int write_pipe = pipefds[1];
6673
g_assert_cmpint(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, read_pipe,
6674
&(struct epoll_event)
6675
{ .events=EPOLLIN | EPOLLRDHUP }), ==, 0);
6676
g_assert_cmpint((int)write(write_pipe, "x", 1), ==, 1);
6677
6678
g_assert_true(wait_for_event(epoll_fd, 0, 0));
6679
}
6680
6681
static void test_wait_for_event_sigchld(test_fixture *fixture,
6682
__attribute__((unused))
6683
gconstpointer user_data){
6684
const pid_t pid = fork();
6685
if(pid == 0){ /* Child */
6686
if(not restore_signal_handler(&fixture->orig_sigaction)){
6687
_exit(EXIT_FAILURE);
6688
}
6689
if(not restore_sigmask(&fixture->orig_sigmask)){
6690
_exit(EXIT_FAILURE);
6691
}
6692
exit(EXIT_SUCCESS);
6693
}
6694
g_assert_true(pid != -1);
6695
__attribute__((cleanup(cleanup_close)))
6696
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6697
g_assert_cmpint(epoll_fd, >=, 0);
6698
6699
g_assert_true(wait_for_event(epoll_fd, 0, 0));
6700
6701
int status;
6702
g_assert_true(waitpid(pid, &status, 0) == pid);
6703
g_assert_true(WIFEXITED(status));
6704
g_assert_cmpint(WEXITSTATUS(status), ==, EXIT_SUCCESS);
6705
}
6706
6707
static void test_run_queue_zeroes_next_run(__attribute__((unused))
6708
test_fixture *fixture,
6709
__attribute__((unused))
6710
gconstpointer user_data){
6711
__attribute__((cleanup(cleanup_queue)))
6712
task_queue *queue = create_queue();
6713
g_assert_nonnull(queue);
6714
queue->next_run = 1;
6715
__attribute__((cleanup(cleanup_close)))
6716
const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6717
__attribute__((cleanup(string_set_clear)))
6718
string_set cancelled_filenames = {};
6719
bool quit_now = false;
6720
6721
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6722
g_assert_false(quit_now);
6723
g_assert_cmpuint((unsigned int)queue->next_run, ==, 0);
6724
}
6725
6726
static
6727
void test_run_queue_clears_cancelled_filenames(__attribute__((unused))
6728
test_fixture *fixture,
6729
__attribute__((unused))
6730
gconstpointer
6731
user_data){
6732
__attribute__((cleanup(cleanup_queue)))
6733
task_queue *queue = create_queue();
6734
g_assert_nonnull(queue);
6735
__attribute__((cleanup(string_set_clear)))
6736
string_set cancelled_filenames = {};
6737
bool quit_now = false;
6738
const char question_filename[] = "/nonexistent/question_filename";
6739
g_assert_true(string_set_add(&cancelled_filenames,
6740
question_filename));
6741
6742
g_assert_true(add_to_queue(queue,
6743
(task_context){ .func=dummy_func }));
6744
6745
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6746
g_assert_false(quit_now);
6747
g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6748
g_assert_false(string_set_contains(cancelled_filenames,
6749
question_filename));
6750
}
6751
6752
static
6753
void test_run_queue_skips_cancelled_filenames(__attribute__((unused))
6754
test_fixture *fixture,
6755
__attribute__((unused))
6756
gconstpointer
6757
user_data){
6758
__attribute__((cleanup(cleanup_queue)))
6759
task_queue *queue = create_queue();
6760
g_assert_nonnull(queue);
6761
__attribute__((cleanup(string_set_clear)))
6762
string_set cancelled_filenames = {};
6763
bool quit_now = false;
6764
int pipefds[2];
6765
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
6766
__attribute__((cleanup(cleanup_close)))
6767
const int read_pipe = pipefds[0];
6768
g_assert_cmpint(close(pipefds[1]), ==, 0);
6769
const char question_filename[] = "/nonexistent/question_filename";
6770
g_assert_true(string_set_add(&cancelled_filenames,
6771
question_filename));
6772
__attribute__((nonnull))
6773
void quit_func(const task_context task,
6774
__attribute__((unused)) task_queue *const q){
6775
g_assert_nonnull(task.quit_now);
6776
*task.quit_now = true;
6777
}
6778
task_context task = {
6779
.func=quit_func,
6780
.question_filename=strdup(question_filename),
6781
.quit_now=&quit_now,
6782
.fd=read_pipe,
6783
};
6784
g_assert_nonnull(task.question_filename);
6785
6786
g_assert_true(add_to_queue(queue, task));
6787
6788
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6789
g_assert_false(quit_now);
6790
6791
/* read_pipe should be closed already */
6792
errno = 0;
6793
bool read_pipe_closed = (close(read_pipe) == -1);
6794
read_pipe_closed &= (errno == EBADF);
6795
g_assert_true(read_pipe_closed);
6796
}
6797
6798
static void test_run_queue_one_task(__attribute__((unused))
6799
test_fixture *fixture,
6800
__attribute__((unused))
6801
gconstpointer user_data){
6802
__attribute__((cleanup(cleanup_queue)))
6803
task_queue *queue = create_queue();
6804
g_assert_nonnull(queue);
6805
__attribute__((cleanup(string_set_clear)))
6806
string_set cancelled_filenames = {};
6807
bool quit_now = false;
6808
6809
__attribute__((nonnull))
6810
void next_run_func(__attribute__((unused))
6811
const task_context task,
6812
task_queue *const q){
6813
q->next_run = 1;
6814
}
6815
6816
task_context task = {
6817
.func=next_run_func,
6818
};
6819
g_assert_true(add_to_queue(queue, task));
6820
6821
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6822
g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
6823
g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6824
}
6825
6826
static void test_run_queue_two_tasks(__attribute__((unused))
6827
test_fixture *fixture,
6828
__attribute__((unused))
6829
gconstpointer user_data){
6830
__attribute__((cleanup(cleanup_queue)))
6831
task_queue *queue = create_queue();
6832
g_assert_nonnull(queue);
6833
queue->next_run = 1;
6834
__attribute__((cleanup(string_set_clear)))
6835
string_set cancelled_filenames = {};
6836
bool quit_now = false;
6837
bool mandos_client_exited = false;
6838
6839
__attribute__((nonnull))
6840
void next_run_func(__attribute__((unused))
6841
const task_context task,
6842
task_queue *const q){
6843
q->next_run = 1;
6844
}
6845
6846
__attribute__((nonnull))
6847
void exited_func(const task_context task,
6848
__attribute__((unused)) task_queue *const q){
6849
*task.mandos_client_exited = true;
6850
}
6851
6852
task_context task1 = {
6853
.func=next_run_func,
6854
};
6855
g_assert_true(add_to_queue(queue, task1));
6856
6857
task_context task2 = {
6858
.func=exited_func,
6859
.mandos_client_exited=&mandos_client_exited,
6860
};
6861
g_assert_true(add_to_queue(queue, task2));
6862
6863
g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6864
g_assert_false(quit_now);
6865
g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
6866
g_assert_true(mandos_client_exited);
6867
g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6868
}
6869
6870
static void test_run_queue_two_tasks_quit(__attribute__((unused))
6871
test_fixture *fixture,
6872
__attribute__((unused))
6873
gconstpointer user_data){
6874
__attribute__((cleanup(cleanup_queue)))
6875
task_queue *queue = create_queue();
6876
g_assert_nonnull(queue);
6877
__attribute__((cleanup(string_set_clear)))
6878
string_set cancelled_filenames = {};
6879
bool quit_now = false;
6880
bool mandos_client_exited = false;
6881
bool password_is_read = false;
6882
6883
__attribute__((nonnull))
6884
void set_exited_func(const task_context task,
6885
__attribute__((unused)) task_queue *const q){
6886
*task.mandos_client_exited = true;
6887
*task.quit_now = true;
6888
}
6889
task_context task1 = {
6890
.func=set_exited_func,
6891
.quit_now=&quit_now,
6892
.mandos_client_exited=&mandos_client_exited,
6893
};
6894
g_assert_true(add_to_queue(queue, task1));
6895
6896
__attribute__((nonnull))
6897
void set_read_func(const task_context task,
6898
__attribute__((unused)) task_queue *const q){
6899
*task.quit_now = true;
6900
*task.password_is_read = true;
6901
}
6902
task_context task2 = {
6903
.func=set_read_func,
6904
.quit_now=&quit_now,
6905
.password_is_read=&password_is_read,
6906
};
6907
g_assert_true(add_to_queue(queue, task2));
6908
6909
g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
6910
g_assert_true(quit_now);
6911
g_assert_true(mandos_client_exited xor password_is_read);
6912
g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6913
}
6914
6915
static void test_run_queue_two_tasks_cleanup(__attribute__((unused))
6916
test_fixture *fixture,
6917
__attribute__((unused))
6918
gconstpointer user_data){
6919
__attribute__((cleanup(cleanup_queue)))
6920
task_queue *queue = create_queue();
6921
g_assert_nonnull(queue);
6922
__attribute__((cleanup(string_set_clear)))
6923
string_set cancelled_filenames = {};
6924
int pipefds[2];
6925
g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
6926
__attribute__((cleanup(cleanup_close)))
6927
const int read_pipe = pipefds[0];
6928
__attribute__((cleanup(cleanup_close)))
6929
const int write_pipe = pipefds[1];
6930
bool quit_now = false;
6931
6932
__attribute__((nonnull))
6933
void read_func(const task_context task,
6934
__attribute__((unused)) task_queue *const q){
6935
*task.quit_now = true;
6936
}
6937
task_context task1 = {
6938
.func=read_func,
6939
.quit_now=&quit_now,
6940
.fd=read_pipe,
6941
};
6942
g_assert_true(add_to_queue(queue, task1));
6943
6944
__attribute__((nonnull))
6945
void write_func(const task_context task,
6946
__attribute__((unused)) task_queue *const q){
6947
*task.quit_now = true;
6948
}
6949
task_context task2 = {
6950
.func=write_func,
6951
.quit_now=&quit_now,
6952
.fd=write_pipe,
6953
};
6954
g_assert_true(add_to_queue(queue, task2));
6955
6956
g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
6957
g_assert_true(quit_now);
6958
6959
/* Either read_pipe or write_pipe should be closed already */
6960
errno = 0;
6961
bool close_read_pipe = (close(read_pipe) == -1);
6962
close_read_pipe &= (errno == EBADF);
6963
errno = 0;
6964
bool close_write_pipe = (close(write_pipe) == -1);
6965
close_write_pipe &= (errno == EBADF);
6966
g_assert_true(close_read_pipe xor close_write_pipe);
6967
g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6968
}
6969
6970
static void test_setup_signal_handler(__attribute__((unused))
6971
test_fixture *fixture,
6972
__attribute__((unused))
6973
gconstpointer user_data){
6974
/* Save current SIGCHLD action, whatever it is */
6975
struct sigaction expected_sigchld_action;
6976
g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
6977
==, 0);
6978
6979
/* Act; i.e. run the setup_signal_handler() function */
6980
struct sigaction actual_old_sigchld_action;
6981
g_assert_true(setup_signal_handler(&actual_old_sigchld_action));
6982
6983
/* Check that the function correctly set "actual_old_sigchld_action"
6984
to the same values as the previously saved
6985
"expected_sigchld_action" */
6986
/* Check member sa_handler */
6987
g_assert_true(actual_old_sigchld_action.sa_handler
6988
== expected_sigchld_action.sa_handler);
6989
/* Check member sa_mask */
6990
for(int signum = 1; signum < NSIG; signum++){
6991
const int expected_old_block_state
6992
= sigismember(&expected_sigchld_action.sa_mask, signum);
6993
g_assert_cmpint(expected_old_block_state, >=, 0);
6994
const int actual_old_block_state
6995
= sigismember(&actual_old_sigchld_action.sa_mask, signum);
6996
g_assert_cmpint(actual_old_block_state, >=, 0);
6997
g_assert_cmpint(actual_old_block_state,
6998
==, expected_old_block_state);
6999
}
7000
/* Check member sa_flags */
7001
g_assert_true((actual_old_sigchld_action.sa_flags
7002
& (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
7003
== (expected_sigchld_action.sa_flags
7004
& (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
7005
7006
/* Retrieve the current signal handler for SIGCHLD as set by
7007
setup_signal_handler() */
7008
struct sigaction actual_new_sigchld_action;
7009
g_assert_cmpint(sigaction(SIGCHLD, NULL,
7010
&actual_new_sigchld_action), ==, 0);
7011
/* Check that the signal handler (member sa_handler) is correctly
7012
set to the "handle_sigchld" function */
7013
g_assert_true(actual_new_sigchld_action.sa_handler != SIG_DFL);
7014
g_assert_true(actual_new_sigchld_action.sa_handler != SIG_IGN);
7015
g_assert_true(actual_new_sigchld_action.sa_handler
7016
== handle_sigchld);
7017
/* Check (in member sa_mask) that at least a handful of signals are
7018
actually blocked during the signal handler */
7019
for(int signum = 1; signum < NSIG; signum++){
7020
int actual_new_block_state;
7021
switch(signum){
7022
case SIGTERM:
7023
case SIGINT:
7024
case SIGQUIT:
7025
case SIGHUP:
7026
actual_new_block_state
7027
= sigismember(&actual_new_sigchld_action.sa_mask, signum);
7028
g_assert_cmpint(actual_new_block_state, ==, 1);
7029
continue;
7030
case SIGKILL: /* non-blockable */
7031
case SIGSTOP: /* non-blockable */
7032
case SIGCHLD: /* always blocked */
7033
default:
7034
continue;
7035
}
7036
}
7037
/* Check member sa_flags */
7038
g_assert_true((actual_new_sigchld_action.sa_flags
7039
& (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
7040
== (SA_NOCLDSTOP | SA_RESTART));
7041
7042
/* Restore signal handler */
7043
g_assert_cmpint(sigaction(SIGCHLD, &expected_sigchld_action, NULL),
7044
==, 0);
7045
}
7046
7047
static void test_restore_signal_handler(__attribute__((unused))
7048
test_fixture *fixture,
7049
__attribute__((unused))
7050
gconstpointer user_data){
7051
/* Save current SIGCHLD action, whatever it is */
7052
struct sigaction expected_sigchld_action;
7053
g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
7054
==, 0);
7055
/* Since we haven't established a signal handler yet, there should
7056
not be one established. But another test may have relied on
7057
restore_signal_handler() to restore the signal handler, and if
7058
restore_signal_handler() is buggy (which we should be prepared
7059
for in this test) the signal handler may not have been restored
7060
properly; check for this: */
7061
g_assert_true(expected_sigchld_action.sa_handler != handle_sigchld);
7062
7063
/* Establish a signal handler */
7064
struct sigaction sigchld_action = {
7065
.sa_handler=handle_sigchld,
7066
.sa_flags=SA_RESTART | SA_NOCLDSTOP,
7067
};
7068
g_assert_cmpint(sigfillset(&sigchld_action.sa_mask), ==, 0);
7069
g_assert_cmpint(sigaction(SIGCHLD, &sigchld_action, NULL), ==, 0);
7070
7071
/* Act; i.e. run the restore_signal_handler() function */
7072
g_assert_true(restore_signal_handler(&expected_sigchld_action));
7073
7074
/* Retrieve the restored signal handler data */
7075
struct sigaction actual_restored_sigchld_action;
7076
g_assert_cmpint(sigaction(SIGCHLD, NULL,
7077
&actual_restored_sigchld_action), ==, 0);
7078
7079
/* Check that the function correctly restored the signal action, as
7080
saved in "actual_restored_sigchld_action", to the same values as
7081
the previously saved "expected_sigchld_action" */
7082
/* Check member sa_handler */
7083
g_assert_true(actual_restored_sigchld_action.sa_handler
7084
== expected_sigchld_action.sa_handler);
7085
/* Check member sa_mask */
7086
for(int signum = 1; signum < NSIG; signum++){
7087
const int expected_old_block_state
7088
= sigismember(&expected_sigchld_action.sa_mask, signum);
7089
g_assert_cmpint(expected_old_block_state, >=, 0);
7090
const int actual_restored_block_state
7091
= sigismember(&actual_restored_sigchld_action.sa_mask, signum);
7092
g_assert_cmpint(actual_restored_block_state, >=, 0);
7093
g_assert_cmpint(actual_restored_block_state,
7094
==, expected_old_block_state);
7095
}
7096
/* Check member sa_flags */
7097
g_assert_true((actual_restored_sigchld_action.sa_flags
7098
& (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
7099
== (expected_sigchld_action.sa_flags
7100
& (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
7101
}
7102
7103
static void test_block_sigchld(__attribute__((unused))
7104
test_fixture *fixture,
7105
__attribute__((unused))
7106
gconstpointer user_data){
7107
/* Save original signal mask */
7108
sigset_t expected_sigmask;
7109
g_assert_cmpint(pthread_sigmask(-1, NULL, &expected_sigmask),
7110
==, 0);
7111
7112
/* Make sure SIGCHLD is unblocked for this test */
7113
sigset_t sigchld_sigmask;
7114
g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
7115
g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
7116
g_assert_cmpint(pthread_sigmask(SIG_UNBLOCK, &sigchld_sigmask,
7117
NULL), ==, 0);
7118
7119
/* Act; i.e. run the block_sigchld() function */
7120
sigset_t actual_old_sigmask;
7121
g_assert_true(block_sigchld(&actual_old_sigmask));
7122
7123
/* Check the actual_old_sigmask; it should be the same as the
7124
previously saved signal mask "expected_sigmask". */
7125
for(int signum = 1; signum < NSIG; signum++){
7126
const int expected_old_block_state
7127
= sigismember(&expected_sigmask, signum);
7128
g_assert_cmpint(expected_old_block_state, >=, 0);
7129
const int actual_old_block_state
7130
= sigismember(&actual_old_sigmask, signum);
7131
g_assert_cmpint(actual_old_block_state, >=, 0);
7132
g_assert_cmpint(actual_old_block_state,
7133
==, expected_old_block_state);
7134
}
7135
7136
/* Retrieve the newly set signal mask */
7137
sigset_t actual_sigmask;
7138
g_assert_cmpint(pthread_sigmask(-1, NULL, &actual_sigmask), ==, 0);
7139
7140
/* SIGCHLD should be blocked */
7141
g_assert_cmpint(sigismember(&actual_sigmask, SIGCHLD), ==, 1);
7142
7143
/* Restore signal mask */
7144
g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &expected_sigmask,
7145
NULL), ==, 0);
7146
}
7147
7148
static void test_restore_sigmask(__attribute__((unused))
7149
test_fixture *fixture,
7150
__attribute__((unused))
7151
gconstpointer user_data){
7152
/* Save original signal mask */
7153
sigset_t orig_sigmask;
7154
g_assert_cmpint(pthread_sigmask(-1, NULL, &orig_sigmask), ==, 0);
7155
7156
/* Make sure SIGCHLD is blocked for this test */
7157
sigset_t sigchld_sigmask;
7158
g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
7159
g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
7160
g_assert_cmpint(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask,
7161
NULL), ==, 0);
7162
7163
/* Act; i.e. run the restore_sigmask() function */
7164
g_assert_true(restore_sigmask(&orig_sigmask));
7165
7166
/* Retrieve the newly restored signal mask */
7167
sigset_t restored_sigmask;
7168
g_assert_cmpint(pthread_sigmask(-1, NULL, &restored_sigmask),
7169
==, 0);
7170
7171
/* Check the restored_sigmask; it should be the same as the
7172
previously saved signal mask "orig_sigmask". */
7173
for(int signum = 1; signum < NSIG; signum++){
7174
const int orig_block_state = sigismember(&orig_sigmask, signum);
7175
g_assert_cmpint(orig_block_state, >=, 0);
7176
const int restored_block_state = sigismember(&restored_sigmask,
7177
signum);
7178
g_assert_cmpint(restored_block_state, >=, 0);
7179
g_assert_cmpint(restored_block_state, ==, orig_block_state);
7180
}
7181
7182
/* Restore signal mask */
7183
g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &orig_sigmask,
7184
NULL), ==, 0);
7185
}
7186
7187
static void test_parse_arguments_noargs(__attribute__((unused))
7188
test_fixture *fixture,
7189
__attribute__((unused))
7190
gconstpointer user_data){
7191
char *argv[] = {
7192
strdup("prgname"),
7193
NULL };
7194
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7195
7196
char *agent_directory = NULL;
7197
char *helper_directory = NULL;
7198
uid_t user = 0;
7199
gid_t group = 0;
7200
char *mandos_argz = NULL;
7201
size_t mandos_argz_length = 0;
7202
7203
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7204
&helper_directory, &user, &group,
7205
&mandos_argz, &mandos_argz_length));
7206
g_assert_null(agent_directory);
7207
g_assert_null(helper_directory);
7208
g_assert_true(user == 0);
7209
g_assert_true(group == 0);
7210
g_assert_null(mandos_argz);
7211
g_assert_true(mandos_argz_length == 0);
7212
7213
for(char **arg = argv; *arg != NULL; arg++){
7214
free(*arg);
7215
}
7216
}
7217
7218
__attribute__((nonnull))
7219
static bool parse_arguments_devnull(int argc, char *argv[],
7220
const bool exit_failure,
7221
char **agent_directory,
7222
char **helper_directory,
7223
uid_t *const user,
7224
gid_t *const group,
7225
char **mandos_argz,
7226
size_t *mandos_argz_length){
7227
7228
FILE *real_stderr = stderr;
7229
FILE *devnull = fopen("/dev/null", "we");
7230
g_assert_nonnull(devnull);
7231
stderr = devnull;
7232
7233
const bool ret = parse_arguments(argc, argv, exit_failure,
7234
agent_directory,
7235
helper_directory, user, group,
7236
mandos_argz, mandos_argz_length);
7237
const error_t saved_errno = errno;
7238
7239
stderr = real_stderr;
7240
g_assert_cmpint(fclose(devnull), ==, 0);
7241
7242
errno = saved_errno;
7243
7244
return ret;
7245
}
7246
7247
static void test_parse_arguments_invalid(__attribute__((unused))
7248
test_fixture *fixture,
7249
__attribute__((unused))
7250
gconstpointer user_data){
7251
char *argv[] = {
7252
strdup("prgname"),
7253
strdup("--invalid"),
7254
NULL };
7255
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7256
7257
char *agent_directory = NULL;
7258
char *helper_directory = NULL;
7259
uid_t user = 0;
7260
gid_t group = 0;
7261
char *mandos_argz = NULL;
7262
size_t mandos_argz_length = 0;
7263
7264
g_assert_false(parse_arguments_devnull(argc, argv, false,
7265
&agent_directory,
7266
&helper_directory, &user,
7267
&group, &mandos_argz,
7268
&mandos_argz_length));
7269
7270
g_assert_true(errno == EINVAL);
7271
g_assert_null(agent_directory);
7272
g_assert_null(helper_directory);
7273
g_assert_null(mandos_argz);
7274
g_assert_true(mandos_argz_length == 0);
7275
7276
for(char **arg = argv; *arg != NULL; arg++){
7277
free(*arg);
7278
}
7279
}
7280
7281
static void test_parse_arguments_long_dir(__attribute__((unused))
7282
test_fixture *fixture,
7283
__attribute__((unused))
7284
gconstpointer user_data){
7285
char *argv[] = {
7286
strdup("prgname"),
7287
strdup("--agent-directory"),
7288
strdup("/tmp"),
7289
NULL };
7290
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7291
7292
__attribute__((cleanup(cleanup_string)))
7293
char *agent_directory = NULL;
7294
char *helper_directory = NULL;
7295
uid_t user = 0;
7296
gid_t group = 0;
7297
__attribute__((cleanup(cleanup_string)))
7298
char *mandos_argz = NULL;
7299
size_t mandos_argz_length = 0;
7300
7301
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7302
&helper_directory, &user, &group,
7303
&mandos_argz, &mandos_argz_length));
7304
7305
g_assert_cmpstr(agent_directory, ==, "/tmp");
7306
g_assert_null(helper_directory);
7307
g_assert_true(user == 0);
7308
g_assert_true(group == 0);
7309
g_assert_null(mandos_argz);
7310
g_assert_true(mandos_argz_length == 0);
7311
7312
for(char **arg = argv; *arg != NULL; arg++){
7313
free(*arg);
7314
}
7315
}
7316
7317
static void test_parse_arguments_short_dir(__attribute__((unused))
7318
test_fixture *fixture,
7319
__attribute__((unused))
7320
gconstpointer user_data){
7321
char *argv[] = {
7322
strdup("prgname"),
7323
strdup("-d"),
7324
strdup("/tmp"),
7325
NULL };
7326
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7327
7328
__attribute__((cleanup(cleanup_string)))
7329
char *agent_directory = NULL;
7330
char *helper_directory = NULL;
7331
uid_t user = 0;
7332
gid_t group = 0;
7333
__attribute__((cleanup(cleanup_string)))
7334
char *mandos_argz = NULL;
7335
size_t mandos_argz_length = 0;
7336
7337
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7338
&helper_directory, &user, &group,
7339
&mandos_argz, &mandos_argz_length));
7340
7341
g_assert_cmpstr(agent_directory, ==, "/tmp");
7342
g_assert_null(helper_directory);
7343
g_assert_true(user == 0);
7344
g_assert_true(group == 0);
7345
g_assert_null(mandos_argz);
7346
g_assert_true(mandos_argz_length == 0);
7347
7348
for(char **arg = argv; *arg != NULL; arg++){
7349
free(*arg);
7350
}
7351
}
7352
7353
static
7354
void test_parse_arguments_helper_directory(__attribute__((unused))
7355
test_fixture *fixture,
7356
__attribute__((unused))
7357
gconstpointer user_data){
7358
char *argv[] = {
7359
strdup("prgname"),
7360
strdup("--helper-directory"),
7361
strdup("/tmp"),
7362
NULL };
7363
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7364
7365
char *agent_directory = NULL;
7366
__attribute__((cleanup(cleanup_string)))
7367
char *helper_directory = NULL;
7368
uid_t user = 0;
7369
gid_t group = 0;
7370
__attribute__((cleanup(cleanup_string)))
7371
char *mandos_argz = NULL;
7372
size_t mandos_argz_length = 0;
7373
7374
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7375
&helper_directory, &user, &group,
7376
&mandos_argz, &mandos_argz_length));
7377
7378
g_assert_cmpstr(helper_directory, ==, "/tmp");
7379
g_assert_null(agent_directory);
7380
g_assert_true(user == 0);
7381
g_assert_true(group == 0);
7382
g_assert_null(mandos_argz);
7383
g_assert_true(mandos_argz_length == 0);
7384
7385
for(char **arg = argv; *arg != NULL; arg++){
7386
free(*arg);
7387
}
7388
}
7389
7390
static
7391
void test_parse_arguments_plugin_helper_dir(__attribute__((unused))
7392
test_fixture *fixture,
7393
__attribute__((unused))
7394
gconstpointer user_data){
7395
char *argv[] = {
7396
strdup("prgname"),
7397
strdup("--plugin-helper-dir"),
7398
strdup("/tmp"),
7399
NULL };
7400
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7401
7402
char *agent_directory = NULL;
7403
__attribute__((cleanup(cleanup_string)))
7404
char *helper_directory = NULL;
7405
uid_t user = 0;
7406
gid_t group = 0;
7407
__attribute__((cleanup(cleanup_string)))
7408
char *mandos_argz = NULL;
7409
size_t mandos_argz_length = 0;
7410
7411
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7412
&helper_directory, &user, &group,
7413
&mandos_argz, &mandos_argz_length));
7414
7415
g_assert_cmpstr(helper_directory, ==, "/tmp");
7416
g_assert_null(agent_directory);
7417
g_assert_true(user == 0);
7418
g_assert_true(group == 0);
7419
g_assert_null(mandos_argz);
7420
g_assert_true(mandos_argz_length == 0);
7421
7422
for(char **arg = argv; *arg != NULL; arg++){
7423
free(*arg);
7424
}
7425
}
7426
7427
static void test_parse_arguments_user(__attribute__((unused))
7428
test_fixture *fixture,
7429
__attribute__((unused))
7430
gconstpointer user_data){
7431
char *argv[] = {
7432
strdup("prgname"),
7433
strdup("--user"),
7434
strdup("1000"),
7435
NULL };
7436
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7437
7438
char *agent_directory = NULL;
7439
__attribute__((cleanup(cleanup_string)))
7440
char *helper_directory = NULL;
7441
uid_t user = 0;
7442
gid_t group = 0;
7443
__attribute__((cleanup(cleanup_string)))
7444
char *mandos_argz = NULL;
7445
size_t mandos_argz_length = 0;
7446
7447
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7448
&helper_directory, &user, &group,
7449
&mandos_argz, &mandos_argz_length));
7450
7451
g_assert_null(helper_directory);
7452
g_assert_null(agent_directory);
7453
g_assert_cmpuint((unsigned int)user, ==, 1000);
7454
g_assert_true(group == 0);
7455
g_assert_null(mandos_argz);
7456
g_assert_true(mandos_argz_length == 0);
7457
7458
for(char **arg = argv; *arg != NULL; arg++){
7459
free(*arg);
7460
}
7461
}
7462
7463
static void test_parse_arguments_user_invalid(__attribute__((unused))
7464
test_fixture *fixture,
7465
__attribute__((unused))
7466
gconstpointer
7467
user_data){
7468
char *argv[] = {
7469
strdup("prgname"),
7470
strdup("--user"),
7471
strdup("invalid"),
7472
NULL };
7473
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7474
7475
char *agent_directory = NULL;
7476
__attribute__((cleanup(cleanup_string)))
7477
char *helper_directory = NULL;
7478
uid_t user = 0;
7479
gid_t group = 0;
7480
__attribute__((cleanup(cleanup_string)))
7481
char *mandos_argz = NULL;
7482
size_t mandos_argz_length = 0;
7483
7484
g_assert_false(parse_arguments_devnull(argc, argv, false,
7485
&agent_directory,
7486
&helper_directory, &user,
7487
&group, &mandos_argz,
7488
&mandos_argz_length));
7489
7490
g_assert_null(helper_directory);
7491
g_assert_null(agent_directory);
7492
g_assert_cmpuint((unsigned int)user, ==, 0);
7493
g_assert_true(group == 0);
7494
g_assert_null(mandos_argz);
7495
g_assert_true(mandos_argz_length == 0);
7496
7497
for(char **arg = argv; *arg != NULL; arg++){
7498
free(*arg);
7499
}
7500
}
7501
7502
static
7503
void test_parse_arguments_user_zero_invalid(__attribute__((unused))
7504
test_fixture *fixture,
7505
__attribute__((unused))
7506
gconstpointer user_data){
7507
char *argv[] = {
7508
strdup("prgname"),
7509
strdup("--user"),
7510
strdup("0"),
7511
NULL };
7512
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7513
7514
char *agent_directory = NULL;
7515
__attribute__((cleanup(cleanup_string)))
7516
char *helper_directory = NULL;
7517
uid_t user = 0;
7518
gid_t group = 0;
7519
__attribute__((cleanup(cleanup_string)))
7520
char *mandos_argz = NULL;
7521
size_t mandos_argz_length = 0;
7522
7523
g_assert_false(parse_arguments_devnull(argc, argv, false,
7524
&agent_directory,
7525
&helper_directory, &user,
7526
&group, &mandos_argz,
7527
&mandos_argz_length));
7528
7529
g_assert_null(helper_directory);
7530
g_assert_null(agent_directory);
7531
g_assert_cmpuint((unsigned int)user, ==, 0);
7532
g_assert_true(group == 0);
7533
g_assert_null(mandos_argz);
7534
g_assert_true(mandos_argz_length == 0);
7535
7536
for(char **arg = argv; *arg != NULL; arg++){
7537
free(*arg);
7538
}
7539
}
7540
7541
static void test_parse_arguments_group(__attribute__((unused))
7542
test_fixture *fixture,
7543
__attribute__((unused))
7544
gconstpointer user_data){
7545
char *argv[] = {
7546
strdup("prgname"),
7547
strdup("--group"),
7548
strdup("1000"),
7549
NULL };
7550
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7551
7552
char *agent_directory = NULL;
7553
__attribute__((cleanup(cleanup_string)))
7554
char *helper_directory = NULL;
7555
uid_t user = 0;
7556
gid_t group = 0;
7557
__attribute__((cleanup(cleanup_string)))
7558
char *mandos_argz = NULL;
7559
size_t mandos_argz_length = 0;
7560
7561
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7562
&helper_directory, &user, &group,
7563
&mandos_argz, &mandos_argz_length));
7564
7565
g_assert_null(helper_directory);
7566
g_assert_null(agent_directory);
7567
g_assert_true(user == 0);
7568
g_assert_cmpuint((unsigned int)group, ==, 1000);
7569
g_assert_null(mandos_argz);
7570
g_assert_true(mandos_argz_length == 0);
7571
7572
for(char **arg = argv; *arg != NULL; arg++){
7573
free(*arg);
7574
}
7575
}
7576
7577
static void test_parse_arguments_group_invalid(__attribute__((unused))
7578
test_fixture *fixture,
7579
__attribute__((unused))
7580
gconstpointer
7581
user_data){
7582
char *argv[] = {
7583
strdup("prgname"),
7584
strdup("--group"),
7585
strdup("invalid"),
7586
NULL };
7587
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7588
7589
char *agent_directory = NULL;
7590
__attribute__((cleanup(cleanup_string)))
7591
char *helper_directory = NULL;
7592
uid_t user = 0;
7593
gid_t group = 0;
7594
__attribute__((cleanup(cleanup_string)))
7595
char *mandos_argz = NULL;
7596
size_t mandos_argz_length = 0;
7597
7598
g_assert_false(parse_arguments_devnull(argc, argv, false,
7599
&agent_directory,
7600
&helper_directory, &user,
7601
&group, &mandos_argz,
7602
&mandos_argz_length));
7603
7604
g_assert_null(helper_directory);
7605
g_assert_null(agent_directory);
7606
g_assert_true(user == 0);
7607
g_assert_true(group == 0);
7608
g_assert_null(mandos_argz);
7609
g_assert_true(mandos_argz_length == 0);
7610
7611
for(char **arg = argv; *arg != NULL; arg++){
7612
free(*arg);
7613
}
7614
}
7615
7616
static
7617
void test_parse_arguments_group_zero_invalid(__attribute__((unused))
7618
test_fixture *fixture,
7619
__attribute__((unused))
7620
gconstpointer user_data){
7621
char *argv[] = {
7622
strdup("prgname"),
7623
strdup("--group"),
7624
strdup("0"),
7625
NULL };
7626
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7627
7628
char *agent_directory = NULL;
7629
__attribute__((cleanup(cleanup_string)))
7630
char *helper_directory = NULL;
7631
uid_t user = 0;
7632
gid_t group = 0;
7633
__attribute__((cleanup(cleanup_string)))
7634
char *mandos_argz = NULL;
7635
size_t mandos_argz_length = 0;
7636
7637
g_assert_false(parse_arguments_devnull(argc, argv, false,
7638
&agent_directory,
7639
&helper_directory, &user,
7640
&group, &mandos_argz,
7641
&mandos_argz_length));
7642
7643
g_assert_null(helper_directory);
7644
g_assert_null(agent_directory);
7645
g_assert_cmpuint((unsigned int)group, ==, 0);
7646
g_assert_true(group == 0);
7647
g_assert_null(mandos_argz);
7648
g_assert_true(mandos_argz_length == 0);
7649
7650
for(char **arg = argv; *arg != NULL; arg++){
7651
free(*arg);
7652
}
7653
}
7654
7655
static void test_parse_arguments_mandos_noargs(__attribute__((unused))
7656
test_fixture *fixture,
7657
__attribute__((unused))
7658
gconstpointer
7659
user_data){
7660
char *argv[] = {
7661
strdup("prgname"),
7662
strdup("mandos-client"),
7663
NULL };
7664
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7665
7666
__attribute__((cleanup(cleanup_string)))
7667
char *agent_directory = NULL;
7668
__attribute__((cleanup(cleanup_string)))
7669
char *helper_directory = NULL;
7670
uid_t user = 0;
7671
gid_t group = 0;
7672
__attribute__((cleanup(cleanup_string)))
7673
char *mandos_argz = NULL;
7674
size_t mandos_argz_length = 0;
7675
7676
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7677
&helper_directory, &user, &group,
7678
&mandos_argz, &mandos_argz_length));
7679
7680
g_assert_null(agent_directory);
7681
g_assert_null(helper_directory);
7682
g_assert_true(user == 0);
7683
g_assert_true(group == 0);
7684
g_assert_cmpstr(mandos_argz, ==, "mandos-client");
7685
g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
7686
mandos_argz_length),
7687
==, 1);
7688
7689
for(char **arg = argv; *arg != NULL; arg++){
7690
free(*arg);
7691
}
7692
}
7693
7694
static void test_parse_arguments_mandos_args(__attribute__((unused))
7695
test_fixture *fixture,
7696
__attribute__((unused))
7697
gconstpointer user_data){
7698
char *argv[] = {
7699
strdup("prgname"),
7700
strdup("mandos-client"),
7701
strdup("one"),
7702
strdup("two"),
7703
strdup("three"),
7704
NULL };
7705
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7706
7707
__attribute__((cleanup(cleanup_string)))
7708
char *agent_directory = NULL;
7709
__attribute__((cleanup(cleanup_string)))
7710
char *helper_directory = NULL;
7711
uid_t user = 0;
7712
gid_t group = 0;
7713
__attribute__((cleanup(cleanup_string)))
7714
char *mandos_argz = NULL;
7715
size_t mandos_argz_length = 0;
7716
7717
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7718
&helper_directory, &user, &group,
7719
&mandos_argz, &mandos_argz_length));
7720
7721
g_assert_null(agent_directory);
7722
g_assert_null(helper_directory);
7723
g_assert_true(user == 0);
7724
g_assert_true(group == 0);
7725
char *marg = mandos_argz;
7726
g_assert_cmpstr(marg, ==, "mandos-client");
7727
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7728
g_assert_cmpstr(marg, ==, "one");
7729
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7730
g_assert_cmpstr(marg, ==, "two");
7731
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7732
g_assert_cmpstr(marg, ==, "three");
7733
g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
7734
mandos_argz_length),
7735
==, 4);
7736
7737
for(char **arg = argv; *arg != NULL; arg++){
7738
free(*arg);
7739
}
7740
}
7741
7742
static void test_parse_arguments_all_args(__attribute__((unused))
7743
test_fixture *fixture,
7744
__attribute__((unused))
7745
gconstpointer user_data){
7746
char *argv[] = {
7747
strdup("prgname"),
7748
strdup("--agent-directory"),
7749
strdup("/tmp"),
7750
strdup("--helper-directory"),
7751
strdup("/var/tmp"),
7752
strdup("--user"),
7753
strdup("1"),
7754
strdup("--group"),
7755
strdup("2"),
7756
strdup("mandos-client"),
7757
strdup("one"),
7758
strdup("two"),
7759
strdup("three"),
7760
NULL };
7761
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7762
7763
__attribute__((cleanup(cleanup_string)))
7764
char *agent_directory = NULL;
7765
__attribute__((cleanup(cleanup_string)))
7766
char *helper_directory = NULL;
7767
uid_t user = 0;
7768
gid_t group = 0;
7769
__attribute__((cleanup(cleanup_string)))
7770
char *mandos_argz = NULL;
7771
size_t mandos_argz_length = 0;
7772
7773
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7774
&helper_directory, &user, &group,
7775
&mandos_argz, &mandos_argz_length));
7776
7777
g_assert_cmpstr(agent_directory, ==, "/tmp");
7778
g_assert_cmpstr(helper_directory, ==, "/var/tmp");
7779
g_assert_true(user == 1);
7780
g_assert_true(group == 2);
7781
char *marg = mandos_argz;
7782
g_assert_cmpstr(marg, ==, "mandos-client");
7783
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7784
g_assert_cmpstr(marg, ==, "one");
7785
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7786
g_assert_cmpstr(marg, ==, "two");
7787
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7788
g_assert_cmpstr(marg, ==, "three");
7789
g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
7790
mandos_argz_length),
7791
==, 4);
7792
7793
for(char **arg = argv; *arg != NULL; arg++){
7794
free(*arg);
7795
}
7796
}
7797
7798
static void test_parse_arguments_mixed(__attribute__((unused))
7799
test_fixture *fixture,
7800
__attribute__((unused))
7801
gconstpointer user_data){
7802
char *argv[] = {
7803
strdup("prgname"),
7804
strdup("mandos-client"),
7805
strdup("--user"),
7806
strdup("1"),
7807
strdup("one"),
7808
strdup("--agent-directory"),
7809
strdup("/tmp"),
7810
strdup("two"),
7811
strdup("three"),
7812
strdup("--helper-directory=/var/tmp"),
7813
NULL };
7814
const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7815
7816
__attribute__((cleanup(cleanup_string)))
7817
char *agent_directory = NULL;
7818
__attribute__((cleanup(cleanup_string)))
7819
char *helper_directory = NULL;
7820
uid_t user = 0;
7821
gid_t group = 0;
7822
__attribute__((cleanup(cleanup_string)))
7823
char *mandos_argz = NULL;
7824
size_t mandos_argz_length = 0;
7825
7826
g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7827
&helper_directory, &user, &group,
7828
&mandos_argz, &mandos_argz_length));
7829
7830
g_assert_cmpstr(agent_directory, ==, "/tmp");
7831
g_assert_cmpstr(helper_directory, ==, "/var/tmp");
7832
g_assert_true(user == 1);
7833
g_assert_true(group == 0);
7834
char *marg = mandos_argz;
7835
g_assert_cmpstr(marg, ==, "mandos-client");
7836
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7837
g_assert_cmpstr(marg, ==, "one");
7838
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7839
g_assert_cmpstr(marg, ==, "two");
7840
marg = argz_next(mandos_argz, mandos_argz_length, marg);
7841
g_assert_cmpstr(marg, ==, "three");
7842
g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
7843
mandos_argz_length),
7844
==, 4);
7845
7846
for(char **arg = argv; *arg != NULL; arg++){
7847
free(*arg);
7848
}
7849
}
7850
7851
/* End of tests section */
7852
7853
/* Test boilerplate section; New tests should be added to the test
7854
suite definition here, in the "run_tests" function.
7855
7856
Finally, this section also contains the should_only_run_tests()
7857
function used by main() for deciding if tests should be run or to
7858
start normally. */
7859
7860
__attribute__((cold))
7861
static bool run_tests(int argc, char *argv[]){
7862
g_test_init(&argc, &argv, NULL);
7863
7864
/* A macro to add a test with no setup or teardown functions */
7865
#define test_add(testpath, testfunc) \
7866
do { \
7867
g_test_add((testpath), test_fixture, NULL, NULL, \
7868
(testfunc), NULL); \
7869
} while(false)
7870
7871
/* Test the signal-related functions first, since some other tests
7872
depend on these functions in their setups and teardowns */
7873
test_add("/signal-handling/setup", test_setup_signal_handler);
7874
test_add("/signal-handling/restore", test_restore_signal_handler);
7875
test_add("/signal-handling/block", test_block_sigchld);
7876
test_add("/signal-handling/restore-sigmask", test_restore_sigmask);
7877
7878
/* Regular non-signal-related tests; these use no setups or
7879
teardowns */
7880
test_add("/parse_arguments/noargs", test_parse_arguments_noargs);
7881
test_add("/parse_arguments/invalid", test_parse_arguments_invalid);
7882
test_add("/parse_arguments/long-dir",
7883
test_parse_arguments_long_dir);
7884
test_add("/parse_arguments/short-dir",
7885
test_parse_arguments_short_dir);
7886
test_add("/parse_arguments/helper-directory",
7887
test_parse_arguments_helper_directory);
7888
test_add("/parse_arguments/plugin-helper-dir",
7889
test_parse_arguments_plugin_helper_dir);
7890
test_add("/parse_arguments/user", test_parse_arguments_user);
7891
test_add("/parse_arguments/user-invalid",
7892
test_parse_arguments_user_invalid);
7893
test_add("/parse_arguments/user-zero-invalid",
7894
test_parse_arguments_user_zero_invalid);
7895
test_add("/parse_arguments/group", test_parse_arguments_group);
7896
test_add("/parse_arguments/group-invalid",
7897
test_parse_arguments_group_invalid);
7898
test_add("/parse_arguments/group-zero-invalid",
7899
test_parse_arguments_group_zero_invalid);
7900
test_add("/parse_arguments/mandos-noargs",
7901
test_parse_arguments_mandos_noargs);
7902
test_add("/parse_arguments/mandos-args",
7903
test_parse_arguments_mandos_args);
7904
test_add("/parse_arguments/all-args",
7905
test_parse_arguments_all_args);
7906
test_add("/parse_arguments/mixed", test_parse_arguments_mixed);
7907
test_add("/queue/create", test_create_queue);
7908
test_add("/queue/add", test_add_to_queue);
7909
test_add("/queue/add/overflow", test_add_to_queue_overflow);
7910
test_add("/queue/has_question/empty",
7911
test_queue_has_question_empty);
7912
test_add("/queue/has_question/false",
7913
test_queue_has_question_false);
7914
test_add("/queue/has_question/true", test_queue_has_question_true);
7915
test_add("/queue/has_question/false2",
7916
test_queue_has_question_false2);
7917
test_add("/queue/has_question/true2",
7918
test_queue_has_question_true2);
7919
test_add("/buffer/cleanup", test_cleanup_buffer);
7920
test_add("/string_set/net-set-contains-nothing",
7921
test_string_set_new_set_contains_nothing);
7922
test_add("/string_set/with-added-string-contains-it",
7923
test_string_set_with_added_string_contains_it);
7924
test_add("/string_set/cleared-does-not-contain-string",
7925
test_string_set_cleared_does_not_contain_str);
7926
test_add("/string_set/swap/one-with-empty",
7927
test_string_set_swap_one_with_empty);
7928
test_add("/string_set/swap/empty-with-one",
7929
test_string_set_swap_empty_with_one);
7930
test_add("/string_set/swap/one-with-one",
7931
test_string_set_swap_one_with_one);
7932
7933
/* A macro to add a test using the setup and teardown functions */
7934
#define test_add_st(path, func) \
7935
do { \
7936
g_test_add((path), test_fixture, NULL, test_setup, (func), \
7937
test_teardown); \
7938
} while(false)
7939
7940
/* Signal-related tests; these use setups and teardowns which
7941
establish, during each test run, a signal handler for, and a
7942
signal mask blocking, the SIGCHLD signal, just like main() */
7943
test_add_st("/wait_for_event/timeout", test_wait_for_event_timeout);
7944
test_add_st("/wait_for_event/event", test_wait_for_event_event);
7945
test_add_st("/wait_for_event/sigchld", test_wait_for_event_sigchld);
7946
test_add_st("/run_queue/zeroes-next-run",
7947
test_run_queue_zeroes_next_run);
7948
test_add_st("/run_queue/clears-cancelled_filenames",
7949
test_run_queue_clears_cancelled_filenames);
7950
test_add_st("/run_queue/skips-cancelled-filenames",
7951
test_run_queue_skips_cancelled_filenames);
7952
test_add_st("/run_queue/one-task", test_run_queue_one_task);
7953
test_add_st("/run_queue/two-tasks", test_run_queue_two_tasks);
7954
test_add_st("/run_queue/two-tasks/quit",
7955
test_run_queue_two_tasks_quit);
7956
test_add_st("/run_queue/two-tasks-cleanup",
7957
test_run_queue_two_tasks_cleanup);
7958
test_add_st("/task-creators/start_mandos_client",
7959
test_start_mandos_client);
7960
test_add_st("/task-creators/start_mandos_client/execv",
7961
test_start_mandos_client_execv);
7962
test_add_st("/task-creators/start_mandos_client/suid/euid",
7963
test_start_mandos_client_suid_euid);
7964
test_add_st("/task-creators/start_mandos_client/suid/egid",
7965
test_start_mandos_client_suid_egid);
7966
test_add_st("/task-creators/start_mandos_client/suid/ruid",
7967
test_start_mandos_client_suid_ruid);
7968
test_add_st("/task-creators/start_mandos_client/suid/rgid",
7969
test_start_mandos_client_suid_rgid);
7970
test_add_st("/task-creators/start_mandos_client/read",
7971
test_start_mandos_client_read);
7972
test_add_st("/task-creators/start_mandos_client/helper-directory",
7973
test_start_mandos_client_helper_directory);
7974
test_add_st("/task-creators/start_mandos_client/sigmask",
7975
test_start_mandos_client_sigmask);
7976
test_add_st("/task/wait_for_mandos_client_exit/badpid",
7977
test_wait_for_mandos_client_exit_badpid);
7978
test_add_st("/task/wait_for_mandos_client_exit/noexit",
7979
test_wait_for_mandos_client_exit_noexit);
7980
test_add_st("/task/wait_for_mandos_client_exit/success",
7981
test_wait_for_mandos_client_exit_success);
7982
test_add_st("/task/wait_for_mandos_client_exit/failure",
7983
test_wait_for_mandos_client_exit_failure);
7984
test_add_st("/task/wait_for_mandos_client_exit/killed",
7985
test_wait_for_mandos_client_exit_killed);
7986
test_add_st("/task/read_mandos_client_output/readerror",
7987
test_read_mandos_client_output_readerror);
7988
test_add_st("/task/read_mandos_client_output/nodata",
7989
test_read_mandos_client_output_nodata);
7990
test_add_st("/task/read_mandos_client_output/eof",
7991
test_read_mandos_client_output_eof);
7992
test_add_st("/task/read_mandos_client_output/once",
7993
test_read_mandos_client_output_once);
7994
test_add_st("/task/read_mandos_client_output/malloc",
7995
test_read_mandos_client_output_malloc);
7996
test_add_st("/task/read_mandos_client_output/append",
7997
test_read_mandos_client_output_append);
7998
test_add_st("/task-creators/add_inotify_dir_watch",
7999
test_add_inotify_dir_watch);
8000
test_add_st("/task-creators/add_inotify_dir_watch/fail",
8001
test_add_inotify_dir_watch_fail);
8002
test_add_st("/task-creators/add_inotify_dir_watch/not-a-directory",
8003
test_add_inotify_dir_watch_nondir);
8004
test_add_st("/task-creators/add_inotify_dir_watch/EAGAIN",
8005
test_add_inotify_dir_watch_EAGAIN);
8006
test_add_st("/task-creators/add_inotify_dir_watch/IN_CLOSE_WRITE",
8007
test_add_inotify_dir_watch_IN_CLOSE_WRITE);
8008
test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_TO",
8009
test_add_inotify_dir_watch_IN_MOVED_TO);
8010
test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_FROM",
8011
test_add_inotify_dir_watch_IN_MOVED_FROM);
8012
test_add_st("/task-creators/add_inotify_dir_watch/IN_EXCL_UNLINK",
8013
test_add_inotify_dir_watch_IN_EXCL_UNLINK);
8014
test_add_st("/task-creators/add_inotify_dir_watch/IN_DELETE",
8015
test_add_inotify_dir_watch_IN_DELETE);
8016
test_add_st("/task/read_inotify_event/readerror",
8017
test_read_inotify_event_readerror);
8018
test_add_st("/task/read_inotify_event/bad-epoll",
8019
test_read_inotify_event_bad_epoll);
8020
test_add_st("/task/read_inotify_event/nodata",
8021
test_read_inotify_event_nodata);
8022
test_add_st("/task/read_inotify_event/eof",
8023
test_read_inotify_event_eof);
8024
test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE",
8025
test_read_inotify_event_IN_CLOSE_WRITE);
8026
test_add_st("/task/read_inotify_event/IN_MOVED_TO",
8027
test_read_inotify_event_IN_MOVED_TO);
8028
test_add_st("/task/read_inotify_event/IN_MOVED_FROM",
8029
test_read_inotify_event_IN_MOVED_FROM);
8030
test_add_st("/task/read_inotify_event/IN_DELETE",
8031
test_read_inotify_event_IN_DELETE);
8032
test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE/badname",
8033
test_read_inotify_event_IN_CLOSE_WRITE_badname);
8034
test_add_st("/task/read_inotify_event/IN_MOVED_TO/badname",
8035
test_read_inotify_event_IN_MOVED_TO_badname);
8036
test_add_st("/task/read_inotify_event/IN_MOVED_FROM/badname",
8037
test_read_inotify_event_IN_MOVED_FROM_badname);
8038
test_add_st("/task/read_inotify_event/IN_DELETE/badname",
8039
test_read_inotify_event_IN_DELETE_badname);
8040
test_add_st("/task/open_and_parse_question/ENOENT",
8041
test_open_and_parse_question_ENOENT);
8042
test_add_st("/task/open_and_parse_question/EIO",
8043
test_open_and_parse_question_EIO);
8044
test_add_st("/task/open_and_parse_question/parse-error",
8045
test_open_and_parse_question_parse_error);
8046
test_add_st("/task/open_and_parse_question/nosocket",
8047
test_open_and_parse_question_nosocket);
8048
test_add_st("/task/open_and_parse_question/badsocket",
8049
test_open_and_parse_question_badsocket);
8050
test_add_st("/task/open_and_parse_question/nopid",
8051
test_open_and_parse_question_nopid);
8052
test_add_st("/task/open_and_parse_question/badpid",
8053
test_open_and_parse_question_badpid);
8054
test_add_st("/task/open_and_parse_question/noexist_pid",
8055
test_open_and_parse_question_noexist_pid);
8056
test_add_st("/task/open_and_parse_question/no-notafter",
8057
test_open_and_parse_question_no_notafter);
8058
test_add_st("/task/open_and_parse_question/bad-notafter",
8059
test_open_and_parse_question_bad_notafter);
8060
test_add_st("/task/open_and_parse_question/notafter-0",
8061
test_open_and_parse_question_notafter_0);
8062
test_add_st("/task/open_and_parse_question/notafter-1",
8063
test_open_and_parse_question_notafter_1);
8064
test_add_st("/task/open_and_parse_question/notafter-1-1",
8065
test_open_and_parse_question_notafter_1_1);
8066
test_add_st("/task/open_and_parse_question/notafter-1-2",
8067
test_open_and_parse_question_notafter_1_2);
8068
test_add_st("/task/open_and_parse_question/equal-notafter",
8069
test_open_and_parse_question_equal_notafter);
8070
test_add_st("/task/open_and_parse_question/late-notafter",
8071
test_open_and_parse_question_late_notafter);
8072
test_add_st("/task/cancel_old_question/0-1-2",
8073
test_cancel_old_question_0_1_2);
8074
test_add_st("/task/cancel_old_question/0-2-1",
8075
test_cancel_old_question_0_2_1);
8076
test_add_st("/task/cancel_old_question/1-2-3",
8077
test_cancel_old_question_1_2_3);
8078
test_add_st("/task/cancel_old_question/1-3-2",
8079
test_cancel_old_question_1_3_2);
8080
test_add_st("/task/cancel_old_question/2-1-3",
8081
test_cancel_old_question_2_1_3);
8082
test_add_st("/task/cancel_old_question/2-3-1",
8083
test_cancel_old_question_2_3_1);
8084
test_add_st("/task/cancel_old_question/3-1-2",
8085
test_cancel_old_question_3_1_2);
8086
test_add_st("/task/cancel_old_question/3-2-1",
8087
test_cancel_old_question_3_2_1);
8088
test_add_st("/task/connect_question_socket/name-too-long",
8089
test_connect_question_socket_name_too_long);
8090
test_add_st("/task/connect_question_socket/connect-fail",
8091
test_connect_question_socket_connect_fail);
8092
test_add_st("/task/connect_question_socket/bad-epoll",
8093
test_connect_question_socket_bad_epoll);
8094
test_add_st("/task/connect_question_socket/usable",
8095
test_connect_question_socket_usable);
8096
test_add_st("/task/send_password_to_socket/client-not-exited",
8097
test_send_password_to_socket_client_not_exited);
8098
test_add_st("/task/send_password_to_socket/password-not-read",
8099
test_send_password_to_socket_password_not_read);
8100
test_add_st("/task/send_password_to_socket/EMSGSIZE",
8101
test_send_password_to_socket_EMSGSIZE);
8102
test_add_st("/task/send_password_to_socket/retry",
8103
test_send_password_to_socket_retry);
8104
test_add_st("/task/send_password_to_socket/bad-epoll",
8105
test_send_password_to_socket_bad_epoll);
8106
test_add_st("/task/send_password_to_socket/null-password",
8107
test_send_password_to_socket_null_password);
8108
test_add_st("/task/send_password_to_socket/empty-password",
8109
test_send_password_to_socket_empty_password);
8110
test_add_st("/task/send_password_to_socket/empty-str-password",
8111
test_send_password_to_socket_empty_str_pass);
8112
test_add_st("/task/send_password_to_socket/text-password",
8113
test_send_password_to_socket_text_password);
8114
test_add_st("/task/send_password_to_socket/binary-password",
8115
test_send_password_to_socket_binary_password);
8116
test_add_st("/task/send_password_to_socket/nuls-in-password",
8117
test_send_password_to_socket_nuls_in_password);
8118
test_add_st("/task-creators/add_existing_questions/ENOENT",
8119
test_add_existing_questions_ENOENT);
8120
test_add_st("/task-creators/add_existing_questions/no-questions",
8121
test_add_existing_questions_no_questions);
8122
test_add_st("/task-creators/add_existing_questions/one-question",
8123
test_add_existing_questions_one_question);
8124
test_add_st("/task-creators/add_existing_questions/two-questions",
8125
test_add_existing_questions_two_questions);
8126
test_add_st("/task-creators/add_existing_questions/non-questions",
8127
test_add_existing_questions_non_questions);
8128
test_add_st("/task-creators/add_existing_questions/both-types",
8129
test_add_existing_questions_both_types);
8130
8131
return g_test_run() == 0;
8132
}
8133
8134
static bool should_only_run_tests(int *argc_p, char **argv_p[]){
8135
GOptionContext *context = g_option_context_new("");
8136
8137
g_option_context_set_help_enabled(context, FALSE);
8138
g_option_context_set_ignore_unknown_options(context, TRUE);
8139
8140
gboolean should_run_tests = FALSE;
8141
GOptionEntry entries[] = {
8142
{ "test", 0, 0, G_OPTION_ARG_NONE,
8143
&should_run_tests, "Run tests", NULL },
8144
{ NULL }
8145
};
8146
g_option_context_add_main_entries(context, entries, NULL);
8147
8148
GError *error = NULL;
8149
8150
if(g_option_context_parse(context, argc_p, argv_p, &error) != TRUE){
8151
g_option_context_free(context);
8152
g_error("Failed to parse options: %s", error->message);
8153
}
8154
8155
g_option_context_free(context);
8156
return should_run_tests != FALSE;
8157
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0