1c19800e8SDoug Rabson /*
2*ae771770SStanislav Sedov * Copyright (c) 2004 Kungliga Tekniska Högskolan
3c19800e8SDoug Rabson * (Royal Institute of Technology, Stockholm, Sweden).
4c19800e8SDoug Rabson * All rights reserved.
5c19800e8SDoug Rabson *
6c19800e8SDoug Rabson * Redistribution and use in source and binary forms, with or without
7c19800e8SDoug Rabson * modification, are permitted provided that the following conditions
8c19800e8SDoug Rabson * are met:
9c19800e8SDoug Rabson *
10c19800e8SDoug Rabson * 1. Redistributions of source code must retain the above copyright
11c19800e8SDoug Rabson * notice, this list of conditions and the following disclaimer.
12c19800e8SDoug Rabson *
13c19800e8SDoug Rabson * 2. Redistributions in binary form must reproduce the above copyright
14c19800e8SDoug Rabson * notice, this list of conditions and the following disclaimer in the
15c19800e8SDoug Rabson * documentation and/or other materials provided with the distribution.
16c19800e8SDoug Rabson *
17c19800e8SDoug Rabson * 3. Neither the name of KTH nor the names of its contributors may be
18c19800e8SDoug Rabson * used to endorse or promote products derived from this software without
19c19800e8SDoug Rabson * specific prior written permission.
20c19800e8SDoug Rabson *
21c19800e8SDoug Rabson * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
22c19800e8SDoug Rabson * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23c19800e8SDoug Rabson * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
24c19800e8SDoug Rabson * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
25c19800e8SDoug Rabson * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26c19800e8SDoug Rabson * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27c19800e8SDoug Rabson * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
28c19800e8SDoug Rabson * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
29c19800e8SDoug Rabson * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
30c19800e8SDoug Rabson * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
31c19800e8SDoug Rabson * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */
32c19800e8SDoug Rabson
33c19800e8SDoug Rabson #include "krb5_locl.h"
34c19800e8SDoug Rabson #include <err.h>
35c19800e8SDoug Rabson
36c19800e8SDoug Rabson #define RETVAL(c, r, e, s) \
37c19800e8SDoug Rabson do { if (r != e) krb5_errx(c, 1, "%s", s); } while (0)
38c19800e8SDoug Rabson #define STRINGMATCH(c, s, _s1, _s2) \
39c19800e8SDoug Rabson do { \
40c19800e8SDoug Rabson if (_s1 == NULL || _s2 == NULL) \
41c19800e8SDoug Rabson krb5_errx(c, 1, "s1 or s2 is NULL"); \
42c19800e8SDoug Rabson if (strcmp(_s1,_s2) != 0) \
43c19800e8SDoug Rabson krb5_errx(c, 1, "%s", s); \
44c19800e8SDoug Rabson } while (0)
45c19800e8SDoug Rabson
46c19800e8SDoug Rabson static void
test_match_string(krb5_context context)47c19800e8SDoug Rabson test_match_string(krb5_context context)
48c19800e8SDoug Rabson {
49c19800e8SDoug Rabson krb5_error_code ret;
50c19800e8SDoug Rabson char *s1, *s2;
51c19800e8SDoug Rabson
52c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo", "s", "foo");
53c19800e8SDoug Rabson RETVAL(context, ret, 0, "single s");
54c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo foo", "s", "foo");
55c19800e8SDoug Rabson RETVAL(context, ret, EACCES, "too many strings");
56c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo bar", "ss", "foo", "bar");
57c19800e8SDoug Rabson RETVAL(context, ret, 0, "two strings");
58c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo bar", "ss", "foo", "bar");
59c19800e8SDoug Rabson RETVAL(context, ret, 0, "two strings double space");
60c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo \tbar", "ss", "foo", "bar");
61c19800e8SDoug Rabson RETVAL(context, ret, 0, "two strings space + tab");
62c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo", "ss", "foo", "bar");
63c19800e8SDoug Rabson RETVAL(context, ret, EACCES, "one string, two format strings");
64c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo", "ss", "foo", "foo");
65c19800e8SDoug Rabson RETVAL(context, ret, EACCES, "one string, two format strings (same)");
66c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo \t", "s", "foo");
67c19800e8SDoug Rabson RETVAL(context, ret, 0, "ending space");
68c19800e8SDoug Rabson
69c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo/bar", "f", "foo/bar");
70c19800e8SDoug Rabson RETVAL(context, ret, 0, "liternal fnmatch");
71c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo/bar", "f", "foo/*");
72c19800e8SDoug Rabson RETVAL(context, ret, 0, "foo/*");
73*ae771770SStanislav Sedov ret = krb5_acl_match_string(context, "foo/bar.example.org", "f",
74*ae771770SStanislav Sedov "foo/*.example.org");
75*ae771770SStanislav Sedov RETVAL(context, ret, 0, "foo/*.example.org");
76*ae771770SStanislav Sedov ret = krb5_acl_match_string(context, "foo/bar.example.com", "f",
77*ae771770SStanislav Sedov "foo/*.example.org");
78*ae771770SStanislav Sedov RETVAL(context, ret, EACCES, "foo/*.example.com");
79*ae771770SStanislav Sedov
80c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo/bar/baz", "f", "foo/*/baz");
81c19800e8SDoug Rabson RETVAL(context, ret, 0, "foo/*/baz");
82c19800e8SDoug Rabson
83c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo", "r", &s1);
84c19800e8SDoug Rabson RETVAL(context, ret, 0, "ret 1");
85c19800e8SDoug Rabson STRINGMATCH(context, "ret 1 match", s1, "foo"); free(s1);
86c19800e8SDoug Rabson
87c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo bar", "rr", &s1, &s2);
88c19800e8SDoug Rabson RETVAL(context, ret, 0, "ret 2");
89c19800e8SDoug Rabson STRINGMATCH(context, "ret 2 match 1", s1, "foo"); free(s1);
90c19800e8SDoug Rabson STRINGMATCH(context, "ret 2 match 2", s2, "bar"); free(s2);
91c19800e8SDoug Rabson
92c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo bar", "sr", "bar", &s1);
93c19800e8SDoug Rabson RETVAL(context, ret, EACCES, "ret mismatch");
94c19800e8SDoug Rabson if (s1 != NULL) krb5_errx(context, 1, "s1 not NULL");
95c19800e8SDoug Rabson
96c19800e8SDoug Rabson ret = krb5_acl_match_string(context, "foo", "l", "foo");
97c19800e8SDoug Rabson RETVAL(context, ret, EINVAL, "unknown letter");
98c19800e8SDoug Rabson }
99c19800e8SDoug Rabson
100c19800e8SDoug Rabson
101c19800e8SDoug Rabson int
main(int argc,char ** argv)102c19800e8SDoug Rabson main(int argc, char **argv)
103c19800e8SDoug Rabson {
104c19800e8SDoug Rabson krb5_context context;
105c19800e8SDoug Rabson krb5_error_code ret;
106c19800e8SDoug Rabson
107c19800e8SDoug Rabson setprogname(argv[0]);
108c19800e8SDoug Rabson
109c19800e8SDoug Rabson ret = krb5_init_context(&context);
110c19800e8SDoug Rabson if (ret)
111c19800e8SDoug Rabson errx (1, "krb5_init_context failed: %d", ret);
112c19800e8SDoug Rabson
113c19800e8SDoug Rabson test_match_string(context);
114c19800e8SDoug Rabson
115c19800e8SDoug Rabson krb5_free_context(context);
116c19800e8SDoug Rabson
117c19800e8SDoug Rabson return 0;
118c19800e8SDoug Rabson }
119