xref: /freebsd/crypto/heimdal/lib/krb5/test_acl.c (revision 884a2a699669ec61e2366e3e358342dbc94be24a)
1 /*
2  * Copyright (c) 2004 Kungliga Tekniska H�gskolan
3  * (Royal Institute of Technology, Stockholm, Sweden).
4  * All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  *
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  *
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in the
15  *    documentation and/or other materials provided with the distribution.
16  *
17  * 3. Neither the name of KTH nor the names of its contributors may be
18  *    used to endorse or promote products derived from this software without
19  *    specific prior written permission.
20  *
21  * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
22  * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
24  * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
25  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
28  * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
29  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
30  * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
31  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */
32 
33 #include "krb5_locl.h"
34 #include <err.h>
35 
36 RCSID("$Id: test_acl.c 15036 2005-04-30 15:19:58Z lha $");
37 
38 #define RETVAL(c, r, e, s) \
39 	do { if (r != e) krb5_errx(c, 1, "%s", s); } while (0)
40 #define STRINGMATCH(c, s, _s1, _s2) \
41 	do {							\
42 		if (_s1 == NULL || _s2 == NULL) 		\
43 			krb5_errx(c, 1, "s1 or s2 is NULL");	\
44 		if (strcmp(_s1,_s2) != 0) 			\
45 			krb5_errx(c, 1, "%s", s);		\
46 	} while (0)
47 
48 static void
49 test_match_string(krb5_context context)
50 {
51     krb5_error_code ret;
52     char *s1, *s2;
53 
54     ret = krb5_acl_match_string(context, "foo", "s", "foo");
55     RETVAL(context, ret, 0, "single s");
56     ret = krb5_acl_match_string(context, "foo foo", "s", "foo");
57     RETVAL(context, ret, EACCES, "too many strings");
58     ret = krb5_acl_match_string(context, "foo bar", "ss", "foo", "bar");
59     RETVAL(context, ret, 0, "two strings");
60     ret = krb5_acl_match_string(context, "foo  bar", "ss", "foo", "bar");
61     RETVAL(context, ret, 0, "two strings double space");
62     ret = krb5_acl_match_string(context, "foo \tbar", "ss", "foo", "bar");
63     RETVAL(context, ret, 0, "two strings space + tab");
64     ret = krb5_acl_match_string(context, "foo", "ss", "foo", "bar");
65     RETVAL(context, ret, EACCES, "one string, two format strings");
66     ret = krb5_acl_match_string(context, "foo", "ss", "foo", "foo");
67     RETVAL(context, ret, EACCES, "one string, two format strings (same)");
68     ret = krb5_acl_match_string(context, "foo  \t", "s", "foo");
69     RETVAL(context, ret, 0, "ending space");
70 
71     ret = krb5_acl_match_string(context, "foo/bar", "f", "foo/bar");
72     RETVAL(context, ret, 0, "liternal fnmatch");
73     ret = krb5_acl_match_string(context, "foo/bar", "f", "foo/*");
74     RETVAL(context, ret, 0, "foo/*");
75     ret = krb5_acl_match_string(context, "foo/bar/baz", "f", "foo/*/baz");
76     RETVAL(context, ret, 0, "foo/*/baz");
77 
78     ret = krb5_acl_match_string(context, "foo", "r", &s1);
79     RETVAL(context, ret, 0, "ret 1");
80     STRINGMATCH(context, "ret 1 match", s1, "foo"); free(s1);
81 
82     ret = krb5_acl_match_string(context, "foo bar", "rr", &s1, &s2);
83     RETVAL(context, ret, 0, "ret 2");
84     STRINGMATCH(context, "ret 2 match 1", s1, "foo"); free(s1);
85     STRINGMATCH(context, "ret 2 match 2", s2, "bar"); free(s2);
86 
87     ret = krb5_acl_match_string(context, "foo bar", "sr", "bar", &s1);
88     RETVAL(context, ret, EACCES, "ret mismatch");
89     if (s1 != NULL) krb5_errx(context, 1, "s1 not NULL");
90 
91     ret = krb5_acl_match_string(context, "foo", "l", "foo");
92     RETVAL(context, ret, EINVAL, "unknown letter");
93 }
94 
95 
96 int
97 main(int argc, char **argv)
98 {
99     krb5_context context;
100     krb5_error_code ret;
101 
102     setprogname(argv[0]);
103 
104     ret = krb5_init_context(&context);
105     if (ret)
106 	errx (1, "krb5_init_context failed: %d", ret);
107 
108     test_match_string(context);
109 
110     krb5_free_context(context);
111 
112     return 0;
113 }
114