trust: Correctly reflect the CK_TOKEN_INFO writability flags

Correctly set the CKF_TOKEN_WRITE_PROTECTED flag for paths
which we will be able to write to.

2 files changed, 131 insertions, 2 deletions

diff --git a/trust/tests/test-module.c b/trust/tests/test-module.c
index bf28124..910b9b4 100644
--- a/trust/tests/test-module.c
+++ b/trust/tests/test-module.c
@@ -60,10 +60,13 @@
 #define NUM_SLOTS 3
 
 static CK_OBJECT_CLASS data = CKO_DATA;
+static CK_BBOOL vtrue = CK_TRUE;
+static CK_BBOOL vfalse = CK_FALSE;
 
 struct {
 	CK_FUNCTION_LIST *module;
 	CK_SLOT_ID slots[NUM_SLOTS];
+	char *directory;
 } test;
 
 static void
@@ -109,7 +112,44 @@ teardown (void *unused)
 	rv = test.module->C_Finalize (NULL);
 	assert (rv == CKR_OK);
 
+	free (test.directory);
+
+	memset (&test, 0, sizeof (test));
+}
+
+static void
+setup_writable (void *unused)
+{
+	CK_C_INITIALIZE_ARGS args;
+	char *arguments;
+	CK_ULONG count;
+	CK_RV rv;
+
 	memset (&test, 0, sizeof (test));
+
+	/* This is the entry point of the trust module, linked to this test */
+	rv = C_GetFunctionList (&test.module);
+	assert (rv == CKR_OK);
+
+	test.directory = p11_path_expand ("$TEMP/test-module.XXXXXX");
+	if (!mkdtemp (test.directory))
+		assert_not_reached ();
+
+	memset (&args, 0, sizeof (args));
+	if (asprintf (&arguments, "paths='%s'", test.directory) < 0)
+		assert (false && "not reached");
+	args.pReserved = arguments;
+	args.flags = CKF_OS_LOCKING_OK;
+
+	rv = test.module->C_Initialize (&args);
+	assert (rv == CKR_OK);
+
+	free (arguments);
+
+	count = 1;
+	rv = test.module->C_GetSlotList (CK_TRUE, test.slots, &count);
+	assert (rv == CKR_OK);
+	assert (count == 1);
 }
 
 static void
@@ -587,8 +627,6 @@ static void
 test_find_builtin (void)
 {
 	CK_OBJECT_CLASS klass = CKO_NSS_BUILTIN_ROOT_LIST;
-	CK_BBOOL vtrue = CK_TRUE;
-	CK_BBOOL vfalse = CK_FALSE;
 
 	CK_ATTRIBUTE match[] = {
 		{ CKA_CLASS, &klass, sizeof (klass) },
@@ -987,6 +1025,18 @@ test_login_logout (void)
 	assert (rv == CKR_USER_NOT_LOGGED_IN);
 }
 
+static void
+test_token_writable (void)
+{
+	CK_TOKEN_INFO info;
+	CK_RV rv;
+
+	rv = test.module->C_GetTokenInfo (test.slots[0], &info);
+
+	assert_num_eq (rv, CKR_OK);
+	assert_num_eq (info.flags & CKF_WRITE_PROTECTED, 0);
+}
+
 int
 main (int argc,
       char *argv[])
@@ -1020,5 +1070,8 @@ main (int argc,
 	p11_test (test_find_serial_der_mismatch, "/module/find_serial_der_mismatch");
 	p11_test (test_login_logout, "/module/login_logout");
 
+	p11_fixture (setup_writable, teardown);
+	p11_test (test_token_writable, "/module/token-writable");
+
 	return p11_test_run (argc, argv);
 }
diff --git a/trust/tests/test-token.c b/trust/tests/test-token.c
index 6f5ccdb..d372814 100644
--- a/trust/tests/test-token.c
+++ b/trust/tests/test-token.c
@@ -42,6 +42,7 @@
 
 #include "attrs.h"
 #include "debug.h"
+#include "path.h"
 #include "pkcs11x.h"
 #include "message.h"
 #include "token.h"
@@ -206,6 +207,75 @@ test_token_slot (void *path)
 	assert_num_eq (333, p11_token_get_slot (test.token));
 }
 
+static void
+test_not_writable (void)
+{
+	p11_token *token;
+
+	token = p11_token_new (333, "/", "Label");
+	assert (!p11_token_is_writable (token));
+	p11_token_free (token);
+
+	token = p11_token_new (333, "", "Label");
+	assert (!p11_token_is_writable (token));
+	p11_token_free (token);
+
+	token = p11_token_new (333, "/non-existant", "Label");
+	assert (!p11_token_is_writable (token));
+	p11_token_free (token);
+}
+
+static void
+test_writable_exists (void)
+{
+	char *directory;
+	p11_token *token;
+
+	directory = p11_path_expand ("$TEMP/test-module.XXXXXX");
+	if (!mkdtemp (directory))
+		assert_not_reached ();
+
+	token = p11_token_new (333, directory, "Label");
+
+	/* A writable directory since we created it */
+	assert (p11_token_is_writable (token));
+
+	p11_token_free (token);
+
+	if (rmdir (directory) < 0)
+		assert_not_reached ();
+
+	free (directory);
+}
+
+static void
+test_writable_no_exist (void)
+{
+	char *directory;
+	p11_token *token;
+	char *path;
+
+	directory = p11_path_expand ("$TEMP/test-module.XXXXXX");
+	if (!mkdtemp (directory))
+		assert_not_reached ();
+
+	path = p11_path_build (directory, "subdir", NULL);
+	assert (path != NULL);
+
+	token = p11_token_new (333, path, "Label");
+	free (path);
+
+	/* A writable directory since parent is writable */
+	assert (p11_token_is_writable (token));
+
+	p11_token_free (token);
+
+	if (rmdir (directory) < 0)
+		assert_not_reached ();
+
+	free (directory);
+}
+
 int
 main (int argc,
       char *argv[])
@@ -218,5 +288,11 @@ main (int argc,
 	p11_testx (test_token_path, "/wheee", "/token/path");
 	p11_testx (test_token_label, "/wheee", "/token/label");
 	p11_testx (test_token_slot, "/unneeded", "/token/slot");
+
+	p11_fixture (NULL, NULL);
+	p11_test (test_not_writable, "/token/not-writable");
+	p11_test (test_writable_exists, "/token/writable-exists");
+	p11_test (test_writable_no_exist, "/token/writable-no-exist");
+
 	return p11_test_run (argc, argv);
 }