![Ingo Klöcker](/assets/img/avatar_default.png)
* src/decrypt.c (_gpgme_decrypt_status_handler): Ignore received failure code if we already have a specific failure code. * src/encrypt.c (_gpgme_encrypt_status_handler): Ditto. * src/export.c (export_status_handler): Ditto. * src/genkey.c (genkey_status_handler): Ditto. * src/keylist.c (keylist_status_handler): Ditto. * src/keysign.c (keysign_status_handler): Ditto. * src/passwd.c (passwd_status_handler): Ditto. * src/revsig.c (revsig_status_handler): Ditto. * src/setexpire.c (setexpire_status_handler): Ditto. * src/sign.c (_gpgme_sign_status_handler): Ditto. * src/tofupolicy.c (tofu_policy_status_handler): Ditto. * src/verify.c (_gpgme_verify_status_handler): Ditto. -- Usually, a process emits at most one failure code. But some operations like the creation of an encrypted archive involve multiple chained processes, so that multiple failure codes can be received. We want to keep the first specific failure code we received. Further failure codes are only parsed if we received just an unspecific "general error" so far. GnuPG-bug-id: 6575
188 lines
4.3 KiB
C
188 lines
4.3 KiB
C
/* tofupolicy.c - Tofu policy helpers.
|
||
* Copyright (C) 2016 g10 Code GmbH
|
||
*
|
||
* This file is part of GPGME.
|
||
*
|
||
* GPGME is free software; you can redistribute it and/or modify it
|
||
* under the terms of the GNU Lesser General Public License as
|
||
* published by the Free Software Foundation; either version 2.1 of
|
||
* the License, or (at your option) any later version.
|
||
*
|
||
* GPGME is distributed in the hope that it will be useful, but
|
||
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||
* Lesser General Public License for more details.
|
||
*
|
||
* You should have received a copy of the GNU Lesser General Public
|
||
* License along with this program; if not, see <https://gnu.org/licenses/>.
|
||
* SPDX-License-Identifier: LGPL-2.1-or-later
|
||
*/
|
||
|
||
#if HAVE_CONFIG_H
|
||
#include <config.h>
|
||
#endif
|
||
#include <stdlib.h>
|
||
|
||
#include "gpgme.h"
|
||
#include "debug.h"
|
||
#include "context.h"
|
||
#include "ops.h"
|
||
|
||
|
||
typedef struct
|
||
{
|
||
/* The error code from a FAILURE status line or 0. */
|
||
gpg_error_t failure_code;
|
||
|
||
/* The error code from an ERROR status line or 0. */
|
||
gpg_error_t error_code;
|
||
|
||
} *op_data_t;
|
||
|
||
|
||
|
||
/* Parse an error status line. Return the error location and the
|
||
error code. The function may modify ARGS. */
|
||
static char *
|
||
parse_error (char *args, gpg_error_t *r_err)
|
||
{
|
||
char *where = strchr (args, ' ');
|
||
char *which;
|
||
|
||
if (where)
|
||
{
|
||
*where = '\0';
|
||
which = where + 1;
|
||
|
||
where = strchr (which, ' ');
|
||
if (where)
|
||
*where = '\0';
|
||
|
||
where = args;
|
||
}
|
||
else
|
||
{
|
||
*r_err = trace_gpg_error (GPG_ERR_INV_ENGINE);
|
||
return NULL;
|
||
}
|
||
|
||
*r_err = atoi (which);
|
||
|
||
return where;
|
||
}
|
||
|
||
|
||
static gpgme_error_t
|
||
tofu_policy_status_handler (void *priv, gpgme_status_code_t code, char *args)
|
||
{
|
||
gpgme_ctx_t ctx = (gpgme_ctx_t) priv;
|
||
gpgme_error_t err;
|
||
void *hook;
|
||
op_data_t opd;
|
||
char *loc;
|
||
|
||
err = _gpgme_op_data_lookup (ctx, OPDATA_TOFU_POLICY, &hook, -1, NULL);
|
||
opd = hook;
|
||
if (err)
|
||
return err;
|
||
|
||
switch (code)
|
||
{
|
||
case GPGME_STATUS_ERROR:
|
||
loc = parse_error (args, &err);
|
||
if (!loc)
|
||
return err;
|
||
if (!opd->error_code)
|
||
opd->error_code = err;
|
||
break;
|
||
|
||
case GPGME_STATUS_FAILURE:
|
||
if (!opd->failure_code
|
||
|| gpg_err_code (opd->failure_code) == GPG_ERR_GENERAL)
|
||
opd->failure_code = _gpgme_parse_failure (args);
|
||
break;
|
||
|
||
case GPGME_STATUS_EOF:
|
||
if (opd->error_code)
|
||
err = opd->error_code;
|
||
else if (opd->failure_code)
|
||
err = opd->failure_code;
|
||
break;
|
||
|
||
default:
|
||
break;
|
||
}
|
||
|
||
return err;
|
||
}
|
||
|
||
|
||
/* Set the TOFU policy for KEY to POLICY. */
|
||
static gpgme_error_t
|
||
tofu_policy_start (gpgme_ctx_t ctx, int synchronous,
|
||
gpgme_key_t key, gpgme_tofu_policy_t policy)
|
||
{
|
||
gpgme_error_t err;
|
||
void *hook;
|
||
op_data_t opd;
|
||
|
||
if (ctx->protocol != GPGME_PROTOCOL_OPENPGP)
|
||
return gpgme_error (GPG_ERR_UNSUPPORTED_PROTOCOL);
|
||
|
||
if (!key)
|
||
return gpg_error (GPG_ERR_INV_VALUE);
|
||
|
||
err = _gpgme_op_reset (ctx, synchronous);
|
||
if (err)
|
||
return err;
|
||
|
||
err = _gpgme_op_data_lookup (ctx, OPDATA_TOFU_POLICY, &hook,
|
||
sizeof (*opd), NULL);
|
||
opd = hook;
|
||
if (err)
|
||
return err;
|
||
|
||
_gpgme_engine_set_status_handler (ctx->engine, tofu_policy_status_handler,
|
||
ctx);
|
||
|
||
return _gpgme_engine_op_tofu_policy (ctx->engine, key, policy);
|
||
}
|
||
|
||
|
||
|
||
/* Set the TOFU policy of KEY to POLCIY. This is the asynchronous
|
||
* variant. */
|
||
gpgme_error_t
|
||
gpgme_op_tofu_policy_start (gpgme_ctx_t ctx,
|
||
gpgme_key_t key, gpgme_tofu_policy_t policy)
|
||
{
|
||
gpg_error_t err;
|
||
TRACE_BEG (DEBUG_CTX, "gpgme_op_tofu_policy_start", ctx,
|
||
"key=%p, policy=%u", key, (unsigned int)policy);
|
||
|
||
if (!ctx)
|
||
return TRACE_ERR (gpg_error (GPG_ERR_INV_VALUE));
|
||
|
||
err = tofu_policy_start (ctx, 0, key, policy);
|
||
return TRACE_ERR (err);
|
||
}
|
||
|
||
|
||
/* This is the synchronous variant of gpgme_op_tofu_policy_start. */
|
||
gpgme_error_t
|
||
gpgme_op_tofu_policy (gpgme_ctx_t ctx,
|
||
gpgme_key_t key, gpgme_tofu_policy_t policy)
|
||
{
|
||
gpgme_error_t err;
|
||
TRACE_BEG (DEBUG_CTX, "gpgme_op_tofu_policy", ctx,
|
||
"key=%p, policy=%u", key, (unsigned int)policy);
|
||
|
||
if (!ctx)
|
||
return TRACE_ERR (gpg_error (GPG_ERR_INV_VALUE));
|
||
|
||
err = tofu_policy_start (ctx, 1, key, policy);
|
||
if (!err)
|
||
err = _gpgme_wait_one (ctx);
|
||
return TRACE_ERR (err);
|
||
}
|