security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-04-17 15:44:34 +02:00
Code Activity

g10: Fix opening of trust database.

Browse Source 
* g10/tdbio.c (tdbio_set_dbname): This function explicitly checks for
the file size, but handled the case of a zero-sized file incorrectly
by returning success.  Fix this by initializing the database in that
case.
* tests/openpgp/Makefile.am (XTESTS): Add new test.
* tests/openpgp/issue2417.scm: New file.

GnuPG-bug-id: 2417
Signed-off-by: Justus Winter <justus@g10code.com>
This commit is contained in:
Justus Winter 2016-08-10 16:41:22 +02:00
parent 194b1e979c
commit a27410a251
3 changed files with 42 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
g10/tdbio.c
View File

@ -685,7 +685,7 @@ tdbio_set_dbname (const char *new_dbname, int create, int *r_nofile)
take_write_lock (); take_write_lock ();
if (access (fname, R_OK)) if (access (fname, R_OK) || stat (fname, &statbuf) || statbuf.st_size == 0)
{ {
FILE *fp; FILE *fp;
TRUSTREC rec; TRUSTREC rec;
@ -699,7 +699,7 @@ tdbio_set_dbname (const char *new_dbname, int create, int *r_nofile)
else else
gpg_err_set_errno (EIO); gpg_err_set_errno (EIO);
#endif /*HAVE_W32CE_SYSTEM*/ #endif /*HAVE_W32CE_SYSTEM*/
if (errno != ENOENT) if (errno && errno != ENOENT)
log_fatal ( _("can't access '%s': %s\n"), fname, strerror (errno)); log_fatal ( _("can't access '%s': %s\n"), fname, strerror (errno));
oldmask = umask (077); oldmask = umask (077);

1
tests/openpgp/Makefile.am
View File

@ -84,6 +84,7 @@ XTESTS = \
ssh.scm \ ssh.scm \
issue2015.scm \ issue2015.scm \
issue2346.scm \ issue2346.scm \
issue2417.scm \
issue2419.scm issue2419.scm
# XXX: Currently, one cannot override automake's 'check' target. As a # XXX: Currently, one cannot override automake's 'check' target. As a

39
tests/openpgp/issue2417.scm Executable file
View File

@ -0,0 +1,39 @@
#!/usr/bin/env gpgscm
;; Copyright (C) 2016 g10 Code GmbH
;;
;; This file is part of GnuPG.
;;
;; GnuPG is free software; you can redistribute it and/or modify
;; it under the terms of the GNU General Public License as published by
;; the Free Software Foundation; either version 3 of the License, or
;; (at your option) any later version.
;;
;; GnuPG is distributed in the hope that it will be useful,
;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
;; GNU General Public License for more details.
;;
;; You should have received a copy of the GNU General Public License
;; along with this program; if not, see <http://www.gnu.org/licenses/>.
(load (with-path "defs.scm"))
(define (touch file-name)
(close (open file-name (logior O_WRONLY O_BINARY O_CREAT) #o600)))
(info "Checking robustness wrt empty databases in gnupghome (issue2417)...")
(lettmp
;; Prepare some random key to import later.
(keyfile)
(pipe:do
(pipe:gpg '(--export alpha))
(pipe:write-to keyfile (logior O_WRONLY O_BINARY O_CREAT) #o600))
(with-temporary-working-directory
(setenv "GNUPGHOME" "." #t)
(touch "trustdb.gpg")
(touch "pubring.gpg")
(touch "pubring.kbx")
(call-check `(,(tool 'GPG) --import ,keyfile))))