Blame SOURCES/0041-Ensure-that-files-read-in-have-a-trailing-new-line.patch

a223c4
From c9fce72e17b7afa389205d946e5ca7bef997be60 Mon Sep 17 00:00:00 2001
a223c4
From: Rob Crittenden <rcritten@redhat.com>
a223c4
Date: Wed, 29 Apr 2020 13:26:14 -0400
a223c4
Subject: [PATCH] Ensure that files read in have a trailing new-line
a223c4
a223c4
In SCEP when retrieving the CA chain the certificates passed in
a223c4
on the command-line (RA agent and CA cert) area printed along with
a223c4
the contents of what was retrieved remotely.
a223c4
a223c4
If one of the filesystem certificates lacks a newline then the
a223c4
output will be jumbled like:
a223c4
a223c4
-----END CERTIFICATE----------BEGIN CERTIFICATE-----\n
a223c4
a223c4
https://bugzilla.redhat.com/show_bug.cgi?id=1814976
a223c4
---
a223c4
 src/submit-u.c                  | 11 +++++++
a223c4
 tests/039-fromfile/expected.out |  4 +++
a223c4
 tests/039-fromfile/run.sh       | 55 +++++++++++++++++++++++++++++++++
a223c4
 tests/Makefile.am               | 10 ++++--
a223c4
 tests/tools/Makefile.am         |  6 +++-
a223c4
 tests/tools/fromfile.c          | 52 +++++++++++++++++++++++++++++++
a223c4
 6 files changed, 134 insertions(+), 4 deletions(-)
a223c4
 create mode 100644 tests/039-fromfile/expected.out
a223c4
 create mode 100755 tests/039-fromfile/run.sh
a223c4
 create mode 100644 tests/tools/fromfile.c
a223c4
a223c4
diff --git a/src/submit-u.c b/src/submit-u.c
a223c4
index b0b45ba..dca23a7 100644
a223c4
--- a/src/submit-u.c
a223c4
+++ b/src/submit-u.c
a223c4
@@ -100,6 +100,17 @@ cm_submit_u_from_file(const char *filename)
a223c4
 	}
a223c4
 	if (csr == NULL) {
a223c4
 		csr = strdup("");
a223c4
+	} else {
a223c4
+		int length = strlen(csr);
a223c4
+		if (csr[length-1] != '\n') {
a223c4
+			length += 1;
a223c4
+			csr = realloc(csr, length + 1);
a223c4
+			if (csr == NULL) {
a223c4
+				return NULL;
a223c4
+			}
a223c4
+			csr[length - 1] = '\n';
a223c4
+			csr[length] = '\0';
a223c4
+		}
a223c4
 	}
a223c4
 	return csr;
a223c4
 }
a223c4
diff --git a/tests/039-fromfile/expected.out b/tests/039-fromfile/expected.out
a223c4
new file mode 100644
a223c4
index 0000000..9191a57
a223c4
--- /dev/null
a223c4
+++ b/tests/039-fromfile/expected.out
a223c4
@@ -0,0 +1,4 @@
a223c4
+[trailing_nl]
a223c4
+Ok
a223c4
+[no_trailing_nl]
a223c4
+Ok
a223c4
diff --git a/tests/039-fromfile/run.sh b/tests/039-fromfile/run.sh
a223c4
new file mode 100755
a223c4
index 0000000..8bae773
a223c4
--- /dev/null
a223c4
+++ b/tests/039-fromfile/run.sh
a223c4
@@ -0,0 +1,55 @@
a223c4
+#!/bin/bash -e
a223c4
+
a223c4
+cd $tmpdir
a223c4
+
a223c4
+cat > $tmpdir/trailing_nl <<- EOF
a223c4
+-----BEGIN CERTIFICATE-----
a223c4
+MIIDjjCCAnagAwIBAgIRAO1VmyXYM0f7pbXVdEGtRPMwDQYJKoZIhvcNAQELBQAw
a223c4
+UDEgMB4GA1UEAwwXTG9jYWwgU2lnbmluZyBBdXRob3JpdHkxLDAqBgNVBAMMI2Vk
a223c4
+NTU5YjI1LWQ4MzM0N2ZiLWE1YjVkNTc0LTQxYWQ0NGYzMB4XDTE1MDQyODE3MDk0
a223c4
+OFoXDTE2MDQyODE3MDk0OFowUDEgMB4GA1UEAwwXTG9jYWwgU2lnbmluZyBBdXRo
a223c4
+b3JpdHkxLDAqBgNVBAMMI2VkNTU5YjI1LWQ4MzM0N2ZiLWE1YjVkNTc0LTQxYWQ0
a223c4
+NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c/LhlyBs0UUiDSy
a223c4
+nrC+Q0WJkWZeQ/kqwniru+GlXgb3g+7VvyAfdZ45NiBdo/6xXyCLphK0g8oZLyi8
a223c4
+OwQQoUyVMn9gsGXbjlwSzjXKx3wdUM+lFpenx8iQS9aCfVQJ4tzFgM1pQBQ2AiHs
a223c4
+jvU18xSFSZApjT5UIK35kyH22D8LhCGGYLaU3xFEfHvd0AOuXwm5Nsiu/HTsSV4N
a223c4
+peUdFEmFzQwUEUdV2jKOPcXnOArV82vfpdp1nSCX3kruEb9G93VsmQ+9ebKXQRQE
a223c4
+Ltd65e/EYtXvihuTtElLYuyYZlYJdbTZeLXB4YLvElgNkS9JK7RKHlCm0KYQmcmd
a223c4
+GZSh8QIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQEBMB0GA1UdDgQWBBRLxeFy3+RS
a223c4
+FloygyjlXa6YEv8ltzAfBgNVHSMEGDAWgBRLxeFy3+RSFloygyjlXa6YEv8ltzAO
a223c4
+BgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQADggEBAH9A9ePIqZGF4VEo5D4j
a223c4
+MuOJ1J4uTRxHoEGXCDRcuCn3RvT0civWEPpRNo1YVgAWFODpt/HSi3lCVtTb7FwJ
a223c4
+hfHkxCpAuHmv3sfT8jcCwTTAXL1BLpCO6d0zz0RrFMNK+vGyZu/7LXhaYVu590Q5
a223c4
+1DMybHmln7i+Tw/eYb4Avk1FWGOEpNdf3ZjUazcDlkO4EwA6BnZUC8gFvz0OI73D
a223c4
+AJsGq/UsJvMH30ga1rZ/9LiHEMSEys5amk98yMRvi/R1qI02kjANdZ0ID/7cJSw2
a223c4
+rVCCs61jgYppWv3JHVKYmm6+cVPAUcuRdsUzDpAQDdvGAaZJENE6suulRVEaBEdS
a223c4
+8gM=
a223c4
+-----END CERTIFICATE-----
a223c4
+EOF
a223c4
+cat > $tmpdir/no_trailing_nl <<- EOF
a223c4
+-----BEGIN CERTIFICATE-----
a223c4
+MIIDjjCCAnagAwIBAgIRAO1VmyXYM0f7pbXVdEGtRPMwDQYJKoZIhvcNAQELBQAw
a223c4
+UDEgMB4GA1UEAwwXTG9jYWwgU2lnbmluZyBBdXRob3JpdHkxLDAqBgNVBAMMI2Vk
a223c4
+NTU5YjI1LWQ4MzM0N2ZiLWE1YjVkNTc0LTQxYWQ0NGYzMB4XDTE1MDQyODE3MDk0
a223c4
+OFoXDTE2MDQyODE3MDk0OFowUDEgMB4GA1UEAwwXTG9jYWwgU2lnbmluZyBBdXRo
a223c4
+b3JpdHkxLDAqBgNVBAMMI2VkNTU5YjI1LWQ4MzM0N2ZiLWE1YjVkNTc0LTQxYWQ0
a223c4
+NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c/LhlyBs0UUiDSy
a223c4
+nrC+Q0WJkWZeQ/kqwniru+GlXgb3g+7VvyAfdZ45NiBdo/6xXyCLphK0g8oZLyi8
a223c4
+OwQQoUyVMn9gsGXbjlwSzjXKx3wdUM+lFpenx8iQS9aCfVQJ4tzFgM1pQBQ2AiHs
a223c4
+jvU18xSFSZApjT5UIK35kyH22D8LhCGGYLaU3xFEfHvd0AOuXwm5Nsiu/HTsSV4N
a223c4
+peUdFEmFzQwUEUdV2jKOPcXnOArV82vfpdp1nSCX3kruEb9G93VsmQ+9ebKXQRQE
a223c4
+Ltd65e/EYtXvihuTtElLYuyYZlYJdbTZeLXB4YLvElgNkS9JK7RKHlCm0KYQmcmd
a223c4
+GZSh8QIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQEBMB0GA1UdDgQWBBRLxeFy3+RS
a223c4
+FloygyjlXa6YEv8ltzAfBgNVHSMEGDAWgBRLxeFy3+RSFloygyjlXa6YEv8ltzAO
a223c4
+BgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQADggEBAH9A9ePIqZGF4VEo5D4j
a223c4
+MuOJ1J4uTRxHoEGXCDRcuCn3RvT0civWEPpRNo1YVgAWFODpt/HSi3lCVtTb7FwJ
a223c4
+hfHkxCpAuHmv3sfT8jcCwTTAXL1BLpCO6d0zz0RrFMNK+vGyZu/7LXhaYVu590Q5
a223c4
+1DMybHmln7i+Tw/eYb4Avk1FWGOEpNdf3ZjUazcDlkO4EwA6BnZUC8gFvz0OI73D
a223c4
+AJsGq/UsJvMH30ga1rZ/9LiHEMSEys5amk98yMRvi/R1qI02kjANdZ0ID/7cJSw2
a223c4
+rVCCs61jgYppWv3JHVKYmm6+cVPAUcuRdsUzDpAQDdvGAaZJENE6suulRVEaBEdS
a223c4
+8gM=
a223c4
+EOF
a223c4
+echo -n "-----END CERTIFICATE-----" >> $tmpdir/no_trailing_nl
a223c4
+
a223c4
+$toolsdir/fromfile trailing_nl
a223c4
+$toolsdir/fromfile no_trailing_nl
a223c4
diff --git a/tests/Makefile.am b/tests/Makefile.am
a223c4
index fe368dc..1552c48 100644
a223c4
--- a/tests/Makefile.am
a223c4
+++ b/tests/Makefile.am
a223c4
@@ -127,7 +127,9 @@ CLEANFILES = \
a223c4
 	037-rekey2/actual.out \
a223c4
 	037-rekey2/actual.err \
a223c4
 	038-ms-v2-template/actual.out \
a223c4
-	038-ms-v2-template/actual.err
a223c4
+	038-ms-v2-template/actual.err \
a223c4
+	039-fromfile/actual.out \
a223c4
+	039-fromfile/actual.err
a223c4
 EXTRA_DIST = \
a223c4
 	run-tests.sh functions certmonger.conf tools/cachain.sh \
a223c4
 	001-keyiread/run.sh \
a223c4
@@ -349,7 +351,8 @@ EXTRA_DIST = \
a223c4
 	037-rekey2/run.sh \
a223c4
 	038-ms-v2-template/expected.out \
a223c4
 	038-ms-v2-template/extract-extdata.py \
a223c4
-	038-ms-v2-template/run.sh
a223c4
+	038-ms-v2-template/run.sh \
a223c4
+	039-fromfile/run.sh
a223c4
 
a223c4
 subdirs = \
a223c4
 	001-keyiread \
a223c4
@@ -392,7 +395,8 @@ subdirs = \
a223c4
 	035-json \
a223c4
 	036-getcert \
a223c4
 	037-rekey2 \
a223c4
-	038-ms-v2-template
a223c4
+	038-ms-v2-template \
a223c4
+	039-fromfile
a223c4
 
a223c4
 if HAVE_DBM_NSSDB
a223c4
 subdirs += \
a223c4
diff --git a/tests/tools/Makefile.am b/tests/tools/Makefile.am
a223c4
index 39fa954..e0d2f08 100644
a223c4
--- a/tests/tools/Makefile.am
a223c4
+++ b/tests/tools/Makefile.am
a223c4
@@ -16,7 +16,7 @@ endif
a223c4
 noinst_PROGRAMS = keyiread keygen csrgen submit certread certsave oid2name \
a223c4
 		  name2oid iterate prefs dates listnicks pem2base base2pem \
a223c4
 		  dparse payload checksig base64 cadata citerate casave hooks \
a223c4
-		  libexecdir canon srv addcinfo ls json json-utf8 printenv
a223c4
+		  libexecdir canon srv addcinfo ls json json-utf8 printenv fromfile
a223c4
 noinst_LIBRARIES = libtools.a
a223c4
 if HAVE_OPENSSL
a223c4
 noinst_PROGRAMS += pk7parse pk7env scepgen pk7verify pk7decrypt
a223c4
@@ -38,3 +38,7 @@ citerate_LDADD = $(top_srcdir)/src/store-gen.c $(LDADD)
a223c4
 
a223c4
 srv_SOURCES = srv.c
a223c4
 srv_LDADD = $(top_srcdir)/src/srvloc.c $(LDADD)
a223c4
+
a223c4
+fromfile_CFLAGS = $(AM_CFLAGS) $(CURL_CFLAGS)
a223c4
+fromfile_SOURCES = fromfile.c
a223c4
+fromfile_LDADD = $(LDADD) $(UUID_LIBS) $(CURL_LIBS)
a223c4
diff --git a/tests/tools/fromfile.c b/tests/tools/fromfile.c
a223c4
new file mode 100644
a223c4
index 0000000..bb70507
a223c4
--- /dev/null
a223c4
+++ b/tests/tools/fromfile.c
a223c4
@@ -0,0 +1,52 @@
a223c4
+/*
a223c4
+ * Copyright (C) 2020 Red Hat, Inc.
a223c4
+ * 
a223c4
+ * This program is free software: you can redistribute it and/or modify
a223c4
+ * it under the terms of the GNU General Public License as published by
a223c4
+ * the Free Software Foundation, either version 3 of the License, or
a223c4
+ * (at your option) any later version.
a223c4
+ *
a223c4
+ * This program is distributed in the hope that it will be useful,
a223c4
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
a223c4
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
a223c4
+ * GNU General Public License for more details.
a223c4
+ *
a223c4
+ * You should have received a copy of the GNU General Public License
a223c4
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
a223c4
+ */
a223c4
+
a223c4
+#include "../../src/config.h"
a223c4
+
a223c4
+#include <sys/types.h>
a223c4
+#include <errno.h>
a223c4
+#include <stdlib.h>
a223c4
+#include <stdio.h>
a223c4
+
a223c4
+#include <krb5.h>
a223c4
+
a223c4
+#include "../../src/submit-u.h"
a223c4
+#include "../../src/submit-u.c"
a223c4
+
a223c4
+int
a223c4
+main(int argc, char **argv)
a223c4
+{
a223c4
+	int i, result = 0;
a223c4
+	char *cert;
a223c4
+
a223c4
+	for (i = 1; i < argc; i++) {
a223c4
+		printf("[%s]\n", argv[i]);
a223c4
+		cert = cm_submit_u_from_file(argv[i]);
a223c4
+		if (cert == NULL) {
a223c4
+			printf("OOM error\n");
a223c4
+			result = 1;
a223c4
+		}
a223c4
+		else if (cert[strlen(cert) - 1] != '\n') {
a223c4
+			printf("Missing trailing newline\n");
a223c4
+			result = 1;
a223c4
+		} else {
a223c4
+			printf("Ok\n");
a223c4
+		}
a223c4
+		free(cert);
a223c4
+	}
a223c4
+	return result;
a223c4
+}
a223c4
-- 
a223c4
2.18.4
a223c4