1  /*
       2   * Redistribution and use in source and binary forms, with or without
       3   * modification, are permitted provided that the following conditions
       4   * are met:
       5   * 1. Redistributions of source code must retain the above copyright
       6   *    notice, and the entire permission notice in its entirety,
       7   *    including the disclaimer of warranties.
       8   * 2. Redistributions in binary form must reproduce the above copyright
       9   *    notice, this list of conditions and the following disclaimer in the
      10   *    documentation and/or other materials provided with the distribution.
      11   * 3. The name of the author may not be used to endorse or promote
      12   *    products derived from this software without specific prior
      13   *    written permission.
      14   *
      15   * ALTERNATIVELY, this product may be distributed under the terms of
      16   * the GNU Public License, in which case the provisions of the GPL are
      17   * required INSTEAD OF the above restrictions.  (This clause is
      18   * necessary due to a potential bad interaction between the GPL and
      19   * the restrictions contained in a BSD-style copyright.)
      20   *
      21   * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
      22   * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
      23   * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
      24   * DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
      25   * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
      26   * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
      27   * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
      28   * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
      29   * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
      30   * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
      31   * OF THE POSSIBILITY OF SUCH DAMAGE.
      32   */
      33  
      34  /*
      35   * Test case: '!!' as password should not allow login
      36   */
      37  
      38  #ifdef HAVE_CONFIG_H
      39  #include <config.h>
      40  #endif
      41  
      42  #include <stdio.h>
      43  #include <stdlib.h>
      44  #include <string.h>
      45  #include <security/pam_appl.h>
      46  
      47  /* A conversation function which uses an internally-stored value for
      48     the responses. */
      49  static int
      50  fake_conv (int num_msg, const struct pam_message **msgm UNUSED,
      51  	   struct pam_response **response, void *appdata_ptr UNUSED)
      52  {
      53    struct pam_response *reply;
      54    int count;
      55  
      56    /* Sanity test. */
      57    if (num_msg <= 0)
      58      return PAM_CONV_ERR;
      59  
      60    /* Allocate memory for the responses. */
      61    reply = calloc (num_msg, sizeof (struct pam_response));
      62    if (reply == NULL)
      63      return PAM_CONV_ERR;
      64  
      65    /* Each prompt elicits the same response. */
      66    for (count = 0; count < num_msg; ++count)
      67      {
      68        reply[count].resp_retcode = 0;
      69        reply[count].resp = strdup ("!!");
      70      }
      71  
      72    /* Set the pointers in the response structure and return. */
      73    *response = reply;
      74    return PAM_SUCCESS;
      75  }
      76  
      77  static struct pam_conv conv = {
      78      fake_conv,
      79      NULL
      80  };
      81  
      82  
      83  /* Check that errors of optional modules are ignored and that
      84     required modules after a sufficient one are not executed.  */
      85  
      86  int
      87  main(int argc, char *argv[])
      88  {
      89    pam_handle_t *pamh=NULL;
      90    const char *user="tstpamunix";
      91    int retval;
      92    int debug = 0;
      93  
      94    if (argc > 1 && strcmp (argv[1], "-d") == 0)
      95      debug = 1;
      96  
      97    retval = pam_start("tst-pam_unix1", user, &conv, &pamh);
      98    if (retval != PAM_SUCCESS)
      99      {
     100        if (debug)
     101  	fprintf (stderr, "pam_unix1: pam_start returned %d\n", retval);
     102        return 1;
     103      }
     104  
     105    /* !! as password should not allow login */
     106    retval = pam_authenticate (pamh, 0);
     107    if (retval != PAM_AUTH_ERR)
     108      {
     109        if (debug)
     110  	fprintf (stderr, "pam_unix1: pam_authenticate returned %d\n", retval);
     111        return 1;
     112      }
     113  
     114    retval = pam_end (pamh,retval);
     115    if (retval != PAM_SUCCESS)
     116      {
     117        if (debug)
     118  	fprintf (stderr, "pam_unix1: pam_end returned %d\n", retval);
     119        return 1;
     120      }
     121    return 0;
     122  }