04-retain-check-source-persist.py 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105
  1. #!/usr/bin/env python3
  2. # Test for CVE-2018-12546, with the broker being stopped to write the persistence file.
  3. from mosq_test_helper import *
  4. import signal
  5. def write_config(filename, port, per_listener):
  6. with open(filename, 'w') as f:
  7. f.write("per_listener_settings %s\n" % (per_listener))
  8. f.write("check_retain_source true\n")
  9. f.write("port %d\n" % (port))
  10. f.write("allow_anonymous true\n")
  11. f.write("acl_file %s\n" % (filename.replace('.conf', '.acl')))
  12. f.write("persistence true\n")
  13. f.write("persistence_file %s\n" % (filename.replace('.conf', '.db')))
  14. def write_acl_1(filename, username):
  15. with open(filename, 'w') as f:
  16. if username is not None:
  17. f.write('user %s\n' % (username))
  18. f.write('topic readwrite test/topic\n')
  19. def write_acl_2(filename, username):
  20. with open(filename, 'w') as f:
  21. if username is not None:
  22. f.write('user %s\n' % (username))
  23. f.write('topic read test/topic\n')
  24. def do_test(proto_ver, per_listener, username):
  25. conf_file = os.path.basename(__file__).replace('.py', '.conf')
  26. write_config(conf_file, port, per_listener)
  27. persistence_file = os.path.basename(__file__).replace('.py', '.db')
  28. try:
  29. os.remove(persistence_file)
  30. except OSError:
  31. pass
  32. acl_file = os.path.basename(__file__).replace('.py', '.acl')
  33. write_acl_1(acl_file, username)
  34. rc = 1
  35. keepalive = 60
  36. connect_packet = mosq_test.gen_connect("retain-check", keepalive=keepalive, username=username, proto_ver=proto_ver)
  37. connack_packet = mosq_test.gen_connack(rc=0, proto_ver=proto_ver)
  38. mid = 1
  39. publish_packet = mosq_test.gen_publish("test/topic", qos=0, payload="retained message", retain=True, proto_ver=proto_ver)
  40. subscribe_packet = mosq_test.gen_subscribe(mid, "test/topic", 0, proto_ver=proto_ver)
  41. suback_packet = mosq_test.gen_suback(mid, 0, proto_ver=proto_ver)
  42. broker = mosq_test.start_broker(filename=os.path.basename(__file__), use_conf=True, port=port)
  43. try:
  44. sock = mosq_test.do_client_connect(connect_packet, connack_packet, port=port)
  45. sock.send(publish_packet)
  46. sock.close()
  47. sock = mosq_test.do_client_connect(connect_packet, connack_packet, port=port)
  48. mosq_test.do_send_receive(sock, subscribe_packet, suback_packet, "suback 1")
  49. mosq_test.expect_packet(sock, "publish", publish_packet)
  50. sock.close()
  51. # Remove "write" ability
  52. write_acl_2(acl_file, username)
  53. broker.terminate()
  54. broker.wait()
  55. broker = mosq_test.start_broker(filename=os.path.basename(__file__), use_conf=True, port=port)
  56. sock = mosq_test.do_client_connect(connect_packet, connack_packet, port=port)
  57. mosq_test.do_send_receive(sock, subscribe_packet, suback_packet, "suback 2")
  58. # If we receive the retained message here, it is a failure.
  59. mosq_test.do_ping(sock)
  60. rc = 0
  61. sock.close()
  62. except mosq_test.TestError:
  63. pass
  64. finally:
  65. broker.terminate()
  66. broker.wait()
  67. os.remove(conf_file)
  68. os.remove(acl_file)
  69. os.remove(persistence_file)
  70. (stdo, stde) = broker.communicate()
  71. if rc:
  72. print(stde.decode('utf-8'))
  73. exit(rc)
  74. port = mosq_test.get_port()
  75. do_test(proto_ver=4, per_listener="true", username=None)
  76. do_test(proto_ver=4, per_listener="true", username="test")
  77. do_test(proto_ver=4, per_listener="false", username=None)
  78. do_test(proto_ver=4, per_listener="false", username="test")
  79. do_test(proto_ver=5, per_listener="true", username=None)
  80. do_test(proto_ver=5, per_listener="true", username="test")
  81. do_test(proto_ver=5, per_listener="false", username=None)
  82. do_test(proto_ver=5, per_listener="false", username="test")