From cffc98780414760c8d5f751c5841856b3207cce3 Mon Sep 17 00:00:00 2001 From: Zooko O'Whielacronx Date: Mon, 12 Sep 2011 15:12:01 -0700 Subject: [PATCH] immutable: test whether the server allows clients to read past the end of share data, which would allow them to learn the cancellation secret Also test whether the server explicitly declares that it prevents this problem. ref #1528 --- src/allmydata/test/test_storage.py | 54 ++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) diff --git a/src/allmydata/test/test_storage.py b/src/allmydata/test/test_storage.py index 2765a913..ff413e63 100644 --- a/src/allmydata/test/test_storage.py +++ b/src/allmydata/test/test_storage.py @@ -106,6 +106,54 @@ class Bucket(unittest.TestCase): self.failUnlessEqual(br.remote_read(25, 25), "b"*25) self.failUnlessEqual(br.remote_read(50, 7), "c"*7) + def test_read_past_end_of_share_data(self): + # test vector for immutable files (hard-coded contents of an immutable share + # file): + + # The following immutable share file content is identical to that + # generated with storage.immutable.ShareFile from Tahoe-LAFS v1.8.2 + # with share data == 'a'. The total size of this content is 85 + # bytes. + + containerdata = struct.pack('>LLL', 1, 1, 1) + + # A Tahoe-LAFS storage client would send as the share_data a + # complicated string involving hash trees and a URI Extension Block + # -- see allmydata/immutable/layout.py . This test, which is + # simulating a client, just sends 'a'. + share_data = 'a' + + ownernumber = struct.pack('>L', 0) + renewsecret = 'THIS LETS ME RENEW YOUR FILE....' + assert len(renewsecret) == 32 + cancelsecret = 'THIS LETS ME KILL YOUR FILE HAHA' + assert len(cancelsecret) == 32 + expirationtime = struct.pack('>L', 60*60*24*31) # 31 days in seconds + + lease_data = ownernumber + renewsecret + cancelsecret + expirationtime + + share_file_data = containerdata + share_data + lease_data + + incoming, final = self.make_workdir("test_read_past_end_of_share_data") + + fileutil.write(final, share_file_data) + + mockstorageserver = mock.Mock() + + # Now read from it. + br = BucketReader(mockstorageserver, final) + + self.failUnlessEqual(br.remote_read(0, len(share_data)), share_data) + + # Read past the end of share data to get the cancel secret. + read_length = len(share_data) + len(ownernumber) + len(renewsecret) + len(cancelsecret) + + result_of_read = br.remote_read(0, read_length) + self.failUnlessEqual(result_of_read, share_data) + + result_of_read = br.remote_read(0, len(share_data)+1) + self.failUnlessEqual(result_of_read, share_data) + class RemoteBucket: def __init__(self): @@ -271,6 +319,12 @@ class Server(unittest.TestCase): def test_create(self): self.create("test_create") + def test_declares_fixed_1528(self): + ss = self.create("test_declares_fixed_1528") + ver = ss.remote_get_version() + sv1 = ver['http://allmydata.org/tahoe/protocols/storage/v1'] + self.failUnless(sv1.get('prevents-read-past-end-of-share-data'), sv1) + def allocate(self, ss, storage_index, sharenums, size, canary=None): renew_secret = hashutil.tagged_hash("blah", "%d" % self._lease_secret.next()) cancel_secret = hashutil.tagged_hash("blah", "%d" % self._lease_secret.next()) -- 2.45.2