/*
 * Test Infrastructure around dbus-broker
 */

#undef NDEBUG
#include <c-stdaux.h>
#include <pthread.h>
#include <signal.h>
#include <stdlib.h>
#include <sys/prctl.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <sys/un.h>
#include <sys/wait.h>
#include <systemd/sd-bus.h>
#include <systemd/sd-event.h>
#include "dbus/protocol.h"
#include "util/syscall.h"
#include "util-broker.h"

void util_event_new(sd_event **eventp) {
        _c_cleanup_(sd_event_unrefp) sd_event *event = NULL;
        sigset_t sigold;
        int r;

        r = sd_event_default(&event);
        c_assert(r >= 0);

        pthread_sigmask(SIG_BLOCK, NULL, &sigold);
        c_assert(sigismember(&sigold, SIGCHLD) == 1);
        c_assert(sigismember(&sigold, SIGUSR1) == 1);

        *eventp = event;
        event = NULL;
}

static int util_event_sigchld(sd_event_source *source, const siginfo_t *si, void *userdata) {
        int status;

        if (si->si_code == CLD_EXITED)
                status = si->si_status;
        else if (si->si_code == CLD_KILLED && si->si_status == SIGTERM)
                status = EXIT_SUCCESS;
        else
                status = EXIT_FAILURE;

        return sd_event_exit(sd_event_source_get_event(source), status);
}

#define POLICY_T_BATCH                                                          \
                "bt"                                                            \
                "a(btbs)"                                                       \
                "a(btssssuutt)"                                                 \
                "a(btssssuutt)"

#define POLICY_T                                                                \
                "a(u(" POLICY_T_BATCH "))"                                      \
                "a(buu(" POLICY_T_BATCH "))"                                    \
                "a(ss)"                                                         \
                "bs"

static int util_append_policy(sd_bus_message *m) {
        int r;

        r = sd_bus_message_open_container(m, 'v', "(" POLICY_T ")");
        c_assert(r >= 0);

        r = sd_bus_message_open_container(m, 'r', POLICY_T);
        c_assert(r >= 0);

        /* per-uid batches */
        {
                r = sd_bus_message_open_container(m, 'a', "(u(" POLICY_T_BATCH "))");
                c_assert(r >= 0);

                r = sd_bus_message_open_container(m, 'r', "u(" POLICY_T_BATCH ")");
                c_assert(r >= 0);

                /* Fall-back UID */
                r = sd_bus_message_append(m, "u", (uint32_t)-1);
                c_assert(r >= 0);

                r = sd_bus_message_open_container(m, 'r', POLICY_T_BATCH);
                c_assert(r >= 0);

                /*
                 * Default test policy:
                 *  - allow all connections
                 *  - allow everyone to own names
                 *  - allow all sends
                 *  - allow all recvs
                 */
                r = sd_bus_message_append(m,
                                          "bt" "a(btbs)" "a(btssssuutt)" "a(btssssuutt)",
                                          true, UINT64_C(1),
                                          1, true, UINT64_C(1), true, "",
                                          1, true, UINT64_C(1), "", "", "", "", 0, 0, UINT64_C(0), UINT64_MAX,
                                          1, true, UINT64_C(1), "", "", "", "", 0, 0, UINT64_C(0), UINT64_MAX);
                c_assert(r >= 0);

                r = sd_bus_message_close_container(m);
                c_assert(r >= 0);

                r = sd_bus_message_close_container(m);
                c_assert(r >= 0);

                r = sd_bus_message_close_container(m);
                c_assert(r >= 0);
        }

        /* per-gid and uid-range batches */
        {
                r = sd_bus_message_open_container(m, 'a', "(buu(" POLICY_T_BATCH "))");
                c_assert(r >= 0);

                r = sd_bus_message_close_container(m);
                c_assert(r >= 0);
        }

        /* empty SELinux policy */
        {
                r = sd_bus_message_open_container(m, 'a', "(ss)");
                c_assert(r >= 0);

                r = sd_bus_message_close_container(m);
                c_assert(r >= 0);
        }

        /* disable AppArmor */
        {
                r = sd_bus_message_append(m, "b", false);
                c_assert(r >= 0);
        }

        /* mark as session bus */
        {
                r = sd_bus_message_append(m, "s", "session");
                c_assert(r >= 0);
        }

        r = sd_bus_message_close_container(m);
        c_assert(r >= 0);

        r = sd_bus_message_close_container(m);
        c_assert(r >= 0);

        return 0;
}

static int util_method_reload_config(sd_bus_message *message, void *userdata, sd_bus_error *error) {
        sd_bus *bus;
        _c_cleanup_(sd_bus_message_unrefp) sd_bus_message *message2 = NULL;
        int r;

        bus = sd_bus_message_get_bus(message);

        r = sd_bus_message_new_method_call(bus,
                                           &message2,
                                           NULL,
                                           "/org/bus1/DBus/Listener/0",
                                           "org.bus1.DBus.Listener",
                                           "SetPolicy");
        c_assert(r >= 0);

        r = util_append_policy(message2);
        c_assert(r >= 0);

        r = sd_bus_call(bus, message2, -1, NULL, NULL);
        c_assert(r >= 0);

        return sd_bus_reply_method_return(message, NULL);
}

const sd_bus_vtable util_vtable[] = {
        SD_BUS_VTABLE_START(0),

        SD_BUS_METHOD("ReloadConfig", NULL, NULL, util_method_reload_config, 0),

        SD_BUS_VTABLE_END
};

void util_fork_broker(sd_bus **busp, sd_event *event, int listener_fd, pid_t *pidp) {
        _c_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
        _c_cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
        _c_cleanup_(c_freep) char *fdstr = NULL;
        int r, pair[2];
        pid_t pid;

        r = socketpair(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK | SOCK_CLOEXEC, 0, pair);
        c_assert(r >= 0);

        pid = fork();
        c_assert(pid >= 0);
        c_close(pair[!!pid]);

        if (pid == 0) {
                /* clear the FD_CLOEXEC flag */
                r = fcntl(pair[1], F_GETFD);
                c_assert(r >= 0);
                r = fcntl(pair[1], F_SETFD, r & ~FD_CLOEXEC);
                c_assert(r >= 0);

                r = asprintf(&fdstr, "%d", pair[1]);
                c_assert(r >= 0);

                r = execl("./src/dbus-broker",
                          "./src/dbus-broker",
                          "--controller", fdstr,
                          "--machine-id", "0123456789abcdef0123456789abcdef",
                          "--max-matches", "1000000",
                          "--max-objects", "1000000",
                          "--max-bytes", "1000000000",
                          (char *)NULL);
                /* execl(2) only returns on error */
                c_assert(r >= 0);
                abort();
        }

        /* remember the daemon's pid */
        if (pidp)
                *pidp = pid;

        r = sd_event_add_child(event, NULL, pid, WEXITED, util_event_sigchld, NULL);
        c_assert(r >= 0);

        r = sd_bus_new(&bus);
        c_assert(r >= 0);

        /* consumes the fd */
        r = sd_bus_set_fd(bus, pair[0], pair[0]);
        c_assert(r >= 0);

        r = sd_bus_attach_event(bus, event, SD_EVENT_PRIORITY_NORMAL);
        c_assert(r >= 0);

        r = sd_bus_add_object_vtable(bus, NULL, "/org/bus1/DBus/Controller", "org.bus1.DBus.Controller", util_vtable, NULL);
        c_assert(r >= 0);

        r = sd_bus_start(bus);
        c_assert(r >= 0);

        r = sd_bus_message_new_method_call(bus,
                                           &message,
                                           NULL,
                                           "/org/bus1/DBus/Broker",
                                           "org.bus1.DBus.Broker",
                                           "AddListener");
        c_assert(r >= 0);

        r = sd_bus_message_append(message,
                                  "oh",
                                  "/org/bus1/DBus/Listener/0",
                                  listener_fd);
        c_assert(r >= 0);

        r = util_append_policy(message);
        c_assert(r >= 0);

        r = sd_bus_call(bus, message, -1, NULL, NULL);
        c_assert(r >= 0);

        *busp = bus;
        bus = NULL;
}

void util_fork_daemon(sd_event *event, int pipe_fd, pid_t *pidp) {
        static const char *config =
                "<!DOCTYPE busconfig PUBLIC "
                "\"-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN\" "
                "\"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd\">\n"
                "<busconfig>\n"
                "  <auth>EXTERNAL</auth>\n"
                "  <listen>unix:tmpdir=/tmp</listen>\n"
                "  <policy context=\"default\">\n"
                "    <allow user=\"*\"/>\n"
                "    <allow send_destination=\"*\" eavesdrop=\"true\"/>\n"
                "    <allow receive_sender=\"*\" eavesdrop=\"true\"/>\n"
                "    <allow own=\"*\"/>\n"
                "  </policy>\n"
                "  <limit name=\"max_completed_connections\">1000000</limit>\n"
                "  <limit name=\"max_incomplete_connections\">1000000</limit>\n"
                "  <limit name=\"max_connections_per_user\">1000000</limit>\n"
                "  <limit name=\"max_pending_service_starts\">1000000</limit>\n"
                "  <limit name=\"max_names_per_connection\">1000000</limit>\n"
                "  <limit name=\"max_match_rules_per_connection\">1000000</limit>\n"
                "  <limit name=\"max_replies_per_connection\">1000000</limit>\n"
                "</busconfig>\n";
        _c_cleanup_(c_freep) char *fdstr = NULL, *path = NULL;
        const char *bin;
        ssize_t n;
        int r, fd;
        pid_t pid;

        pid = fork();
        c_assert(pid >= 0);

        if (pid == 0) {
                /* make dbus-daemon(1) die if we do */
                r = prctl(PR_SET_PDEATHSIG, SIGTERM);
                c_assert(!r);

                /* clear the FD_CLOEXEC flag */
                r = fcntl(pipe_fd, F_GETFD);
                c_assert(r >= 0);
                r = fcntl(pipe_fd, F_SETFD, r & ~FD_CLOEXEC);
                c_assert(r >= 0);

                /* write config into memfd (don't set MFD_CLOEXEC) */
                fd = syscall_memfd_create("dbus-daemon-config-file", 0);
                c_assert(fd >= 0);
                n = write(fd, config, strlen(config));
                c_assert(n == (ssize_t)strlen(config));

                /* prepare argv parameters */
                r = asprintf(&path, "--config-file=/proc/self/fd/%d", fd);
                c_assert(r >= 0);
                r = asprintf(&fdstr, "--print-address=%d", pipe_fd);
                c_assert(r >= 0);

                /* exec dbus-daemon */
                bin = getenv("DBUS_BROKER_TEST_DAEMON") ?: "/usr/bin/dbus-daemon";
                r = execl(bin,
                          bin,
                          path,
                          fdstr,
                          (char *)NULL);
                /* execl(3) only returns on failure */
                c_assert(r >= 0);
                abort();
        }

        /* remember the daemon's pid */
        if (pidp)
                *pidp = pid;

        /* monitor the daemon process */
        r = sd_event_add_child(event, NULL, pid, WEXITED, util_event_sigchld, NULL);
        c_assert(r >= 0);
}

void util_broker_new(Broker **brokerp) {
        _c_cleanup_(util_broker_freep) Broker *broker = NULL;

        broker = calloc(1, sizeof(*broker));
        c_assert(broker);

        *broker = (Broker)BROKER_NULL;

        *brokerp = broker;
        broker = NULL;
}

Broker *util_broker_free(Broker *broker) {
        if (!broker)
                return NULL;

        c_assert(broker->listener_fd < 0);
        c_assert(broker->pipe_fds[0] < 0);
        c_assert(broker->pipe_fds[1] < 0);

        free(broker);

        return NULL;
}

static int util_event_sigusr1(sd_event_source *source, const struct signalfd_siginfo *ssi, void *userdata) {
        Broker *broker = userdata;
        int r;

        r = kill(broker->child_pid, SIGTERM);
        c_assert(!r);

        return 0;
}

static void *util_broker_thread(void *userdata) {
        _c_cleanup_(sd_event_unrefp) sd_event *event = NULL;
        _c_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
        Broker *broker = userdata;
        int r;

        c_assert(broker->pipe_fds[0] >= 0);
        c_assert(broker->pipe_fds[1] >= 0);

        util_event_new(&event);

        r = sd_event_add_signal(event, NULL, SIGUSR1, util_event_sigusr1, broker);
        c_assert(r >= 0);

        if (broker->listener_fd >= 0) {
                util_fork_broker(&bus, event, broker->listener_fd, &broker->child_pid);
                /* dbus-broker reports its controller in GetConnectionUnixProcessID */
                broker->pid = getpid();
                broker->listener_fd = c_close(broker->listener_fd);
        } else {
                c_assert(broker->listener_fd < 0);
                util_fork_daemon(event, broker->pipe_fds[1], &broker->child_pid);
                /* dbus-daemon reports itself in GetConnectionUnixProcessID */
                broker->pid = broker->child_pid;
        }

        broker->pipe_fds[1] = c_close(broker->pipe_fds[1]);

        r = sd_event_loop(event);
        c_assert(r >= 0);

        broker->pipe_fds[0] = c_close(broker->pipe_fds[0]);
        return (void *)(uintptr_t)r;
}

void util_broker_spawn(Broker *broker) {
        char buffer[PIPE_BUF + 1] = {};
        sigset_t signew, sigold;
        ssize_t n;
        char *e;
        int r;

        c_assert(broker->listener_fd < 0);
        c_assert(broker->pipe_fds[0] < 0);
        c_assert(broker->pipe_fds[1] < 0);

        /*
         * Lets make sure we exit if our parent does. We are a test-runner, so
         * this should be enforced by our environment, but sadly it isn't. So
         * lets use this hack to enforce it everywhere and cleanup properly.
         */
        r = prctl(PR_SET_PDEATHSIG, SIGTERM);
        c_assert(!r);

        /*
         * SIGCHLD signal delivery is non-deterministic in thread-groups.
         * Hence, we must block SIGCHLD in *all* threads if we want to reliably
         * catch broker-deaths via sd_event_add_child(). Lets just enforce this
         * here.
         */
        sigemptyset(&signew);
        sigaddset(&signew, SIGCHLD);
        pthread_sigmask(SIG_BLOCK, &signew, NULL);

        sigemptyset(&signew);
        sigaddset(&signew, SIGUSR1);
        pthread_sigmask(SIG_BLOCK, &signew, &sigold);

        /*
         * Create a pipe object that we inherit into the forked daemon. In case
         * of dbus-daemon(1) it is actually used to retrieve data from it. In
         * case of dbus-broker, we use it to block until our child called
         * exec() (as a synchronization primitive).
         */
        r = pipe2(broker->pipe_fds, O_CLOEXEC | O_DIRECT);
        c_assert(r >= 0);

        if (getenv("DBUS_BROKER_TEST_DAEMON")) {
                /*
                 * Our pipe is passed to a forked dbus-daemon(1). It will
                 * write its picked address to the pipe, which we then remember
                 * in the broker object.
                 * We use this both as synchronization primitive, and as a way
                 * to retrieve the unix-address from dbus-daemon(1).
                 */

                r = pthread_create(&broker->thread, NULL, util_broker_thread, broker);
                c_assert(r >= 0);

                /* read address from pipe */
                n = read(broker->pipe_fds[0], buffer, sizeof(buffer) - 1);
                c_assert(n >= 0 && n < (ssize_t)sizeof(buffer));
                c_assert(!strncmp(buffer, "unix:abstract=", strlen("unix:abstract=")));

                /* copy over the path into @broker */
                broker->address.sun_path[0] = '\0';
                e = memccpy(broker->address.sun_path + 1,
                            buffer + strlen("unix:abstract="),
                            ',',
                            sizeof(broker->address.sun_path) - 2);
                c_assert(e);
                --e;
                c_assert(*e == ',');
                broker->n_address = e - (char *)&broker->address;
        } else {
                /*
                 * Create listener socket, let the kernel pick a random address
                 * and remember it in @broker. Spawn a thread, which will then
                 * run and babysit the broker.
                 */

                broker->listener_fd = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
                c_assert(broker->listener_fd >= 0);

                r = bind(broker->listener_fd, (struct sockaddr *)&broker->address, offsetof(struct sockaddr_un, sun_path));
                c_assert(r >= 0);

                r = getsockname(broker->listener_fd, (struct sockaddr *)&broker->address, &broker->n_address);
                c_assert(r >= 0);

                r = listen(broker->listener_fd, 256);
                c_assert(r >= 0);

                r = pthread_create(&broker->thread, NULL, util_broker_thread, broker);
                c_assert(r >= 0);
        }

        /* block until we get EOF, so we know the daemon was exec'ed */
        r = read(broker->pipe_fds[0], buffer, sizeof(buffer) - 1);
        c_assert(!r);

        pthread_sigmask(SIG_SETMASK, &sigold, NULL);
}

void util_broker_terminate(Broker *broker) {
        void *value;
        int r;

        c_assert(broker->listener_fd >= 0 || broker->pipe_fds[0] >= 0);

        r = pthread_kill(broker->thread, SIGUSR1);
        c_assert(!r);

        r = pthread_join(broker->thread, &value);
        c_assert(!r);
        c_assert(!value);

        c_assert(broker->listener_fd < 0);
        c_assert(broker->pipe_fds[0] < 0);
}

void util_broker_settle(Broker *broker) {
        _c_cleanup_(sd_bus_unrefp) sd_bus *client = NULL;
        int r;

        /*
         * This connects to the broker and invokes a synchronous method call
         * on the driver to make sure all queued messages are fully handles.
         *
         * Then trigger a disconnect, and wait for the client to have been
         * fully disconnected by the broker.
         */

        util_broker_connect(broker, &client);

        r = sd_bus_call_method(client,
                               "org.freedesktop.DBus",
                               "/org/freedesktop/DBus",
                               "org.freedesktop.DBus.Peer",
                               "Ping",
                               NULL,
                               NULL,
                               "");
        c_assert(r >= 0);

        util_broker_disconnect(client);
}

void util_broker_connect_fd(Broker *broker, int *fdp) {
        _c_cleanup_(c_closep) int fd = -1;
        int r;

        fd = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
        c_assert(fd >= 0);

        r = connect(fd, (struct sockaddr *)&broker->address, broker->n_address);
        c_assert(r >= 0);

        *fdp = fd;
        fd = -1;
}

void util_broker_connect_raw(Broker *broker, sd_bus **busp) {
        _c_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
        _c_cleanup_(c_closep) int fd = -1;
        int r;

        fd = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
        c_assert(fd >= 0);

        r = connect(fd, (struct sockaddr *)&broker->address, broker->n_address);
        c_assert(r >= 0);

        r = sd_bus_new(&bus);
        c_assert(r >= 0);

        /* consumes @fd */
        r = sd_bus_set_fd(bus, fd, fd);
        fd = -1;
        c_assert(r >= 0);

        r = sd_bus_start(bus);
        c_assert(r >= 0);

        *busp = bus;
        bus = NULL;
}

void util_broker_connect(Broker *broker, sd_bus **busp) {
        _c_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
        _c_cleanup_(c_closep) int fd = -1;
        int r;

        fd = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
        c_assert(fd >= 0);

        r = connect(fd, (struct sockaddr *)&broker->address, broker->n_address);
        c_assert(r >= 0);

        r = sd_bus_new(&bus);
        c_assert(r >= 0);

        /* consumes @fd */
        r = sd_bus_set_fd(bus, fd, fd);
        fd = -1;
        c_assert(r >= 0);

        r = sd_bus_set_bus_client(bus, true);
        c_assert(r >= 0);

        r = sd_bus_start(bus);
        c_assert(r >= 0);

        util_broker_consume_signal(bus, "org.freedesktop.DBus", "NameAcquired");

        *busp = bus;
        bus = NULL;
}

void util_broker_connect_monitor(Broker *broker, sd_bus **busp) {
        _c_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
        int r;

        util_broker_connect(broker, &bus);

        r = sd_bus_call_method(bus, "org.freedesktop.DBus", "/org/freedesktop/DBus", "org.freedesktop.DBus.Monitoring",
                               "BecomeMonitor", NULL, NULL,
                               "asu", 0, 0);
        c_assert(r >= 0);

        util_broker_consume_signal(bus, "org.freedesktop.DBus", "NameLost");

        *busp = bus;
        bus = NULL;
}

void util_broker_disconnect(sd_bus *bus) {
        int r;

        r = sd_bus_flush(bus);
        c_assert(r >= 0);

        r = shutdown(sd_bus_get_fd(bus), SHUT_WR);
        c_assert(r >= 0);

        for (;;) {
                r = sd_bus_wait(bus, (uint64_t)-1);
                if (r == -ENOTCONN)
                        break;
                c_assert(r >= 0);

                r = sd_bus_process(bus, NULL);
                c_assert(r >= 0);
        }

        sd_bus_close(bus);
}

void util_broker_consume_method_call(sd_bus *bus, const char *interface, const char *member) {
        _c_cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
        int r;

        for (;;) {
                r = sd_bus_wait(bus, (uint64_t)-1);
                c_assert(r >= 0);

                r = sd_bus_process(bus, &message);
                c_assert(r >= 0);

                if (message)
                        break;
        }

        r = sd_bus_message_is_method_call(message, interface, member);
        c_assert(r > 0);
}

void util_broker_consume_method_return(sd_bus *bus) {
        _c_cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
        uint8_t type;
        int r;

        for (;;) {
                r = sd_bus_wait(bus, (uint64_t)-1);
                c_assert(r >= 0);

                r = sd_bus_process(bus, &message);
                c_assert(r >= 0);

                if (message)
                        break;
        }

        r = sd_bus_message_get_type(message, &type);
        c_assert(r >= 0);
        c_assert(type == DBUS_MESSAGE_TYPE_METHOD_RETURN);
}

void util_broker_consume_method_error(sd_bus *bus, const char *name) {
        _c_cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
        int r;

        for (;;) {
                r = sd_bus_wait(bus, (uint64_t)-1);
                c_assert(r >= 0);

                r = sd_bus_process(bus, &message);
                c_assert(r >= 0);

                if (message)
                        break;
        }

        r = sd_bus_message_is_method_error(message, name);
        c_assert(r > 0);
}

void util_broker_consume_signal(sd_bus *bus, const char *interface, const char *member) {
        _c_cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
        int r;

        for (;;) {
                r = sd_bus_wait(bus, (uint64_t)-1);
                c_assert(r >= 0);

                r = sd_bus_process(bus, &message);
                c_assert(r >= 0);

                if (message)
                        break;
        }

        r = sd_bus_message_is_signal(message, interface, member);
        c_assert(r > 0);
}
