1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
use crate::prelude::*;
use tokio::io::AsyncWriteExt as _;
pub async fn getpin(
prompt: &str,
desc: &str,
tty: Option<&str>,
) -> Result<crate::locked::Password> {
let mut opts = tokio::process::Command::new("pinentry");
let opts = opts
.stdin(std::process::Stdio::piped())
.stdout(std::process::Stdio::piped());
let opts = if let Some(tty) = tty {
opts.args(&["-T", tty])
} else {
opts
};
let mut child = opts.spawn().context(crate::error::Spawn)?;
// unwrap is safe because we specified stdin as piped in the command opts
// above
let mut stdin = child.stdin.take().unwrap();
stdin
.write_all(b"SETTITLE rbw\n")
.await
.context(crate::error::WriteStdin)?;
stdin
.write_all(format!("SETPROMPT {}\n", prompt).as_bytes())
.await
.context(crate::error::WriteStdin)?;
stdin
.write_all(format!("SETDESC {}\n", desc).as_bytes())
.await
.context(crate::error::WriteStdin)?;
stdin
.write_all(b"GETPIN\n")
.await
.context(crate::error::WriteStdin)?;
drop(stdin);
let mut buf = crate::locked::Vec::new();
buf.extend(std::iter::repeat(0));
// unwrap is safe because we specified stdout as piped in the command opts
// above
let len =
read_password(buf.data_mut(), child.stdout.as_mut().unwrap()).await?;
buf.truncate(len);
child.await.context(crate::error::PinentryWait)?;
Ok(crate::locked::Password::new(buf))
}
async fn read_password<
R: tokio::io::AsyncRead + tokio::io::AsyncReadExt + Unpin,
>(
data: &mut [u8],
mut r: R,
) -> Result<usize> {
let mut len = 0;
loop {
let nl = data.iter().take(len).position(|c| *c == b'\n');
if let Some(nl) = nl {
if data.starts_with(b"OK") {
data.copy_within((nl + 1).., 0);
len -= nl + 1;
} else if data.starts_with(b"D ") {
data.copy_within(2..nl, 0);
len = nl - 2;
break;
} else {
return Err(Error::FailedToParsePinentry {
out: String::from_utf8_lossy(data).to_string(),
});
}
} else {
let bytes = r
.read(&mut data[len..])
.await
.context(crate::error::PinentryReadOutput)?;
len += bytes;
}
}
Ok(len)
}
#[test]
fn test_read_password() {
let good_inputs = &[
&b"D super secret password\n"[..],
&b"OK\nOK\nOK\nD super secret password\nOK\n"[..],
&b"OK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nD super secret password\nOK\n"[..],
&b"OK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nOK\nD super secret password\nOK\n"[..],
];
for input in good_inputs {
let mut buf = [0; 64];
tokio::runtime::Runtime::new().unwrap().block_on(async {
let len = read_password(&mut buf, &input[..]).await.unwrap();
assert_eq!(&buf[0..len], b"super secret password");
});
}
}
|
