| /* |
| * Copyright (c) 2000, 2007, Oracle and/or its affiliates. All rights reserved. |
| * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
| * |
| * This code is free software; you can redistribute it and/or modify it |
| * under the terms of the GNU General Public License version 2 only, as |
| * published by the Free Software Foundation. |
| * |
| * This code is distributed in the hope that it will be useful, but WITHOUT |
| * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
| * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
| * version 2 for more details (a copy is included in the LICENSE file that |
| * accompanied this code). |
| * |
| * You should have received a copy of the GNU General Public License version |
| * 2 along with this work; if not, write to the Free Software Foundation, |
| * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
| * |
| * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
| * or visit www.oracle.com if you need additional information or have any |
| * questions. |
| */ |
| |
| /* |
| * @test |
| * @author Ram Marti |
| * @bug 4326852 |
| * @summary Retrive a subset of private credentials can be accessed |
| * @run main/othervm/policy=Subset.policy Subset |
| */ |
| |
| import java.util.*; |
| import com.sun.security.auth.SolarisPrincipal; |
| import javax.security.auth.Subject; |
| |
| /* |
| * Author : Ram Marti |
| * This is a test program to verify the fix for Bug 4326852 |
| * (impossible to extract a subset of private credentials) |
| * The policy file used allows read access only to String classes. |
| * grant { |
| * permission javax.security.auth.AuthPermission \ |
| * "modifyPrivateCredentials"; |
| * permission javax.security.auth.PrivateCredentialPermission \ |
| * "java.lang.String com.sun.security.auth.SolarisPrincipal \"user"", "read"; |
| * }; |
| |
| * The test verifies the following: |
| * - String class creds can be retrieved by using |
| * getPrivateCredentials(String.class) |
| * - The above set is not backed internally |
| * - getPrivateCredentials(Boolean or Integer) returns an empty set |
| * - Set is returned by getPrivateCredentials() throws |
| * security exception when trying to access non-String |
| * class credentials |
| * - The above set is internally backed up and any changes in |
| * internal private creds are reflected in the set returned |
| * - When the above set throws security exception the iterator |
| * - is advanced to the next item in the list of creds. |
| * - equals,contains,containsAll,add,remove operations work correctly |
| */ |
| |
| public class Subset { |
| public static void main(String[] args) throws Exception { |
| int exceptionCounter =0; |
| Iterator iter1; |
| HashSet creds = new HashSet(); |
| Subject emptys = |
| new Subject(false, //readOnly |
| Collections.singleton(new SolarisPrincipal("user")), |
| Collections.EMPTY_SET, |
| creds); |
| /* Test principals */ |
| |
| Set princ= emptys.getPrincipals(); |
| HashSet collp= new HashSet(); |
| collp.add(new String("abc")); |
| collp.add(new String("def")); |
| collp.add(new String("Exists")); |
| collp.add(new String("Does not Exist")); |
| try { |
| if (princ.containsAll(collp)) { |
| throw new Exception ("Error: Contains the collection"); |
| } else |
| System.out.println ("Does not Contain the collection"); |
| } catch (SecurityException e) { |
| throw new Exception ("Error: Exception in containsAll (string coll)!!"); |
| } |
| |
| |
| Set p1 = emptys.getPrivateCredentials(); |
| |
| if (p1.size() != 0) { |
| throw new Exception("Error:p1 size should have been 6 and was " + |
| p1.size()); |
| } |
| |
| creds.add("abc"); |
| creds.add(new Integer(3)); |
| creds.add(Boolean.TRUE); |
| Subject sremove = |
| new Subject(false, //readOnly |
| Collections.singleton(new SolarisPrincipal("user")), |
| Collections.EMPTY_SET, |
| creds); |
| Set p2 = sremove.getPrivateCredentials(); |
| |
| if (p2.size() !=3){ |
| throw new Exception("Error: p2 size should have been 3 and was " + |
| p2.size()); |
| } |
| iter1 = p2.iterator(); |
| exceptionCounter=0; |
| while (iter1.hasNext()) { |
| try { |
| Object o = iter1.next(); |
| System.out.println(" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| System.out.println("Expected Exception occured"); |
| exceptionCounter++; |
| } |
| } |
| if (exceptionCounter != 2) { |
| throw new Exception("Expected number of exceptions was 2 " + |
| "The actual number was " + exceptionCounter); |
| } |
| |
| // Verify that remove op was successful |
| |
| iter1.remove(); |
| if (p2.size() !=2) { |
| throw new RuntimeException("Error: p2 size should have been 2 and was " + |
| p2.size()); |
| } |
| System.out.println ("Checking the value after removal"); |
| p2 = sremove.getPrivateCredentials(); |
| try { |
| if (!p2.add(new String("XYZ"))) { |
| |
| throw new RuntimeException("Error in adding string"); |
| } |
| if (!p2.add(new Integer(99))) { |
| |
| throw new RuntimeException("Error in adding Integer"); |
| } |
| HashSet coll1 = new HashSet(); |
| coll1.add(new String("RST")); |
| coll1.add(new Integer(1)); |
| if (!p2.addAll(coll1)) { |
| |
| throw new RuntimeException("Error in addAll"); |
| } |
| |
| } catch (Exception e){ |
| e.printStackTrace(); |
| throw new RuntimeException("Unexpected exception in add"); |
| |
| } |
| iter1 = p2.iterator(); |
| |
| while (iter1.hasNext()) { |
| try { |
| Object o = iter1.next(); |
| System.out.println(" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| // System.out.println("Exception!!"); |
| } |
| } |
| iter1 = p2.iterator(); |
| |
| System.out.println ("Checked the value after removal"); |
| |
| HashSet creds1 = new HashSet(); |
| creds1.add("abc"); |
| creds1.add("def"); |
| creds1.add(Boolean.TRUE); |
| creds1.add(new Integer(1)); |
| creds1.add(new String("Exists")); |
| Subject scontain = |
| new Subject(false, //readOnly |
| Collections.singleton(new SolarisPrincipal("user")), |
| Collections.EMPTY_SET, |
| creds1); |
| p2 = scontain.getPrivateCredentials(); |
| try { |
| Object ObjAr = p2.toArray(); |
| } catch (SecurityException e) { |
| System.out.println("Should get an Exception in toArray()"); |
| } |
| |
| HashSet creds3 = new HashSet(); |
| creds3.add (new String("abc")); |
| p2 = scontain.getPrivateCredentials(); |
| |
| try { |
| Object ObjCred = (Object)creds3.clone(); |
| System.out.println ("Size of p2 is " + p2.size() + |
| "Size of ObjCred is " + |
| ((HashSet)ObjCred).size() |
| ); |
| if (p2.equals(ObjCred)) |
| throw new RuntimeException("Error:Equals ObjCred *** "); |
| else |
| System.out.println ("Does not Equal Objcred"); |
| } catch (SecurityException e) { |
| throw new RuntimeException("Error:Should not get an Exception in equals of creds3"); |
| |
| |
| } |
| |
| try { |
| Object ObjCred = (Object)creds1.clone(); |
| System.out.println ("Size of p2 is " + p2.size() + |
| "Size of ObjCred is " + |
| ((HashSet)ObjCred).size() |
| ); |
| if (p2.equals(ObjCred)) |
| throw new RuntimeException ("Error: Equals ObjCred"); |
| else |
| throw new RuntimeException ("Error: Does not Equal Objcred"); |
| } catch (SecurityException e) { |
| System.out.println("Should get an Exception in equals of creds1"); |
| } |
| /* We can store only string types of creds |
| * Let us create a subject with only string type of creds |
| */ |
| |
| HashSet creds2 = new HashSet(); |
| creds2.add("abc"); |
| creds2.add("def"); |
| creds2.add("ghi"); |
| Subject sstring = |
| new Subject(false, //readOnly |
| Collections.singleton(new SolarisPrincipal("user")), |
| Collections.EMPTY_SET, |
| creds2); |
| p2 = sstring.getPrivateCredentials(); |
| try { |
| String[] selectArray = { "exits", "Does not exist"}; |
| Object ObjAr = p2.toArray(selectArray); |
| System.out.println(" No Exception in ObjAr- String"); |
| |
| } catch (SecurityException e) { |
| throw new RuntimeException(" Error: Exception in ObjAr- String!!"); |
| } |
| /* |
| * New subject scontain1, set p3, creds4 |
| */ |
| |
| |
| HashSet creds4 = new HashSet(); |
| creds4.add("abc"); |
| creds4.add("def"); |
| creds4.add("ghi"); |
| creds4.add(new Integer(1)); |
| creds4.add("Exists"); |
| Subject scontain1 = |
| new Subject(false, //readOnly |
| Collections.singleton(new SolarisPrincipal("user")), |
| Collections.EMPTY_SET, |
| creds4); |
| Set p3 = scontain1.getPrivateCredentials(); |
| try { |
| Object Obj = new String("Exists"); |
| if (p3.contains(Obj)) |
| System.out.println ("Contains String cred"); |
| else |
| throw new RuntimeException ("Error Does not Contain the stringcred exists"); |
| } catch (SecurityException e) { |
| throw new RuntimeException("Error:Exception!!"); |
| |
| } |
| try { |
| Object ObjCred = (Object)creds4.clone(); |
| if (p3.equals(ObjCred)) |
| throw new RuntimeException ("Error:Equals ObjCred"); |
| else |
| throw new RuntimeException ("Error:Does not Equal Objcred"); |
| } catch (SecurityException e) { |
| System.out.println("Should get an Exception in equals"); |
| } |
| |
| try { |
| Object Obj = new Integer(1); |
| if (p3.contains(Obj)) |
| throw new RuntimeException ("Error:Contains integer cred"); |
| else |
| throw new RuntimeException ("Error:Does not Contain integer cred"); |
| } catch (SecurityException e) { |
| System.out.println("Should get an Exception in contains Integer cred"); |
| } |
| |
| |
| |
| HashSet coll = new HashSet(); |
| coll.add(new String("abc")); |
| coll.add(new String("def")); |
| coll.add(new String("Exists")); |
| coll.add(new String("Does not Exist")); |
| try { |
| if (p3.containsAll(coll)) |
| throw new RuntimeException ("Error: Contains the collection"); |
| else |
| System.out.println ("Does not Contain the collection"); |
| } catch (SecurityException e) { |
| throw new RuntimeException("Error: Exception in containsAll (string coll)!!"); |
| |
| } |
| coll.remove(new String("Exists")); |
| coll.remove(new String("Does not Exist")); |
| try { |
| if (p3.containsAll(coll)) |
| System.out.println ("Contains the collection"); |
| else |
| throw new RuntimeException ("Error:Does not Contain the collection"); |
| } catch (SecurityException e) { |
| throw new RuntimeException("Error: Exception in containsAll (string coll)!!"); |
| } |
| |
| Object Obj = new String("Exists"); |
| try { |
| if (p3.contains(Obj)) |
| System.out.println ("Contains String cred exists"); |
| else |
| System.out.println ("Does not Contain String cred exists"); |
| } catch (SecurityException e) { |
| System.out.println("Exception in String cred!!"); |
| } |
| |
| Obj = new String("Does not exist"); |
| try { |
| if (p3.contains(Obj)) |
| throw new RuntimeException ("Error: Contains the String does not exist"); |
| else |
| System.out.println ("Does not Contain the String cred Does not exist"); |
| } catch (SecurityException e) { |
| throw new RuntimeException("Error: Exception in Contains!!"); |
| } |
| p3.add(new Integer(2)); |
| coll.add(new Integer(2)); |
| p3.add("XYZ"); |
| |
| System.out.println ("Testing Retainall "); |
| exceptionCounter =0; |
| iter1 = p3.iterator(); |
| while (iter1.hasNext()) |
| { |
| try { |
| Object o = iter1.next(); |
| System.out.println(" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| System.out.println(" We should get exception"); |
| System.out.println("Exception!!"); |
| exceptionCounter++; |
| } |
| } |
| System.out.println(" After the retainall Operation"); |
| try { |
| if (p3.retainAll(coll)) |
| System.out.println ("Retained the collection"); |
| else |
| throw new RuntimeException ("Error: RetainAll did not succeed"); |
| } catch (SecurityException e) { |
| e.printStackTrace(); |
| throw new RuntimeException("Error: Unexpected Exception in retainAll!"); |
| } |
| iter1 = p3.iterator(); |
| while (iter1.hasNext()) |
| { |
| try { |
| Object o = iter1.next(); |
| System.out.println(" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| exceptionCounter++; |
| } |
| } |
| System.out.println ("Retainall collection"); |
| p3.add(new Integer (3)); |
| iter1 = p3.iterator(); |
| while (iter1.hasNext()) { |
| try { |
| Object o = iter1.next(); |
| System.out.println(" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| System.out.println("Should get Exception "); |
| } |
| } |
| exceptionCounter=0; |
| HashSet coll2 = new HashSet(); |
| coll2.add(new String("abc")); |
| coll2.add(new Integer (3)); |
| System.out.println(" before removeall"); |
| iter1 = p3.iterator(); |
| exceptionCounter =0; |
| while (iter1.hasNext()) { |
| try { |
| Object o = iter1.next(); |
| System.out.println(" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| System.out.println("Expected Exception thrown "); |
| exceptionCounter++; |
| } |
| } |
| // We added two integer creds so there must be two exceptions only |
| |
| if (exceptionCounter != 2) { |
| throw new RuntimeException("Expected 2 Exceptions; received " + |
| exceptionCounter + "exceptions "); |
| } |
| |
| try { |
| p3.removeAll(coll2); |
| System.out.println(" removeall successful! "); |
| } catch (SecurityException e) { |
| throw new RuntimeException(" Error: removeAll Security Exception!!"); |
| } |
| |
| iter1 = p3.iterator(); |
| System.out.println(" After removeall"); |
| exceptionCounter = 0; |
| while (iter1.hasNext()) { |
| try { |
| Object o = iter1.next(); |
| System.out.println (" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| System.out.println("Expected Exception thrown "); |
| exceptionCounter++; |
| } |
| } |
| // We had two integer creds; removed one as a part of coll2; so |
| // only one exception must have been thrown |
| if (exceptionCounter != 1) { |
| throw new RuntimeException("Expected 1 Exceptions; received " + |
| exceptionCounter + "exceptions "); |
| } |
| try { |
| p3.clear(); |
| System.out.println(" Clear() successful! "); |
| } catch (SecurityException e) { |
| throw new RuntimeException(" Error: Clear Security Exception!!"); |
| } |
| |
| |
| /* New subject s with creds and privCredSet |
| * |
| */ |
| creds.clear(); |
| creds.add("abc"); |
| creds.add("def"); |
| creds.add("ghi"); |
| creds.add(new Integer(1)); |
| Subject s = |
| new Subject(false, //readOnly |
| Collections.singleton(new SolarisPrincipal("user")), |
| Collections.EMPTY_SET, |
| creds); |
| try { |
| Set privCredSet = s.getPrivateCredentials(char.class); |
| if (privCredSet.size() != 0) { |
| throw new RuntimeException("Error:String Privcred size should have been 0 and was " + |
| privCredSet.size()); |
| } |
| |
| } catch (Exception e) { |
| throw new RuntimeException ("Error " + e.toString()); |
| } |
| |
| |
| try { |
| Set privCredSet = s.getPrivateCredentials(String.class); |
| if (privCredSet.size() != 3) { |
| throw new RuntimeException("Error:String Privcred size should have been 2 and was " + |
| privCredSet.size()); |
| } |
| s.getPrivateCredentials().add("XYZ"); |
| /* |
| * Since the privCredSet is not backed by internal private |
| * creds adding to it should not make any difference to |
| * privCredSet and theize should still be 3 |
| */ |
| |
| if (privCredSet.size() != 3) { |
| throw new RuntimeException("Error:String Privcred size should have been 2 and was " + |
| privCredSet.size()); |
| } |
| s.getPrivateCredentials().remove("XYZ"); |
| /* |
| * Let us try to get the elements |
| * No exception should occur |
| */ |
| |
| Iterator iter = privCredSet.iterator(); |
| while (iter.hasNext()) { |
| try { |
| Object o = iter.next(); |
| System.out.println(" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| } |
| } |
| } catch (Exception e) { |
| e.printStackTrace(); |
| throw new RuntimeException("Unexcpected Exception"); |
| } |
| |
| /* |
| * Can we add and remove the creds |
| */ |
| s.getPrivateCredentials().add("XYZ"); |
| s.getPrivateCredentials().remove("XYZ"); |
| s.getPrivateCredentials().add(new Integer(2)); |
| s.getPrivateCredentials().remove(new Integer(2)); |
| |
| |
| // We don't have permission to read Boolean creds |
| // SInce the creds have no boolean creds we should get an empty |
| // set |
| try { |
| Set privCredSet1 = s.getPrivateCredentials(Boolean.class); |
| if (privCredSet1.size() != 0){ |
| throw new RuntimeException("Error:String PrivcredSet1 of Boolean size should have been 0 and was " + |
| privCredSet1.size()); |
| } |
| } catch (SecurityException e) { |
| e.printStackTrace(); |
| throw new RuntimeException("Unexcpected Exception"); |
| } |
| System.out.println ("Checked Boolean Creds "); |
| |
| /* |
| * We don't have permission to read Integer creds |
| * We should get an empty set even though the private creds |
| * has an integer cred. No security exception either ! |
| */ |
| |
| try { |
| Set privCredSet1 = s.getPrivateCredentials(Integer.class); |
| if (privCredSet1.size() != 0){ |
| throw new RuntimeException("Error:String PrivcredSet1 of Integer size should have been 0 and was " + |
| privCredSet1.size()); |
| } |
| } catch (SecurityException e) { |
| System.out.println ("Expected exception"); |
| } |
| System.out.println ("Checked Integer Creds "); |
| |
| Set privCredSet2 = s.getPrivateCredentials(); |
| |
| if (privCredSet2.size() != 4){ |
| throw new RuntimeException("Error:String PrivcredSet1 size should have been 4 and was " + |
| privCredSet2.size()); |
| } |
| |
| /* |
| * Since the returned privCredSet2 is internally backed by the |
| * private creds, any additions to it should be reflected in |
| * privcredSet2 |
| */ |
| s.getPrivateCredentials().add("XYZ"); |
| if (privCredSet2.size() != 5) { |
| throw new RuntimeException("Error:String PrivcredSet1 size should have been 5 and was " + |
| privCredSet2.size()); |
| } |
| s.getPrivateCredentials().remove("XYZ"); |
| if (privCredSet2.size() != 4) { |
| throw new RuntimeException("String privCredSet2 size should have been 5 and was " + |
| privCredSet2.size()); |
| } |
| System.out.println("Checked remove(String) operation"); |
| /* Let us add a couple of Boolean creds */ |
| s.getPrivateCredentials().add(Boolean.TRUE); |
| s.getPrivateCredentials().add(new Integer(2)); |
| |
| exceptionCounter =0; |
| iter1 = privCredSet2.iterator(); |
| while (iter1.hasNext()) |
| { |
| try { |
| Object o = iter1.next(); |
| System.out.println(" private creds of class " + |
| o.getClass() + "value is " + o.toString()); |
| } catch (SecurityException e) { |
| System.out.println(" We should get exception"); |
| System.out.println("Exception!!"); |
| exceptionCounter++; |
| } |
| } |
| if (exceptionCounter != 3) { |
| throw new RuntimeException("Expected number of exception was 3 " + |
| "The actual number was " + exceptionCounter); |
| } |
| privCredSet2.add (new Integer(3)); |
| try { |
| int hashCode = privCredSet2.hashCode(); |
| } catch (SecurityException e) { |
| System.out.println ("hashCode Expected exception"); |
| } |
| System.out.println ("Tests completed"); |
| } |
| |
| } |