crymap 1.0.1

A simple, secure IMAP server with encrypted data at rest
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219

//-
// Copyright (c) 2020, Jason Lingle
//
// This file is part of Crymap.
//
// Crymap is free software: you can  redistribute it and/or modify it under the
// terms of  the GNU General Public  License as published by  the Free Software
// Foundation, either version  3 of the License, or (at  your option) any later
// version.
//
// Crymap is distributed  in the hope that  it will be useful,  but WITHOUT ANY
// WARRANTY; without  even the implied  warranty of MERCHANTABILITY  or FITNESS
// FOR  A PARTICULAR  PURPOSE.  See the  GNU General  Public  License for  more
// details.
//
// You should have received a copy of the GNU General Public License along with
// Crymap. If not, see <http://www.gnu.org/licenses/>.

use super::super::defs::*;

#[test]
fn unknown_commands() {
    let setup = set_up();
    let mut client = setup.connect("3501bcuc");
    skip_greeting(&mut client);

    client.write_raw(b"1 PLUGH\r\n").unwrap();
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (Some(tag), s::RespCondType::Bad,
         Some(s::RespTextCode::Parse(())), _) = r => {
            assert_eq!("1", tag);
        }
    }

    client.write_raw(b"2 NOOP NOOP\r\n").unwrap();
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (Some(tag), s::RespCondType::Bad,
         Some(s::RespTextCode::Parse(())), _) = r => {
            assert_eq!("2", tag);
        }
    }

    // With regular literals, the server can immediately reject the literal by
    // replying NO.
    client.write_raw(b"3 CREATE {1000000}\r\n").unwrap();
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (Some(tag), s::RespCondType::No, None, Some(quip)) = r => {
            assert_eq!("3", tag);
            assert_eq!("Command line too long", quip);
        }
    }

    ok_command!(client, s::Command::Simple(s::SimpleCommand::Noop));

    // Using LITERAL+, the server actually needs to swallow all the literals we
    // throw at it until it finds the actual end of the command.
    client.write_raw(b"4 CREATE {100000+}\r\n").unwrap();
    // The NO has already been sent, but keep writing to ensure the server
    // doesn't get stuck on it.
    client.write_raw("x".repeat(100000).as_bytes()).unwrap();
    client
        .write_raw(b"5 still part of big create... {3+}\r\nfoo\r\n")
        .unwrap();
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (Some(tag), s::RespCondType::No, None, Some(quip)) = r => {
            assert_eq!("4", tag);
            assert_eq!("Command line too long", quip);
        }
    }

    ok_command!(client, s::Command::Simple(s::SimpleCommand::Noop));

    // Ensure that command discarding does not end up recurring if a continued
    // line is itself too long.
    client.write_raw(b"5 CREATE {100000+}\r\n").unwrap();
    // The initial NO is actually sent after the first line
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (Some(tag), s::RespCondType::No, None, Some(quip)) = r => {
            assert_eq!("5", tag);
            assert_eq!("Command line too long", quip);
        }
    }
    client.write_raw("x".repeat(100000).as_bytes()).unwrap();
    // Server may hang up on this one
    let _ = client.write_raw("6 ".repeat(50000).as_bytes());
    // Now we get a BYE due to rejecting the continuation line
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (None, s::RespCondType::Bye, None, _) = r => { }
    }

    client = setup.connect("3501bcuc");
    skip_greeting(&mut client);

    // Ignore errors here since the server may hang up before we write the full
    // payload
    let _ = client.write_raw("x".repeat(100_000).as_bytes());
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (None, s::RespCondType::Bye, _, _) = r => { }
    }

    client = setup.connect("3501bcuc");
    skip_greeting(&mut client);
    let _ = client.write_raw("x ".repeat(50_000).as_bytes());
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (None, s::RespCondType::Bye, _, _) = r => { }
    }

    client = setup.connect("3501bcuc");
    skip_greeting(&mut client);
    client.write_raw(b"HELO\r\n").unwrap();
    let mut buffer = Vec::new();
    let r = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (None, s::RespCondType::Bye, _, _) = r => { }
    }
}

#[test]
fn inappropriate_commands() {
    let setup = set_up();
    let mut client = setup.connect("3501bcic");
    skip_greeting(&mut client);

    command!([response] = client, c("DELETE azure"));
    unpack_cond_response! {
        (Some(_), s::RespCondType::Bad, _, _) = response => { }
    }

    command!([response] = client, c("EXPUNGE"));
    unpack_cond_response! {
        (Some(_), s::RespCondType::Bad, _, _) = response => { }
    }

    command!([response] = client, c("LOGIN ../foo hunter2"));
    unpack_cond_response! {
        (Some(_), s::RespCondType::No, _, _) = response => { }
    }

    ok_command!(client, c("LOGIN azure hunter2"));

    command!([response] = client, c("EXPUNGE"));
    unpack_cond_response! {
        (Some(_), s::RespCondType::Bad, _, _) = response => { }
    }

    command!([response] = client, c("LOGIN azure hunter2"));

    unpack_cond_response! {
        (Some(_), s::RespCondType::Bad, _, _) = response => { }
    }
}

#[test]
fn bad_append_recovery() {
    let setup = set_up();
    let mut client = setup.connect("3501bcar");
    quick_log_in(&mut client);
    quick_create(&mut client, "3501bcar");
    quick_select(&mut client, "3501bcar");

    // Invalid start of append with synchronising literals
    // Parser doesn't actually recognise it as an APPEND, so we fall through to
    // regular command handling, which will buffer the literal onto the command
    // line and then reject the whole thing.
    client.write_raw(b"A1 APPEND  {5}\r\n").unwrap();

    let mut buffer = Vec::new();
    client.read_logical_line(&mut buffer).unwrap();
    assert!(buffer.starts_with(b"+ "));

    client.write_raw(b"plugh\r\n").unwrap();

    buffer.clear();
    let response = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (Some(_), s::RespCondType::Bad,
         Some(s::RespTextCode::Parse(())), _) = response => ()
    };

    // Invalid start of append using LITERAL+.
    // As before, the parser doesn't recognise it as an append, so it
    // ultimately buffers the literal and then rejects it.
    client.write_raw(b"A2 APPEND  {5+}\r\nplugh\r\n").unwrap();

    buffer.clear();
    let response = client.read_one_response(&mut buffer).unwrap();
    unpack_cond_response! {
        (Some(_), s::RespCondType::Bad,
         Some(s::RespTextCode::Parse(())), _) = response => ()
    };

    // Ensure connection remains consistent
    ok_command!(client, c("NOOP"));

    // Testing issues with any part of APPEND after the first literal is the
    // demesne of MULTIAPPEND in the rfc3502 test module.

    // None of the above should have inserted anything
    command!(responses = client, c("EXAMINE 3501bcar"));
    has_untagged_response_matching! {
        s::Response::Exists(0) in responses
    }
}