TEST_F(ItemDataTest, PasswordHistory)
{
size_t pwh_max, num_err;
PWHistList pwhl;
const StringX pw1(L"banana-0rchid");
const StringX pw2(L"banana-1rchid");
const StringX pw3(L"banana-2rchid");
const StringX pw4(L"banana-5rchid");
PWSprefs *prefs = PWSprefs::GetInstance();
prefs->SetPref(PWSprefs::SavePasswordHistory, true);
prefs->SetPref(PWSprefs::NumPWHistoryDefault, 3);
CItemData di;
di.SetCTime();
di.SetPassword(pw1); // first time must be Set, not Update!
di.UpdatePassword(pw2);
EXPECT_FALSE(di.GetPWHistory().empty());
EXPECT_TRUE(CreatePWHistoryList(di.GetPWHistory(), pwh_max, num_err,
pwhl, PWSUtil::TMC_ASC_UNKNOWN));
EXPECT_EQ(0, num_err);
EXPECT_EQ(3, pwh_max);
EXPECT_EQ(1, pwhl.size());
EXPECT_EQ(pw1, pwhl[0].password);
di.UpdatePassword(pw3);
EXPECT_TRUE(CreatePWHistoryList(di.GetPWHistory(), pwh_max, num_err,
pwhl, PWSUtil::TMC_ASC_UNKNOWN));
EXPECT_EQ(0, num_err);
EXPECT_EQ(3, pwh_max);
EXPECT_EQ(2, pwhl.size());
EXPECT_EQ(pw1, pwhl[0].password);
EXPECT_EQ(pw2, pwhl[1].password);
di.UpdatePassword(pw4);
EXPECT_TRUE(CreatePWHistoryList(di.GetPWHistory(), pwh_max, num_err,
pwhl, PWSUtil::TMC_ASC_UNKNOWN));
EXPECT_EQ(0, num_err);
EXPECT_EQ(3, pwh_max);
EXPECT_EQ(3, pwhl.size());
EXPECT_EQ(pw1, pwhl[0].password);
EXPECT_EQ(pw2, pwhl[1].password);
EXPECT_EQ(pw3, pwhl[2].password);
di.UpdatePassword(L"Last1");
EXPECT_TRUE(CreatePWHistoryList(di.GetPWHistory(), pwh_max, num_err,
pwhl, PWSUtil::TMC_ASC_UNKNOWN));
EXPECT_EQ(0, num_err);
EXPECT_EQ(3, pwh_max);
EXPECT_EQ(3, pwhl.size());
EXPECT_EQ(pw2, pwhl[0].password);
EXPECT_EQ(pw3, pwhl[1].password);
EXPECT_EQ(pw4, pwhl[2].password);
}
bool PWSFilterManager::PassesPWHFiltering(const CItemData *pci) const
{
bool thistest_rc, bPresent;
bool bValue(false);
int iValue(0);
size_t pwh_max, err_num;
PWHistList pwhistlist;
bool status = CreatePWHistoryList(pci->GetPWHistory(),
pwh_max, err_num,
pwhistlist, PWSUtil::TMC_EXPORT_IMPORT);
bPresent = pwh_max > 0 || !pwhistlist.empty();
for (auto group_iter = m_vHflgroups.begin();
group_iter != m_vHflgroups.end(); group_iter++) {
const vfiltergroup &group = *group_iter;
int tests(0);
bool thisgroup_rc = false;
for (auto num_iter = group.begin();
num_iter != group.end(); num_iter++) {
const int &num = *num_iter;
if (num == -1) // Padding for FT_PWHIST & FT_POLICY - shouldn't happen here
continue;
const st_FilterRow &st_fldata = m_currentfilter.vHfldata.at(num);
thistest_rc = false;
PWSMatch::MatchType mt(PWSMatch::MT_INVALID);
const FieldType ft = st_fldata.ftype;
switch (ft) {
case HT_PRESENT:
bValue = bPresent;
mt = PWSMatch::MT_BOOL;
break;
case HT_ACTIVE:
bValue = status == TRUE;
mt = PWSMatch::MT_BOOL;
break;
case HT_NUM:
iValue = (int)pwhistlist.size();
mt = PWSMatch::MT_INTEGER;
break;
case HT_MAX:
iValue = (int)pwh_max;
mt = PWSMatch::MT_INTEGER;
break;
case HT_CHANGEDATE:
mt = PWSMatch::MT_DATE;
break;
case HT_PASSWORDS:
mt = PWSMatch::MT_STRING;
break;
default:
ASSERT(0);
}
const int ifunction = (int)st_fldata.rule;
switch (mt) {
case PWSMatch::MT_STRING:
for (auto pwshe_iter = pwhistlist.begin(); pwshe_iter != pwhistlist.end(); pwshe_iter++) {
PWHistEntry pwshe = *pwshe_iter;
thistest_rc = PWSMatch::Match(st_fldata.fstring, pwshe.password,
st_fldata.fcase ? -ifunction : ifunction);
tests++;
if (thistest_rc)
break;
}
break;
case PWSMatch::MT_INTEGER:
thistest_rc = PWSMatch::Match(st_fldata.fnum1, st_fldata.fnum2,
iValue, ifunction);
tests++;
break;
case PWSMatch::MT_DATE:
for (auto pwshe_iter = pwhistlist.begin(); pwshe_iter != pwhistlist.end(); pwshe_iter++) {
const PWHistEntry pwshe = *pwshe_iter;
// Following throws away hours/min/sec from changetime, for proper date comparison
time_t changetime = pwshe.changetttdate - (pwshe.changetttdate % (24*60*60));
thistest_rc = PWSMatch::Match(st_fldata.fdate1, st_fldata.fdate2,
changetime, ifunction);
tests++;
if (thistest_rc)
break;
}
break;
case PWSMatch::MT_BOOL:
thistest_rc = PWSMatch::Match(bValue, ifunction);
tests++;
break;
default:
ASSERT(0);
}
if (tests <= 1)
thisgroup_rc = thistest_rc;
else {
//Within groups, tests are always "AND" connected
thisgroup_rc = thistest_rc && thisgroup_rc;
}
}
// This group of tests completed -
// if 'thisgroup_rc == true', leave now; else go on to next group
if (thisgroup_rc)
return true;
}
// We finished all the groups and haven't found one that is true - exclude entry.
return false;
}