~ubuntu-branches/ubuntu/natty/enigmail/natty-security

this.WRITE_LOG("enigmailCommon.jsm: execStart: command = "+this.printCmdLine(command, args)+", needPassphrase="+needPassphrase+", domWindow="+domWindow+", listener="+listener+"\n");

1997

1998

if (! listener) listener = {};

1999

2000

statusFlagsObj.value = 0;

2001

2002

var passphrase = null;

2003

var useAgentObj = {value: false};

2004

2005

if (needPassphrase) {

2006

args = args.concat(this.passwdCommand());

2007

2008

var passwdObj = new Object();

2009

2010

if (!this.getPassphrase(domWindow, passwdObj, useAgentObj, 0)) {

2011

this.ERROR_LOG("enigmailCommon.jsm: execStart: Error - no passphrase supplied\n");

2012

2013

statusFlagsObj.value |= nsIEnigmail.MISSING_PASSPHRASE;

2014

return null;

2015

}

2016

2017

passphrase = passwdObj.value;

2018

}

2019

2020

this.CONSOLE_LOG("enigmail> "+this.printCmdLine(command, args)+"\n");

2021

2022

try {

2023

proc = subprocess.call({

2024

command: command,

2025

arguments: args,

2026

environment: this.getEnvList(),

2027

charset: null,

2028

stdin: function (pipe) {

2029

if (needPassphrase) {

2030

// Write to child STDIN

2031

// (ignore errors, because child may have exited already, closing STDIN)

2032

try {

2033

if (EnigmailCommon.requirePassword()) {

2034

pipe.write(passphrase+"\n");

2035

}

2036

} catch (ex) {}

2037

}

2038

2039

if (listener.stdin) listener.stdin(pipe);

2040

2041

stdout: function(data) { listener.stdout(data) },

2042

stderr: function(data) { listener.stderr(data) },

2043

done: function(result) {

2044

try {

2045

listener.done(result.exitCode);

2046

}

2047

catch (ex) {

2048

EnigmailCommon.writeException("enigmailCommon.jsm", ex);

2049

}

2050

2051

mergeStderr: false

2052

});

2053

} catch (ex) {

2054

this.CONSOLE_LOG("enigmail.jsm: execStart: Error - Failed to start PipeTransport\n");

2055

this.ERROR_LOG("enigmailCommon.jsm: execStart: subprocess.call failed with '"+ex.toString()+"'\n");

2056

return null;

2057

}

2058

2059

return proc;

2060

2061

2062

decryptMessageStart: function (win, verifyOnly, listener,

2063

statusFlagsObj, errorMsgObj) {

2064

this.DEBUG_LOG("enigmailCommon.jsm: decryptMessageStart: verifyOnly="+verifyOnly+"\n");

2065

2066

this.getService(win);

2067

if (! (this.enigmailSvc)) {

2068

this.ERROR_LOG("enigmail.jsm: decryptMessageStart: not yet initialized\n");

2069

errorMsgObj.value = this.getString("notInit");

2070

return null;

2071

}

2072

2073

if (gKeygenProcess) {

2074

errorMsgObj.value = this.getString("notComplete");

2075

return null;

2076

}

2077

2078

var args = this.getAgentArgs(true);

2079

2080

var keyserver = this.getPref("autoKeyRetrieve");

2081

if (keyserver && keyserver != "") {

2082

args.push("--keyserver-options");

2083

var keySrvArgs="auto-key-retrieve";

2084

var srvProxy = this.getHttpProxy(keyserver);

2085

if (srvProxy) {

2086

keySrvArgs += ",http-proxy="+srvProxy;

2087

}

2088

args.push(keySrvArgs);

2089

args.push("--keyserver");

2090

args.push(keyserver);

2091

}

2092

2093

if (verifyOnly) {

2094

args.push("--verify");

2095

2096

} else {

2097

args.push("--decrypt");

2098

}

2099

2100

var proc = this.execStart(this.enigmailSvc.agentPath, args, !verifyOnly, win,

2101

listener, statusFlagsObj);

2102

2103

if (statusFlagsObj.value & nsIEnigmail.MISSING_PASSPHRASE) {

2104

this.ERROR_LOG("enigmailCommon.jsm: decryptMessageStart: Error - no passphrase supplied\n");

2105

2106

errorMsgObj.value = this.getString("noPassphrase");

2107

return null;

2108

}

2109

2110

return proc;

2111

2112

2113

decryptMessageEnd: function (stderrStr, exitCode, outputLen, verifyOnly, noOutput, uiFlags, retStatusObj) {

2114

this.DEBUG_LOG("enigmail.jsm: decryptMessageEnd: uiFlags="+uiFlags+", verifyOnly="+verifyOnly+", noOutput="+noOutput+"\n");

2115

2116

this.DEBUG_LOG("enigmail.jsm: decryptMessageEnd: stderrStr="+stderrStr+"\n");

2117

var interactive = uiFlags & nsIEnigmail.UI_INTERACTIVE;

2118

var pgpMime = uiFlags & nsIEnigmail.UI_PGP_MIME;

2119

var allowImport = uiFlags & nsIEnigmail.UI_ALLOW_KEY_IMPORT;

2120

var unverifiedEncryptedOK = uiFlags & nsIEnigmail.UI_UNVERIFIED_ENC_OK;

2121

var j;

2122

2123

retStatusObj.statusFlags = 0;

2124

retStatusObj.errorMsg = "";

2125

retStatusObj.blockSeparation = "";

2126

2127

var errorMsg = this.parseErrorOutput(stderrStr, retStatusObj);

2128

2129

if (pgpMime) {

2130

retStatusObj.statusFlags |= verifyOnly ? nsIEnigmail.PGP_MIME_SIGNED

2131

: nsIEnigmail.PGP_MIME_ENCRYPTED;

2132

}

2133

2134

var statusMsg = retStatusObj.statusMsg;

2135

exitCode = this.fixExitCode(exitCode, retStatusObj.statusFlags);

2136

if ((exitCode == 0) && !noOutput && !outputLen &&

2137

((retStatusObj.statusFlags & (gStatusFlags.DECRYPTION_OKAY | gStatusFlags.GOODSIG)) == 0)) {

2138

exitCode = -1;

2139

}

2140

2141

if (exitCode == 0) {

2142

// Normal return

2143

var errLines, goodSignPat, badSignPat, keyExpPat, revKeyPat, validSigPat;

2144

2145

if (statusMsg) {

2146

errLines = statusMsg.split(/\r?\n/);

2147

2148

goodSignPat = /GOODSIG (\w{16}) (.*)$/i;

2149

badSignPat = /BADSIG (\w{16}) (.*)$/i;

2150

keyExpPat = /EXPKEYSIG (\w{16}) (.*)$/i

2151

revKeyPat = /REVKEYSIG (\w{16}) (.*)$/i;

2152

validSigPat = /VALIDSIG (\w+) (.*) (\d+) (.*)/i;

2153

2154

} else {

2155

errLines = stderrStr.value.split(/\r?\n/);

2156

2157

goodSignPat = /Good signature from (user )?"(.*)"\.?/i;

2158

badSignPat = /BAD signature from (user )?"(.*)"\.?/i;

2159

keyExpPat = /This key has expired/i;

2160

revKeyPat = /This key has been revoked/i;

2161

validSigPat = /dummy-not-used/i;

2162

}

2163

2164

retStatusObj.errorMsg = "";

2165

2166

var matches;

2167

2168

var signed = false;

2169

var goodSignature;

2170

2171

var userId = "";

2172

var keyId = "";

2173

var sigDetails = "";

2174

2175

for (j=0; j<errLines.length; j++) {

2176

matches = errLines[j].match(badSignPat);

2177

2178

if (matches && (matches.length > 2)) {

2179

signed = true;

2180

goodSignature = false;

2181

userId = matches[2];

2182

keyId = matches[1];

2183

break;

2184

}

2185

2186

matches = errLines[j].match(revKeyPat);

2187

2188

if (matches && (matches.length > 2)) {

2189

signed = true;

2190

goodSignature = true;

2191

userId = matches[2];

2192

keyId = matches[1];

2193

break;

2194

}

2195

2196

matches = errLines[j].match(goodSignPat);

2197

2198

if (matches && (matches.length > 2)) {

2199

signed = true;

2200

goodSignature = true;

2201

userId = matches[2];

2202

keyId = matches[1];

2203

break;

2204

}

2205

2206

matches = errLines[j].match(keyExpPat);

2207

2208

if (matches && (matches.length > 2)) {

2209

signed = true;

2210

goodSignature = true;

2211

userId = matches[2];

2212

keyId = matches[1];

2213

2214

break;

2215

}

2216

}

2217

2218

if (goodSignature) {

2219

for (var j=0; j<errLines.length; j++) {

2220

matches = errLines[j].match(validSigPat);

2221

2222

if (matches && (matches.length > 4))

2223

keyId = matches[4].substr(-16); // in case of several subkeys refer to the main key ID

2224

2225

if (matches && (matches.length > 2)) {

2226

sigDetails = errLines[j].substr(9);

2227

break;

2228

}

2229

}

2230

}

2231

2232

//try {

2233

if (userId && keyId && this.prefBranch.getBoolPref("displaySecondaryUid")) {

2234

let uids = this.enigmailSvc.getKeyDetails(keyId, true);

2235

if (uids) {

2236

userId = uids;

2237

}

2238

}

2239

//}

2240

//catch (ex) {}

2241

2242

if (userId) {

2243

userId = this.convertToUnicode(userId, "UTF-8");

2244

}

2245

2246

retStatusObj.userId = userId;

2247

retStatusObj.keyId = keyId;

2248

retStatusObj.sigDetails = sigDetails;

2249

2250

if (signed) {

2251

var trustPrefix = "";

2252

2253

if (retStatusObj.statusFlags & nsIEnigmail.UNTRUSTED_IDENTITY) {

2254

trustPrefix += this.getString("prefUntrusted")+" ";

2255

}

2256

2257

if (retStatusObj.statusFlags & nsIEnigmail.REVOKED_KEY) {

2258

trustPrefix += this.getString("prefRevoked")+" ";

2259

}

2260

2261

if (retStatusObj.statusFlags & nsIEnigmail.EXPIRED_KEY_SIGNATURE) {

2262

trustPrefix += this.getString("prefExpiredKey")+" ";

2263

2264

} else if (retStatusObj.statusFlags & nsIEnigmail.EXPIRED_SIGNATURE) {

2265

trustPrefix += this.getString("prefExpired")+" ";

2266

}

2267

2268

if (goodSignature) {

2269

retStatusObj.errorMsg = trustPrefix + this.getString("prefGood", [userId]) /* + ", " +

2270

this.getString("keyId") + " 0x" + keyId.substring(8,16); */

2271

} else {

2272

retStatusObj.errorMsg = trustPrefix + this.getString("prefBad", [userId]) /*+ ", " +

2273

this.getString("keyId") + " 0x" + keyId.substring(8,16); */

2274

if (!exitCode)

2275

exitCode = 1;

2276

}

2277

}

2278

2279

if (retStatusObj.statusFlags & nsIEnigmail.UNVERIFIED_SIGNATURE) {

2280

retStatusObj.keyId = this.extractPubkey(statusMsg)

2281

}

2282

2283

return exitCode;

2284

}

2285

2286

2287

if (retStatusObj.statusFlags & nsIEnigmail.BAD_PASSPHRASE) {

2288

// "Unremember" passphrase on decryption failure

2289

this.clearCachedPassphrase();

2290

}

2291

2292

var pubKeyId;

2293

2294

if (retStatusObj.statusFlags & nsIEnigmail.UNVERIFIED_SIGNATURE) {

2295

// Unverified signature

2296

retStatusObj.keyId = this.extractPubkey(statusMsg);

2297

2298

if (retStatusObj.statusFlags & nsIEnigmail.DECRYPTION_OKAY) {

2299

exitCode=0;

2300

}

2301

2302

}

2303

2304

if (exitCode != 0) {

2305

// Error processing

2306

this.DEBUG_LOG("enigmail.jsm: decryptMessageEnd: command execution exit code: "+exitCode+"\n");

2307

}

2308

2309

/* MOVED

2310

if (cmdErrorMsgObj.value) {

2311

errorMsgObj.value = this.agentType + " " + this.getString("cmdLine");

2312

errorMsgObj.value += "\n" + cmdLineObj.value;

2313

errorMsgObj.value += "\n" + cmdErrorMsgObj.value;

2314

}

2315

2316

return exitCode;

1980

2317

}

1981

2318

};

1982

2319

Older »