xca/widgets/ImportMulti.cpp
Christian Hohnstaedt fc0191a512 Disable Public key import when displaying key of cert
Importing the displayed public key of a certificate during
certificate import resulted in a double free.

The "import" flag of the key-details can now forcefully
disable the import button.

Fixing it was way more complex than simply disabling it.

Also add sanity checks for pointers that are not our childs
when creating the QModelIndex
2023-10-08 22:19:18 +02:00

363 lines
7.9 KiB
C++

/* vi: set sw=4 ts=4:
*
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
*
* All rights reserved.
*/
#include "ImportMulti.h"
#include "XcaWarning.h"
#include "MainWindow.h"
#include "lib/pki_base.h"
#include "lib/pki_pkcs7.h"
#include "lib/pki_pkcs12.h"
#include "lib/pki_crl.h"
#include "lib/pki_multi.h"
#include "lib/pki_scard.h"
#include "lib/pki_evp.h"
#include "lib/pki_temp.h"
#include "CrlDetail.h"
#include "CertDetail.h"
#include "KeyDetail.h"
#include <QPushButton>
#include <QMessageBox>
#include <QLabel>
#include <QInputDialog>
#include <QUrl>
#include <QMimeData>
#include <typeinfo>
ImportMulti::ImportMulti(QWidget *w)
: QDialog(w && w->isVisible() ? w : nullptr)
{
setupUi(this);
setWindowTitle(XCA_TITLE);
image->setPixmap(QPixmap(":certImg"));
listView->setEditTriggers(QAbstractItemView::NoEditTriggers);
mcont = new db_token();
listView->setModel(mcont);
listView->setIconSize(QPixmap(":key").size());
listView->setSelectionMode(QAbstractItemView::ExtendedSelection);
connect( listView, SIGNAL(doubleClicked(const QModelIndex &)),
this, SLOT(on_butDetails_clicked()));
deleteToken->hide();
renameToken->hide();
slotInfo->hide();
setAcceptDrops(true);
setWindowModality(Qt::WindowModal);
}
void ImportMulti::tokenInfo(const slotid &s)
{
slot = s;
mcont->setSlot(slot);
deleteToken->show();
renameToken->show();
slotInfo->show();
listView->setEditTriggers(QAbstractItemView::EditKeyPressed);
pkcs11 p11;
QString info = p11.driverInfo(slot);
tkInfo ti = p11.tokenInfo(slot);
info += tr("\nName: %1\nModel: %2\nSerial: %3").
arg(ti.label()).arg(ti.model()).arg(ti.serial());
slotInfo->setText(info);
image->setPixmap(QPixmap(":scardImg"));
heading->setText(tr("Manage security token"));
setAcceptDrops(false);
}
void ImportMulti::addItem(pki_base *pki)
{
if (!pki)
return;
if (pki->pkiSource == unknown)
pki->pkiSource = imported;
pki_multi *pm = dynamic_cast<pki_multi*>(pki);
if (pm) {
QList<pki_base*> items = pm->pull();
foreach(pki_base *inner, items)
addItem(inner);
delete pm;
return;
}
if (Database.isOpen()) {
pki_x509 *cert = dynamic_cast<pki_x509 *>(pki);
pki_crl *crl = dynamic_cast<pki_crl *>(pki);
pki_x509super *cert_or_req = dynamic_cast<pki_x509super *>(pki);
if (cert)
cert->setSigner(cert->findIssuer());
if (cert_or_req)
cert_or_req->lookupKey();
if (crl)
crl->lookupIssuer();
}
if (!dynamic_cast<pki_key*>(pki) &&
!dynamic_cast<pki_x509name*>(pki))
{
XCA_WARN(tr("The type of the item '%1' is not recognized").
arg(pki->getClassName()));
delete pki;
return;
}
mcont->inToCont(pki);
mcont->rename_token_in_database(dynamic_cast<pki_scard*>(pki));
}
bool ImportMulti::openDB() const
{
if (!Database.isOpen()) {
if (mainwin->init_database(QString()) == 2)
return false;
if (!Database.isOpen())
mainwin->load_database();
}
return Database.isOpen();
}
void ImportMulti::dragEnterEvent(QDragEnterEvent *event)
{
if (event->mimeData()->hasUrls())
event->acceptProposedAction();
}
void ImportMulti::dropEvent(QDropEvent *event)
{
QList<QUrl> urls = event->mimeData()->urls();
QUrl u;
QStringList failed;
pki_multi *pki = new pki_multi();
foreach(u, urls)
pki->probeAnything(u.toLocalFile());
failed << pki->failed_files;
importError(failed);
addItem(pki);
event->acceptProposedAction();
}
void ImportMulti::on_butRemove_clicked()
{
QItemSelectionModel *selectionModel = listView->selectionModel();
QModelIndexList indexes = selectionModel->selectedIndexes();
QModelIndex index;
QString items;
foreach(index, indexes) {
if (index.column() != 0)
continue;
mcont->remFromCont(index);
pki_base *pki = db_base::fromIndex(index);
delete pki;
}
if (mcont->rowCount(QModelIndex()) == 0)
accept();
}
void ImportMulti::on_butOk_clicked()
{
QModelIndexList indexes;
for (int i = 0; i < mcont->rowCount(); i++)
indexes << mcont->index(i, 0, QModelIndex());
importIndexes(indexes);
}
void ImportMulti::on_butImport_clicked()
{
QItemSelectionModel *selectionModel = listView->selectionModel();
importIndexes(selectionModel->selectedIndexes());
}
void ImportMulti::importIndexes(const QModelIndexList &indexes)
{
if (!openDB())
return;
Transaction;
if (!TransBegin())
return;
foreach(QModelIndex index, indexes) {
import(index);
}
TransCommit();
if (mcont->rowCount(QModelIndex()) == 0)
accept();
}
void ImportMulti::on_deleteToken_clicked()
{
QItemSelectionModel *selectionModel = listView->selectionModel();
QModelIndexList indexes = selectionModel->selectedIndexes();
QModelIndex index;
QString items;
foreach(index, indexes) {
if (index.column() != 0)
continue;
pki_base *pki = db_base::fromIndex(index);
try {
pki->deleteFromToken(slot);
mcont->remFromCont(index);
delete pki;
} catch (errorEx &err) {
XCA_ERROR(err);
}
}
}
void ImportMulti::on_renameToken_clicked()
{
QItemSelectionModel *selectionModel = listView->selectionModel();
QModelIndexList indexes = selectionModel->selectedIndexes();
QModelIndex index;
foreach(index, indexes) {
if (index.column() != 0)
continue;
listView->edit(index);
break;
}
}
pki_base *ImportMulti::import(const QModelIndex &idx)
{
return idx.column() == 0 ? import(mcont->fromIndex(idx)) : nullptr;
}
pki_base *ImportMulti::import(pki_base *pki)
{
if (!pki || pki->getSqlItemId().isValid())
return NULL;
QModelIndex idx = mcont->index(pki);
if (idx.isValid())
mcont->remFromCont(idx);
if (!Database.isOpen()) {
try {
Database.open_default();
} catch(...) {
XCA_INFO(tr("Could not open the default database"));
};
}
if (!Database.isOpen()) {
delete pki;
return NULL;
}
return Database.insert(pki);
}
void ImportMulti::on_butDetails_clicked()
{
QItemSelectionModel *selectionModel = listView->selectionModel();
if (selectionModel->selectedIndexes().count())
showDetail(selectionModel->selectedIndexes().first());
if (mcont->rowCount(QModelIndex()) == 0)
accept();
}
void ImportMulti::showDetail(const QModelIndex &idx)
{
showDetail(db_base::fromIndex(idx));
}
void ImportMulti::showDetail(pki_base *pki)
{
if (pki) try {
pki_x509super *pki_super = dynamic_cast<pki_x509super*>(pki);
if (pki_super) {
CertDetail::showCert(this, pki_super);
return;
}
pki_key *key = dynamic_cast<pki_key*>(pki);
if (key) {
KeyDetail::showKey(this, key);
return;
}
pki_crl *crl = dynamic_cast<pki_crl*>(pki);
if (crl) {
CrlDetail::showCrl(this, crl);
return;
}
pki_temp *temp = dynamic_cast<pki_temp*>(pki);
if (temp) {
XCA_WARN(tr("Details of the item '%1' cannot be shown")
.arg("XCA template"));
return;
}
XCA_WARN(tr("The type of the item '%1' is not recognized").
arg(pki->getClassName()));
}
catch (errorEx &err) {
XCA_ERROR(err);
}
}
ImportMulti::~ImportMulti()
{
QModelIndex idx = listView->currentIndex();
while (idx != QModelIndex()) {
mcont->remFromCont(idx);
delete db_base::fromIndex(idx);
idx = listView->currentIndex();
}
listView->setModel(NULL);
delete mcont;
}
int ImportMulti::entries()
{
return mcont->allItemsCount();
}
void ImportMulti::importError(QStringList failed)
{
if (failed.count() == 1) {
XCA_INFO(tr("The file '%1' did not contain PKI data").
arg(failed[0]));
} else if (failed.count() > 1) {
XCA_INFO(tr("The %1 files: '%2' did not contain PKI data").
arg(failed.count()).
arg(failed.join("', '")));
}
}
void ImportMulti::execute(int force, QStringList failed)
{
importError(failed);
/* if there is nothing to import don't pop up */
if (entries() == 0) {
accept();
return;
}
/* if there is only 1 item and force is 0 import it silently */
if (entries() == 1) {
QModelIndex idx = mcont->index(0, 0, QModelIndex());
if (force == 0 && openDB()) {
pki_base *pki = import(idx);
if (pki && !Settings["suppress_messages"])
XCA_INFO(pki->getMsg(pki_base::msg_import).
arg(pki->getIntName()));
} else {
showDetail(idx);
}
return;
}
/* the behaviour for more than one item */
exec();
}