Implement Mac Keychain migration algorithm.

crypto/mock_apple_keychain_mac.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/logging.h"
 #include "base/time/time.h"
 #include "crypto/mock_apple_keychain.h"
 
 namespace crypto {
 
 // static
 const SecKeychainSearchRef MockAppleKeychain::kDummySearchRef =
     reinterpret_cast<SecKeychainSearchRef>(1000);
 
 MockAppleKeychain::MockAppleKeychain()
-    : next_item_key_(0),
+    : locked_(false),
+      next_item_key_(0),
       search_copy_count_(0),
       keychain_item_copy_count_(0),
       attribute_data_copy_count_(0),
       find_generic_result_(noErr),
       called_add_generic_(false),
       password_data_count_(0) {}
 
 void MockAppleKeychain::InitializeKeychainData(MockKeychainItemType key) const {
   UInt32 tags[] = { kSecAccountItemAttr,
                     kSecServerItemAttr,
@@ skipping 161 matching lines @@
     SecKeychainAttributeList** attrList,
     UInt32* length,
     void** outData) const {
   DCHECK(itemRef);
   MockKeychainItemType key =
       reinterpret_cast<MockKeychainItemType>(itemRef) - 1;
   if (keychain_attr_list_.find(key) == keychain_attr_list_.end())
     return errSecInvalidItemRef;
 
   DCHECK(!itemClass);  // itemClass not implemented in the Mock.
+  if (locked_ && outData)
+    return errSecAuthFailed;
+
   if (attrList)
     *attrList  = &(keychain_attr_list_[key]);
   if (outData) {
     *outData = keychain_data_[key].data;
     DCHECK(length);
     *length = keychain_data_[key].length;
   }
 
   ++attribute_data_copy_count_;
   return noErr;
 }
 
 OSStatus MockAppleKeychain::ItemModifyAttributesAndData(
     SecKeychainItemRef itemRef,
     const SecKeychainAttributeList* attrList,
     UInt32 length,
     const void* data) const {
   DCHECK(itemRef);
+  if (locked_)
+    return errSecAuthFailed;
   const char* fail_trigger = "fail_me";
   if (length == strlen(fail_trigger) &&
       memcmp(data, fail_trigger, length) == 0) {
     return errSecAuthFailed;
   }
 
   MockKeychainItemType key =
       reinterpret_cast<MockKeychainItemType>(itemRef) - 1;
   if (keychain_attr_list_.find(key) == keychain_attr_list_.end())
     return errSecInvalidItemRef;
@@ skipping 15 matching lines @@
 }
 
 OSStatus MockAppleKeychain::ItemFreeAttributesAndData(
     SecKeychainAttributeList* attrList,
     void* data) const {
   --attribute_data_copy_count_;
   return noErr;
 }
 
 OSStatus MockAppleKeychain::ItemDelete(SecKeychainItemRef itemRef) const {
+  if (locked_)
+    return errSecAuthFailed;
   MockKeychainItemType key =
       reinterpret_cast<MockKeychainItemType>(itemRef) - 1;
 
   for (unsigned int i = 0; i < keychain_attr_list_[key].count; ++i) {
     if (keychain_attr_list_[key].attr[i].data)
       free(keychain_attr_list_[key].attr[i].data);
   }
   free(keychain_attr_list_[key].attr);
   if (keychain_data_[key].data)
     free(keychain_data_[key].data);
@@ skipping 122 matching lines @@
     UInt32 accountNameLength,
     const char* accountName,
     UInt32 pathLength,
     const char* path,
     UInt16 port,
     SecProtocolType protocol,
     SecAuthenticationType authenticationType,
     UInt32 passwordLength,
     const void* passwordData,
     SecKeychainItemRef* itemRef) const {
+  if (locked_)
+    return errSecAuthFailed;
 
   // Check for the magic duplicate item trigger.
   if (strcmp(serverName, "some.domain.com") == 0)
     return errSecDuplicateItem;
 
   // If the account already exists in the keychain, we don't add it.
   if (AlreadyContainsInternetPassword(serverNameLength, serverName,
                                       securityDomainLength, securityDomain,
                                       accountNameLength, accountName,
                                       pathLength, path,
@@ skipping 97 matching lines @@
   SetTestDataPort(key, item_data.port);
   SetTestDataString(key, kSecSecurityDomainItemAttr,
                     item_data.security_domain);
   SetTestDataString(key, kSecCreationDateItemAttr, item_data.creation_date);
   SetTestDataString(key, kSecAccountItemAttr, item_data.username);
   SetTestDataPasswordString(key, item_data.password);
   SetTestDataNegativeItem(key, item_data.negative_item);
 }
 
 }  // namespace crypto