iter: Add iteration mode where session is not busy

In order to use the session we are iterating on for other tasks
such as other C_FindObject() calls, we need to make sure that
it's not in the middle of a find operation. Finish up the
complete find operation in advance of returning objects from
a session.

Make this the default mode. The previous behavior remains
as an option. Add tests.

diff --git a/p11-kit/iter.c b/p11-kit/iter.c
index c1441652f0a43d10e7eafef9c787b14177b49d1c..1c2994dbfe18eaba401fde2f380d29f4dc5c9339 100644 (file)
--- a/p11-kit/iter.c
+++ b/p11-kit/iter.c
@@ -52,8 +52,6 @@ typedef struct _Callback {
        struct _Callback *next;
 } Callback;
 
-#define MAX_OBJECTS 64
-
 /**
  * P11KitIter:
  *
@@ -77,7 +75,8 @@ struct p11_kit_iter {
        CK_ULONG saw_slots;
 
        /* The results of C_FindObjects */
-       CK_OBJECT_HANDLE objects[MAX_OBJECTS];
+       CK_OBJECT_HANDLE *objects;
+       CK_ULONG max_objects;
        CK_ULONG num_objects;
        CK_ULONG saw_objects;
 
@@ -93,11 +92,13 @@ struct p11_kit_iter {
        int iterating : 1;
        int match_nothing : 1;
        int keep_session : 1;
+       int preload_results : 1;
 };
 
 /**
  * p11_kit_iter_new:
  * @uri: (allow-none): a PKCS\#11 URI to filter on, or %NULL
+ * @behavior: various behavior flags for iterator
  *
  * Create a new PKCS\#11 iterator for iterating over objects. Only
  * objects that match the @uri will be returned by the iterator.
@@ -111,7 +112,8 @@ struct p11_kit_iter {
  *          with p11_kit_iter_free()
  */
 P11KitIter *
-p11_kit_iter_new (P11KitUri *uri)
+p11_kit_iter_new (P11KitUri *uri,
+                  P11KitIterBehavior behavior)
 {
        P11KitIter *iter;
        CK_ATTRIBUTE *attrs;
@@ -149,6 +151,7 @@ p11_kit_iter_new (P11KitUri *uri)
        }
 
        iter->session_flags = CKF_SERIAL_SESSION;
+       iter->preload_results = !(behavior & P11_KIT_ITER_BUSY_SESSIONS);
 
        return iter;
 }
@@ -515,6 +518,7 @@ move_next_session (P11KitIter *iter)
 CK_RV
 p11_kit_iter_next (P11KitIter *iter)
 {
+       CK_ULONG batch;
        CK_ULONG count;
        CK_BBOOL matches;
        CK_RV rv;
@@ -566,20 +570,36 @@ p11_kit_iter_next (P11KitIter *iter)
                iter->num_objects = 0;
                iter->saw_objects = 0;
 
-               rv = (iter->module->C_FindObjects) (iter->session, iter->objects,
-                                                   MAX_OBJECTS, &iter->num_objects);
-               if (rv != CKR_OK)
-                       return finish_iterating (iter, rv);
-
-               /*
-                * Done searching on this session, although there are still
-                * objects outstanding, which will be returned on next
-                * iterations.
-                */
-               if (iter->num_objects != MAX_OBJECTS) {
-                       iter->searching = 0;
-                       iter->searched = 1;
-                       (iter->module->C_FindObjectsFinal) (iter->session);
+               for (;;) {
+                       if (iter->max_objects - iter->num_objects == 0) {
+                               iter->max_objects = iter->max_objects ? iter->max_objects * 2 : 64;
+                               iter->objects = realloc (iter->objects, iter->max_objects * sizeof (CK_ULONG));
+                               return_val_if_fail (iter->objects != NULL, CKR_HOST_MEMORY);
+                       }
+
+                       batch = iter->max_objects - iter->num_objects;
+                       rv = (iter->module->C_FindObjects) (iter->session,
+                                                           iter->objects + iter->num_objects,
+                                                           batch, &count);
+                       if (rv != CKR_OK)
+                               return finish_iterating (iter, rv);
+
+                       iter->num_objects += count;
+
+                       /*
+                        * Done searching on this session, although there are still
+                        * objects outstanding, which will be returned on next
+                        * iterations.
+                        */
+                       if (batch != count) {
+                               iter->searching = 0;
+                               iter->searched = 1;
+                               (iter->module->C_FindObjectsFinal) (iter->session);
+                               break;
+                       }
+
+                       if (!iter->preload_results)
+                               break;
                }
        }
 
@@ -635,7 +655,7 @@ p11_kit_iter_get_slot (P11KitIter *iter)
  * The session may be closed after the next p11_kit_iter_next() call
  * unless p11_kit_iter_keep_session() is called.
  *
- * Returns: the slot of the current matching object
+ * Returns: the session used to find the current matching object
  */
 CK_SESSION_HANDLE
 p11_kit_iter_get_session (P11KitIter *iter)
@@ -815,6 +835,7 @@ p11_kit_iter_free (P11KitIter *iter)
        finish_iterating (iter, CKR_OK);
        p11_array_free (iter->modules);
        p11_attrs_free (iter->match_attrs);
+       free (iter->objects);
        free (iter->slots);
 
        for (cb = iter->callbacks; cb != NULL; cb = next) {

diff --git a/p11-kit/iter.h b/p11-kit/iter.h
index 2b8727370ad8947a1087d76f3526e7b3031763ba..d8534ec2ff675a03b355d17a0bc011c5e39a4856 100644 (file)
--- a/p11-kit/iter.h
+++ b/p11-kit/iter.h
@@ -47,11 +47,16 @@ extern "C" {
 
 typedef struct p11_kit_iter P11KitIter;
 
+typedef enum {
+       P11_KIT_ITER_BUSY_SESSIONS = 1 << 1,
+} P11KitIterBehavior;
+
 typedef CK_RV      (* p11_kit_iter_callback)                (P11KitIter *iter,
                                                              CK_BBOOL *matches,
                                                              void *data);
 
-P11KitIter *          p11_kit_iter_new                      (P11KitUri *uri);
+P11KitIter *          p11_kit_iter_new                      (P11KitUri *uri,
+                                                             P11KitIterBehavior behavior);
 
 void                  p11_kit_iter_free                     (P11KitIter *iter);
 

diff --git a/p11-kit/tests/test-iter.c b/p11-kit/tests/test-iter.c
index 18b5ed6d7de000216b2d6522293d6d12c3a7e9ab..309a0ad8465631a0c1409b87997eb8b99f4260f1 100644 (file)
--- a/p11-kit/tests/test-iter.c
+++ b/p11-kit/tests/test-iter.c
@@ -38,6 +38,7 @@
 #define P11_KIT_FUTURE_UNSTABLE_API 1
 
 #include "attrs.h"
+#include "dict.h"
 #include "iter.h"
 #include "library.h"
 #include "message.h"
@@ -99,7 +100,7 @@ test_all (void)
 
        modules = initialize_and_get_modules ();
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, P11_KIT_ITER_BUSY_SESSIONS);
        p11_kit_iter_begin (iter, modules);
 
        at = 0;
@@ -183,7 +184,7 @@ test_callback (void)
 
        modules = initialize_and_get_modules ();
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_add_callback (iter, on_iter_callback, "callback", NULL);
        p11_kit_iter_begin (iter, modules);
 
@@ -228,7 +229,7 @@ test_callback_fails (void)
 
        modules = initialize_and_get_modules ();
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_add_callback (iter, on_callback_fail, "callback", NULL);
        p11_kit_iter_begin (iter, modules);
 
@@ -258,7 +259,7 @@ test_callback_destroyer (void)
        P11KitIter *iter;
        int value = 1;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_add_callback (iter, on_callback_fail, &value, on_destroy_increment);
        p11_kit_iter_free (iter);
 
@@ -283,7 +284,7 @@ test_with_session (void)
        rv = mock_C_OpenSession (MOCK_SLOT_ONE_ID, CKF_SERIAL_SESSION, NULL, NULL, &session);
        assert (rv == CKR_OK);
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &mock_module, 0, session);
 
        at= 0;
@@ -336,7 +337,7 @@ test_with_slot (void)
        rv = mock_module.C_Initialize (NULL);
        assert (rv == CKR_OK);
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &mock_module, MOCK_SLOT_ONE_ID, 0);
 
        at= 0;
@@ -382,7 +383,7 @@ test_with_module (void)
        rv = mock_module.C_Initialize (NULL);
        assert (rv == CKR_OK);
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &mock_module, 0, 0);
 
        at= 0;
@@ -423,7 +424,7 @@ test_keep_session (void)
        rv = mock_module.C_Initialize (NULL);
        assert (rv == CKR_OK);
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &mock_module, 0, 0);
 
        rv = p11_kit_iter_next (iter);
@@ -453,7 +454,7 @@ test_unrecognized (void)
 
        uri = p11_kit_uri_new ();
        p11_kit_uri_set_unrecognized (uri, 1);
-       iter = p11_kit_iter_new (uri);
+       iter = p11_kit_iter_new (uri, 0);
        p11_kit_uri_free (uri);
 
        p11_kit_iter_begin (iter, modules);
@@ -489,7 +490,7 @@ test_uri_with_type (void)
        ret = p11_kit_uri_parse ("pkcs11:object-type=public", P11_KIT_URI_FOR_OBJECT, uri);
        assert_num_eq (ret, P11_KIT_URI_OK);
 
-       iter = p11_kit_iter_new (uri);
+       iter = p11_kit_iter_new (uri, 0);
        p11_kit_uri_free (uri);
 
        p11_kit_iter_begin (iter, modules);
@@ -535,7 +536,7 @@ test_filter (void)
 
        modules = initialize_and_get_modules ();
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_add_filter (iter, attrs, 2);
 
        p11_kit_iter_begin (iter, modules);
@@ -575,7 +576,7 @@ test_session_flags (void)
 
        modules = initialize_and_get_modules ();
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_set_session_flags (iter, CKF_RW_SESSION);
 
        p11_kit_iter_begin (iter, modules);
@@ -616,7 +617,7 @@ test_module_match (void)
        ret = p11_kit_uri_parse ("pkcs11:library-description=MOCK%20LIBRARY", P11_KIT_URI_FOR_MODULE, uri);
        assert_num_eq (P11_KIT_URI_OK, ret);
 
-       iter = p11_kit_iter_new (uri);
+       iter = p11_kit_iter_new (uri, 0);
        p11_kit_uri_free (uri);
 
        p11_kit_iter_begin (iter, modules);
@@ -651,7 +652,7 @@ test_module_mismatch (void)
        ret = p11_kit_uri_parse ("pkcs11:library-description=blah", P11_KIT_URI_FOR_MODULE, uri);
        assert_num_eq (P11_KIT_URI_OK, ret);
 
-       iter = p11_kit_iter_new (uri);
+       iter = p11_kit_iter_new (uri, 0);
        p11_kit_uri_free (uri);
 
        p11_kit_iter_begin (iter, modules);
@@ -686,7 +687,7 @@ test_token_match (void)
        ret = p11_kit_uri_parse ("pkcs11:manufacturer=TEST%20MANUFACTURER", P11_KIT_URI_FOR_TOKEN, uri);
        assert_num_eq (P11_KIT_URI_OK, ret);
 
-       iter = p11_kit_iter_new (uri);
+       iter = p11_kit_iter_new (uri, 0);
        p11_kit_uri_free (uri);
 
        p11_kit_iter_begin (iter, modules);
@@ -721,7 +722,7 @@ test_token_mismatch (void)
        ret = p11_kit_uri_parse ("pkcs11:manufacturer=blah", P11_KIT_URI_FOR_TOKEN, uri);
        assert_num_eq (P11_KIT_URI_OK, ret);
 
-       iter = p11_kit_iter_new (uri);
+       iter = p11_kit_iter_new (uri, 0);
        p11_kit_uri_free (uri);
 
        p11_kit_iter_begin (iter, modules);
@@ -755,7 +756,7 @@ test_getslotlist_fail_first (void)
        memcpy (&module, &mock_module, sizeof (CK_FUNCTION_LIST));
        module.C_GetSlotList = mock_C_GetSlotList__fail_first;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &module, 0, 0);
 
        at= 0;
@@ -788,7 +789,7 @@ test_getslotlist_fail_late (void)
        memcpy (&module, &mock_module, sizeof (CK_FUNCTION_LIST));
        module.C_GetSlotList = mock_C_GetSlotList__fail_late;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &module, 0, 0);
 
        at= 0;
@@ -821,7 +822,7 @@ test_open_session_fail (void)
        memcpy (&module, &mock_module, sizeof (CK_FUNCTION_LIST));
        module.C_OpenSession = mock_C_OpenSession__fails;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &module, 0, 0);
 
        at= 0;
@@ -854,7 +855,7 @@ test_find_init_fail (void)
        memcpy (&module, &mock_module, sizeof (CK_FUNCTION_LIST));
        module.C_FindObjectsInit = mock_C_FindObjectsInit__fails;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &module, 0, 0);
 
        at= 0;
@@ -887,7 +888,7 @@ test_find_objects_fail (void)
        memcpy (&module, &mock_module, sizeof (CK_FUNCTION_LIST));
        module.C_FindObjects = mock_C_FindObjects__fails;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &module, 0, 0);
 
        at= 0;
@@ -923,7 +924,7 @@ test_load_attributes (void)
 
        modules = initialize_and_get_modules ();
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin (iter, modules);
 
        attrs = p11_attrs_buildn (NULL, types, 2);
@@ -981,7 +982,7 @@ test_load_attributes_none (void)
 
        memcpy (&module, &mock_module, sizeof (CK_FUNCTION_LIST));
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &module, 0, 0);
 
        while ((rv = p11_kit_iter_next (iter)) == CKR_OK) {
@@ -1015,7 +1016,7 @@ test_load_attributes_fail_first (void)
        memcpy (&module, &mock_module, sizeof (CK_FUNCTION_LIST));
        module.C_GetAttributeValue = mock_C_GetAttributeValue__fail_first;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &module, 0, 0);
 
        while ((rv = p11_kit_iter_next (iter)) == CKR_OK) {
@@ -1049,7 +1050,7 @@ test_load_attributes_fail_late (void)
        memcpy (&module, &mock_module, sizeof (CK_FUNCTION_LIST));
        module.C_GetAttributeValue = mock_C_GetAttributeValue__fail_late;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_begin_with (iter, &module, 0, 0);
 
        while ((rv = p11_kit_iter_next (iter)) == CKR_OK) {
@@ -1067,6 +1068,64 @@ test_load_attributes_fail_late (void)
        assert (rv == CKR_OK);
 }
 
+static void
+test_many (void *flags)
+{
+       P11KitIterBehavior behavior;
+       CK_SESSION_HANDLE session;
+       CK_OBJECT_HANDLE handle;
+       p11_dict *seen;
+       P11KitIter *iter;
+       CK_RV rv;
+       int count;
+       int i;
+
+       static CK_OBJECT_CLASS data = CKO_DATA;
+       static CK_ATTRIBUTE object[] = {
+               { CKA_VALUE, "blah", 4 },
+               { CKA_CLASS, &data, sizeof (data) },
+               { CKA_ID, "ID1", 3 },
+               { CKA_INVALID },
+       };
+
+       behavior = 0;
+       if (strstr (flags, "busy-sessions"))
+               behavior |= P11_KIT_ITER_BUSY_SESSIONS;
+
+       mock_module_reset ();
+       rv = mock_module.C_Initialize (NULL);
+       assert_num_eq (rv, CKR_OK);
+
+       rv = mock_C_OpenSession (MOCK_SLOT_ONE_ID, CKF_SERIAL_SESSION, NULL, NULL, &session);
+       assert_num_eq (rv, CKR_OK);
+
+       for (i = 0; i < 10000; i++)
+               mock_module_add_object (MOCK_SLOT_ONE_ID, object);
+
+       seen = p11_dict_new (p11_dict_ulongptr_hash, p11_dict_ulongptr_equal, free, NULL);
+       iter = p11_kit_iter_new (NULL, behavior);
+       p11_kit_iter_add_filter (iter, object, 3);
+       p11_kit_iter_begin_with (iter, &mock_module, 0, session);
+
+       count = 0;
+       while ((rv = p11_kit_iter_next (iter)) == CKR_OK) {
+               handle = p11_kit_iter_get_object (iter);
+               assert (p11_dict_get (seen, &handle) == NULL);
+               if (!p11_dict_set (seen, memdup (&handle, sizeof (handle)), "x"))
+                       assert_not_reached ();
+               count++;
+       }
+
+       assert_num_eq (rv, CKR_CANCEL);
+       assert_num_eq (count, 10000);
+
+       p11_kit_iter_free (iter);
+       p11_dict_free (seen);
+
+       rv = mock_module.C_Finalize (NULL);
+       assert (rv == CKR_OK);
+}
+
 int
 main (int argc,
       char *argv[])
@@ -1099,6 +1158,8 @@ main (int argc,
        p11_test (test_load_attributes_none, "/iter/test_load_attributes_none");
        p11_test (test_load_attributes_fail_first, "/iter/test_load_attributes_fail_first");
        p11_test (test_load_attributes_fail_late, "/iter/test_load_attributes_fail_late");
+       p11_testx (test_many, "", "/iter/test-many");
+       p11_testx (test_many, "busy-sessions", "/iter/test-many-busy");
 
        return p11_test_run (argc, argv);
 }

diff --git a/trust/extract-info.c b/trust/extract-info.c
index 133b1cd7f84be649146bad59dd1047bf9f08443c..a645d310121b54e89237c8bfea00b1fe3eac8fef 100644 (file)
--- a/trust/extract-info.c
+++ b/trust/extract-info.c
@@ -51,7 +51,7 @@
 
 static p11_dict *
 load_stapled_extensions (CK_FUNCTION_LIST_PTR module,
-                         CK_SLOT_ID slot_id,
+                         CK_SESSION_HANDLE session,
                          CK_ATTRIBUTE *id)
 {
        CK_OBJECT_CLASS extension = CKO_X_CERTIFICATE_EXTENSION;
@@ -79,9 +79,9 @@ load_stapled_extensions (CK_FUNCTION_LIST_PTR module,
        if (!id->pValue || !id->ulValueLen)
                return stapled;
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_add_filter (iter, match, 2);
-       p11_kit_iter_begin_with (iter, module, slot_id, 0);
+       p11_kit_iter_begin_with (iter, module, 0, session);
 
        while (rv == CKR_OK) {
                rv = p11_kit_iter_next (iter);
@@ -291,7 +291,7 @@ extract_info (P11KitIter *iter,
        attr = p11_attrs_find_valid (ex->attrs, CKA_ID);
        if (attr) {
                ex->stapled = load_stapled_extensions (p11_kit_iter_get_module (iter),
-                                                      p11_kit_iter_get_slot (iter),
+                                                      p11_kit_iter_get_session (iter),
                                                       attr);
                if (!ex->stapled)
                        return false;

diff --git a/trust/extract.c b/trust/extract.c
index 10f45df13f40328eddb47310a43c501e04f934a7..d5ceb1389fb64856082adb19a2395b2876ce6f4d 100644 (file)
--- a/trust/extract.c
+++ b/trust/extract.c
@@ -440,7 +440,7 @@ p11_trust_extract (int argc,
 
        limit_modules_if_necessary (modules, ex.flags);
 
-       iter = p11_kit_iter_new (uri);
+       iter = p11_kit_iter_new (uri, 0);
 
        p11_kit_iter_add_callback (iter, p11_extract_info_load_filter, &ex, NULL);
        p11_kit_iter_add_filter (iter, match, p11_attrs_count (match));

diff --git a/trust/tests/frob-nss-trust.c b/trust/tests/frob-nss-trust.c
index a81b5e2730df8e365d47b1937894900eb6720b96..fd74db760dfb263b10e59ed4c0ac885795bee597 100644 (file)
--- a/trust/tests/frob-nss-trust.c
+++ b/trust/tests/frob-nss-trust.c
@@ -108,7 +108,7 @@ dump_trust_module (const char *path)
        rv = p11_kit_module_initialize (module);
        return_val_if_fail (rv == CKR_OK, 1);
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_add_filter (iter, &match, 1);
        p11_kit_iter_begin_with (iter, module, 0, 0);
 
@@ -168,7 +168,7 @@ compare_trust_modules (const char *path1,
        rv = p11_kit_module_initialize (module2);
        return_val_if_fail (rv == CKR_OK, 1);
 
-       iter = p11_kit_iter_new (NULL);
+       iter = p11_kit_iter_new (NULL, 0);
        p11_kit_iter_add_filter (iter, &match, 1);
        p11_kit_iter_begin_with (iter, module1, 0, 0);
 
@@ -182,7 +182,7 @@ compare_trust_modules (const char *path1,
                p11_attrs_purge (check);
 
                /* Check that this object exists */
-               iter2 = p11_kit_iter_new (NULL);
+               iter2 = p11_kit_iter_new (NULL, 0);
                p11_kit_iter_add_filter (iter2, check, p11_attrs_count (check));
                p11_kit_iter_begin_with (iter2, module2, 0, 0);
                rv = p11_kit_iter_next (iter2);

diff --git a/trust/tests/test-bundle.c b/trust/tests/test-bundle.c
index bff135ea34368102210ea6d5c80943b07e1e4f7f..10f89d2a86eab83649ff7ba98072daaba0473252 100644 (file)
--- a/trust/tests/test-bundle.c
+++ b/trust/tests/test-bundle.c
@@ -74,7 +74,7 @@ setup (void *unused)
        rv = test.module.C_Initialize (NULL);
        assert_num_eq (CKR_OK, rv);
 
-       test.iter = p11_kit_iter_new (NULL);
+       test.iter = p11_kit_iter_new (NULL, 0);
 
        p11_extract_info_init (&test.ex);
 

diff --git a/trust/tests/test-cer.c b/trust/tests/test-cer.c
index c48a5ab6d9f9f60daaeb9d252659e5940400652d..fc4d0079e60ce7e0dd93f29d5601bae66b3b7bfd 100644 (file)
--- a/trust/tests/test-cer.c
+++ b/trust/tests/test-cer.c
@@ -74,7 +74,7 @@ setup (void *unused)
        rv = test.module.C_Initialize (NULL);
        assert_num_eq (CKR_OK, rv);
 
-       test.iter = p11_kit_iter_new (NULL);
+       test.iter = p11_kit_iter_new (NULL, 0);
 
        p11_extract_info_init (&test.ex);
 

diff --git a/trust/tests/test-extract.c b/trust/tests/test-extract.c
index e8609962edf8e985d621c7f0c7c6504b9a3bffff..b121b214ffb672d2af7e7659b4d445c2827a9fd2 100644 (file)
--- a/trust/tests/test-extract.c
+++ b/trust/tests/test-extract.c
@@ -154,7 +154,7 @@ setup (void *unused)
        rv = test.module.C_Initialize (NULL);
        assert_num_eq (CKR_OK, rv);
 
-       test.iter = p11_kit_iter_new (NULL);
+       test.iter = p11_kit_iter_new (NULL, 0);
 
        p11_extract_info_init (&test.ex);
 }

diff --git a/trust/tests/test-openssl.c b/trust/tests/test-openssl.c
index 74798126fa9443c7cbc3de8f44735dc5c1cad322..93f8692051bb364516d21127d3a604a3f2e72507 100644 (file)
--- a/trust/tests/test-openssl.c
+++ b/trust/tests/test-openssl.c
@@ -78,7 +78,7 @@ setup (void *unused)
        rv = test.module.C_Initialize (NULL);
        assert_num_eq (CKR_OK, rv);
 
-       test.iter = p11_kit_iter_new (NULL);
+       test.iter = p11_kit_iter_new (NULL, 0);
 
        p11_extract_info_init (&test.ex);