Files
shadowsocks-libev/tests/test_acl_cpp.cpp
T
Max Lv ee7539155d C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)
* Rename test_jconf.c to test_jconf_cpp.cpp

* Parse the config file on arenas

read_jconf now reads the file and builds the JSON tree in a scratch arena
that is released before it returns, and copies the parsed strings into one
process-lifetime arena instead of a malloc per string. parse_addr and the
config parser share one address splitter.

Port test_jconf to C++ and cover every field copied out of the parse tree,
a re-read, and the densest file the size limit accepts.

* tests: rename remaining C unit tests to .cpp (no content changes)

* tests: port remaining C unit tests to the C++ test harness

Convert acl, acl_literal, aead2022, base64, buffer, cache (legacy
reference), crypto, ipset, ipset_reference, json, netutils, ppbloom,
process, ref, ssurl and utils tests to test_helpers.hpp. ctest names are
unchanged; every assertion is kept. Build the ported sources with the
strict C++ warning set.

* Run clang-tidy on every ported test

The test regex skipped file names with digits (test_aead2022_cpp.cpp,
test_base64_cpp.cpp); include them, fix the two optional accesses it then
reports, and build test_jconf with the strict warning set.

* docs: per-connection RSS on Linux against the C relay

* test_jconf: check read_jconf results before using them
2026-10-15 10:17:23 +08:00

93 lines
2.4 KiB
C++

// SPDX-License-Identifier: GPL-3.0-or-later
// ACL file parsing (src/acl.cpp): invalid rules are discarded, valid ones
// still match.
#include <cstdio>
#include <cstdlib>
#include "acl.h"
#include "test_helpers.h"
#include "test_helpers.hpp"
extern "C" {
int verbose = 0;
}
namespace {
void test_invalid_regex_is_not_installed()
{
char path[4096];
FILE *f = test_tempfile(path, sizeof(path));
SS_CHECK(f != nullptr);
std::fprintf(f, "[black_list]\n");
std::fprintf(f, "[invalid\n");
std::fprintf(f, "^blocked\\.example$\n");
std::fprintf(f, "[outbound_block_list]\n");
std::fprintf(f, "[also-invalid\n");
std::fprintf(f, "^outbound\\.example$\n");
std::fclose(f);
SS_CHECK(init_acl(path) == 0);
SS_CHECK(acl_match_host("does-not-crash.example") == 0);
SS_CHECK(acl_match_host("blocked.example") == 1);
SS_CHECK(outbound_block_match_host("does-not-crash.example") == 0);
SS_CHECK(outbound_block_match_host("outbound.example") == 1);
free_acl();
std::remove(path);
}
void test_long_acl_line_is_discarded()
{
char path[4096];
FILE *f = test_tempfile(path, sizeof(path));
SS_CHECK(f != nullptr);
std::fprintf(f, "[black_list]\n");
for (int i = 0; i < 400; i++) {
std::fputc('a', f);
}
std::fprintf(f, "\n");
std::fprintf(f, "^kept\\.example$\n");
std::fclose(f);
SS_CHECK(init_acl(path) == 0);
SS_CHECK(acl_match_host("kept.example") == 1);
free_acl();
std::remove(path);
}
void test_invalid_cidr_is_discarded()
{
char path[4096];
FILE *f = test_tempfile(path, sizeof(path));
SS_CHECK(f != nullptr);
std::fprintf(f, "[black_list]\n");
std::fprintf(f, "1.2.3.0/999\n");
std::fprintf(f, "2.2.2.2/-1\n");
std::fprintf(f, "3.3.3.3/abc\n");
std::fprintf(f, "4.4.4.0/24\n");
std::fprintf(f, "^path/with/slash\\.example$\n");
std::fclose(f);
SS_CHECK(init_acl(path) == 0);
SS_CHECK(acl_match_host("1.2.3.1") == 0);
SS_CHECK(acl_match_host("2.2.2.2") == 0);
SS_CHECK(acl_match_host("3.3.3.3") == 0);
SS_CHECK(acl_match_host("4.4.4.8") == 1);
SS_CHECK(acl_match_host("path/with/slash.example") == 1);
free_acl();
std::remove(path);
}
} // namespace
int main()
{
SS_RUN(test_invalid_regex_is_not_installed);
SS_RUN(test_long_acl_line_is_discarded);
SS_RUN(test_invalid_cidr_is_discarded);
return 0;
}