mirror of
https://github.com/shadowsocks/shadowsocks-libev.git
synced 2026-10-27 03:03:43 +00:00
Max Lv
5559eec939
* harden security-sensitive input handling * enable ctest failure checks in ci * add valgrind leak smoke tests * split tests into separate workflow
97 lines
2.2 KiB
C
97 lines
2.2 KiB
C
#include <assert.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
|
|
#include "acl.h"
|
|
|
|
int verbose = 0;
|
|
|
|
static void
|
|
test_invalid_regex_is_not_installed(void)
|
|
{
|
|
char path[] = "/tmp/ss_acl_test.XXXXXX";
|
|
int fd = mkstemp(path);
|
|
assert(fd >= 0);
|
|
|
|
FILE *f = fdopen(fd, "w");
|
|
assert(f != NULL);
|
|
fprintf(f, "[black_list]\n");
|
|
fprintf(f, "[invalid\n");
|
|
fprintf(f, "^blocked\\.example$\n");
|
|
fprintf(f, "[outbound_block_list]\n");
|
|
fprintf(f, "[also-invalid\n");
|
|
fprintf(f, "^outbound\\.example$\n");
|
|
fclose(f);
|
|
|
|
assert(init_acl(path) == 0);
|
|
assert(acl_match_host("does-not-crash.example") == 0);
|
|
assert(acl_match_host("blocked.example") == 1);
|
|
assert(outbound_block_match_host("does-not-crash.example") == 0);
|
|
assert(outbound_block_match_host("outbound.example") == 1);
|
|
free_acl();
|
|
|
|
unlink(path);
|
|
}
|
|
|
|
static void
|
|
test_long_acl_line_is_discarded(void)
|
|
{
|
|
char path[] = "/tmp/ss_acl_test.XXXXXX";
|
|
int fd = mkstemp(path);
|
|
assert(fd >= 0);
|
|
|
|
FILE *f = fdopen(fd, "w");
|
|
assert(f != NULL);
|
|
fprintf(f, "[black_list]\n");
|
|
for (int i = 0; i < 400; i++) {
|
|
fputc('a', f);
|
|
}
|
|
fprintf(f, "\n");
|
|
fprintf(f, "^kept\\.example$\n");
|
|
fclose(f);
|
|
|
|
assert(init_acl(path) == 0);
|
|
assert(acl_match_host("kept.example") == 1);
|
|
free_acl();
|
|
|
|
unlink(path);
|
|
}
|
|
|
|
static void
|
|
test_invalid_cidr_is_discarded(void)
|
|
{
|
|
char path[] = "/tmp/ss_acl_test.XXXXXX";
|
|
int fd = mkstemp(path);
|
|
assert(fd >= 0);
|
|
|
|
FILE *f = fdopen(fd, "w");
|
|
assert(f != NULL);
|
|
fprintf(f, "[black_list]\n");
|
|
fprintf(f, "1.2.3.0/999\n");
|
|
fprintf(f, "2.2.2.2/-1\n");
|
|
fprintf(f, "3.3.3.3/abc\n");
|
|
fprintf(f, "4.4.4.0/24\n");
|
|
fprintf(f, "^path/with/slash\\.example$\n");
|
|
fclose(f);
|
|
|
|
assert(init_acl(path) == 0);
|
|
assert(acl_match_host("1.2.3.1") == 0);
|
|
assert(acl_match_host("2.2.2.2") == 0);
|
|
assert(acl_match_host("3.3.3.3") == 0);
|
|
assert(acl_match_host("4.4.4.8") == 1);
|
|
assert(acl_match_host("path/with/slash.example") == 1);
|
|
free_acl();
|
|
|
|
unlink(path);
|
|
}
|
|
|
|
int
|
|
main(void)
|
|
{
|
|
test_invalid_regex_is_not_installed();
|
|
test_long_acl_line_is_discarded();
|
|
test_invalid_cidr_is_discarded();
|
|
return 0;
|
|
}
|