mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-14 05:45:59 +03:00
120 lines
3.7 KiB
C++
120 lines
3.7 KiB
C++
/*
|
|
* ModSecurity, http://www.modsecurity.org/
|
|
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
|
|
*
|
|
* You may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* If any of the files related to licensing are missing or if you have any
|
|
* other questions related to licensing please contact Trustwave Holdings, Inc.
|
|
* directly using the email address security@modsecurity.org.
|
|
*
|
|
*/
|
|
|
|
#include "unit/unit_test.h"
|
|
|
|
#include <string.h>
|
|
|
|
#include <sstream>
|
|
#include <string>
|
|
|
|
#include "common/colors.h"
|
|
#include "src/utils.h"
|
|
|
|
namespace modsecurity_test {
|
|
|
|
|
|
std::string string_to_hex(const std::string& input) {
|
|
static const char* const lut = "0123456789ABCDEF";
|
|
size_t len = input.length();
|
|
|
|
std::string output;
|
|
output.reserve(2 * len);
|
|
for (size_t i = 0; i < len; ++i) {
|
|
const unsigned char c = input[i];
|
|
output.push_back(lut[c >> 4]);
|
|
output.push_back(lut[c & 15]);
|
|
}
|
|
return output;
|
|
}
|
|
|
|
|
|
void replaceAll(std::string *s, const std::string &search,
|
|
const char replace) {
|
|
for (size_t pos = 0; ; pos += 0) {
|
|
pos = s->find(search, pos);
|
|
if (pos == std::string::npos) {
|
|
break;
|
|
}
|
|
s->erase(pos, search.length());
|
|
s->insert(pos, &replace, 1);
|
|
}
|
|
}
|
|
|
|
|
|
std::string UnitTest::print() {
|
|
std::stringstream i;
|
|
|
|
i << KRED << "Test failed." << RESET;
|
|
i << " From: " << this->filename << std::endl;
|
|
i << "{" << std::endl;
|
|
i << " \"ret\": \"" << this->ret << "\"" << std::endl;
|
|
i << " \"type\": \"" << this->type << "\"" << std::endl;
|
|
i << " \"name\": \"" << this->name << "\"" << std::endl;
|
|
i << " \"input\": \"" << this->input << "\"" << std::endl;
|
|
i << " \"param\": \"" << this->param << "\"" << std::endl;
|
|
i << " \"output\": \"" << this->output << "\"" << std::endl;
|
|
i << "}" << std::endl;
|
|
if (this->ret != this->obtained) {
|
|
i << "Expecting: \"" << this->ret << "\" - returned: \"";
|
|
i << this->obtained << "\"" << std::endl;
|
|
}
|
|
if (this->output != this->obtainedOutput) {
|
|
i << "Expecting: \"" << ModSecurity::toHexIfNeeded(this->output) << "\" - returned: \"";
|
|
i << ModSecurity::toHexIfNeeded(this->obtainedOutput) << "\"" << std::endl;
|
|
}
|
|
|
|
return i.str();
|
|
}
|
|
|
|
|
|
UnitTest *UnitTest::from_yajl_node(yajl_val &node) {
|
|
size_t num_tests = node->u.object.len;
|
|
UnitTest *u = new UnitTest();
|
|
|
|
for (int i = 0; i < num_tests; i++) {
|
|
const char *key = node->u.object.keys[ i ];
|
|
yajl_val val = node->u.object.values[ i ];
|
|
|
|
|
|
if (strcmp(key, "param") == 0) {
|
|
u->param = YAJL_GET_STRING(val);
|
|
} else if (strcmp(key, "input") == 0) {
|
|
u->input = YAJL_GET_STRING(val);
|
|
replaceAll(&(u->input), "\\0", '\u0000');
|
|
replaceAll(&(u->input), "\\xe4", '\xe4');
|
|
replaceAll(&(u->input), "\\x03", '\x03');
|
|
replaceAll(&(u->input), "\\xbf", '\xbf');
|
|
replaceAll(&(u->input), "\\xc9", '\xc9');
|
|
replaceAll(&(u->input), "\\x3b", '\x3b');
|
|
replaceAll(&(u->input), "\\xFF", '\xff');
|
|
replaceAll(&(u->input), "\\u0000", '\u0000');
|
|
} else if (strcmp(key, "name") == 0) {
|
|
u->name = YAJL_GET_STRING(val);
|
|
} else if (strcmp(key, "type") == 0) {
|
|
u->type = YAJL_GET_STRING(val);
|
|
} else if (strcmp(key, "ret") == 0) {
|
|
u->ret = YAJL_GET_INTEGER(val);
|
|
} else if (strcmp(key, "output") == 0) {
|
|
u->output = YAJL_GET_STRING(val);
|
|
replaceAll(&(u->output), "\\u0000", '\u0000');
|
|
}
|
|
}
|
|
|
|
return u;
|
|
}
|
|
|
|
} // namespace modsecurity_test
|