private.c 28 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932
  1. /* Copyright (c) 2015-2017 the Civetweb developers
  2. *
  3. * Permission is hereby granted, free of charge, to any person obtaining a copy
  4. * of this software and associated documentation files (the "Software"), to deal
  5. * in the Software without restriction, including without limitation the rights
  6. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  7. * copies of the Software, and to permit persons to whom the Software is
  8. * furnished to do so, subject to the following conditions:
  9. *
  10. * The above copyright notice and this permission notice shall be included in
  11. * all copies or substantial portions of the Software.
  12. *
  13. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  14. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  15. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
  16. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  17. * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  18. * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  19. * THE SOFTWARE.
  20. */
  21. /**
  22. * We include the source file so that we have access to the internal private
  23. * static functions
  24. */
  25. #ifdef _MSC_VER
  26. #ifndef _CRT_SECURE_NO_WARNINGS
  27. #define _CRT_SECURE_NO_WARNINGS
  28. #endif
  29. #define CIVETWEB_API static
  30. #endif
  31. #ifdef REPLACE_CHECK_FOR_LOCAL_DEBUGGING
  32. #undef MEMORY_DEBUGGING
  33. #endif
  34. #include "../src/civetweb.c"
  35. #include <stdlib.h>
  36. #include <time.h>
  37. #include "private.h"
  38. /* This unit test file uses the excellent Check unit testing library.
  39. * The API documentation is available here:
  40. * http://check.sourceforge.net/doc/check_html/index.html
  41. */
  42. static char tmp_parse_buffer[1024];
  43. static int
  44. test_parse_http_response(char *buf, int len, struct mg_response_info *ri)
  45. {
  46. ck_assert_int_lt(len, (int)sizeof(tmp_parse_buffer));
  47. memcpy(tmp_parse_buffer, buf, (size_t)len);
  48. return parse_http_response(tmp_parse_buffer, len, ri);
  49. }
  50. static int
  51. test_parse_http_request(char *buf, int len, struct mg_request_info *ri)
  52. {
  53. ck_assert_int_lt(len, (int)sizeof(tmp_parse_buffer));
  54. memcpy(tmp_parse_buffer, buf, (size_t)len);
  55. return parse_http_request(tmp_parse_buffer, len, ri);
  56. }
  57. START_TEST(test_parse_http_message)
  58. {
  59. /* Adapted from unit_test.c */
  60. /* Copyright (c) 2013-2015 the Civetweb developers */
  61. /* Copyright (c) 2004-2013 Sergey Lyubka */
  62. struct mg_request_info ri;
  63. struct mg_response_info respi;
  64. char empty[] = "";
  65. char space[] = " \x00";
  66. char req1[] = "GET / HTTP/1.1\r\n\r\n";
  67. char req2[] = "BLAH / HTTP/1.1\r\n\r\n";
  68. char req3[] = "GET / HTTP/1.1\nKey: Val\n\n";
  69. char req4[] =
  70. "GET / HTTP/1.1\r\nA: foo bar\r\nB: bar\r\nskip\r\nbaz:\r\n\r\n";
  71. char req5[] = "GET / HTTP/1.0\n\n";
  72. char req6[] = "G";
  73. char req7[] = " blah ";
  74. char req8[] = "HTTP/1.0 404 Not Found\n\n";
  75. char req9[] = "HTTP/1.1 200 OK\r\nConnection: close\r\n\r\n";
  76. char req10[] = "GET / HTTP/1.1\r\nA: foo bar\r\nB: bar\r\n\r\n";
  77. char req11[] = "GET /\r\nError: X\r\n\r\n";
  78. char req12[] =
  79. "POST /a/b/c.d?e=f&g HTTP/1.1\r\nKey1: val1\r\nKey2: val2\r\n\r\nBODY";
  80. int lenreq1 = (int)strlen(req1);
  81. int lenreq2 = (int)strlen(req2);
  82. int lenreq3 = (int)strlen(req3);
  83. int lenreq4 = (int)strlen(req4);
  84. int lenreq5 = (int)strlen(req5);
  85. int lenreq6 = (int)strlen(req6);
  86. int lenreq7 = (int)strlen(req7);
  87. int lenreq8 = (int)strlen(req8);
  88. int lenreq9 = (int)strlen(req9);
  89. int lenreq10 = (int)strlen(req10);
  90. int lenreq11 = (int)strlen(req11);
  91. int lenreq12 = (int)strlen(req12);
  92. int lenhdr12 = lenreq12 - 4; /* length without body */
  93. /* An empty string is neither a complete request nor a complete
  94. * response, so it must return 0 */
  95. ck_assert_int_eq(0, get_http_header_len(empty, 0));
  96. ck_assert_int_eq(0, test_parse_http_request(empty, 0, &ri));
  97. ck_assert_int_eq(0, test_parse_http_response(empty, 0, &respi));
  98. /* Same is true for a leading space */
  99. ck_assert_int_eq(0, get_http_header_len(space, 1));
  100. ck_assert_int_eq(0, test_parse_http_request(space, 1, &ri));
  101. ck_assert_int_eq(0, test_parse_http_response(space, 1, &respi));
  102. /* But a control character (like 0) makes it invalid */
  103. ck_assert_int_eq(-1, get_http_header_len(space, 2));
  104. ck_assert_int_eq(-1, test_parse_http_request(space, 2, &ri));
  105. ck_assert_int_eq(-1, test_parse_http_response(space, 2, &respi));
  106. /* req1 minus 1 byte at the end is incomplete */
  107. ck_assert_int_eq(0, get_http_header_len(req1, lenreq1 - 1));
  108. /* req1 minus 1 byte at the start is complete but invalid */
  109. ck_assert_int_eq(lenreq1 - 1, get_http_header_len(req1 + 1, lenreq1 - 1));
  110. ck_assert_int_eq(-1, test_parse_http_request(req1 + 1, lenreq1 - 1, &ri));
  111. /* req1 is a valid request */
  112. ck_assert_int_eq(lenreq1, get_http_header_len(req1, lenreq1));
  113. ck_assert_int_eq(-1, test_parse_http_response(req1, lenreq1, &respi));
  114. ck_assert_int_eq(lenreq1, test_parse_http_request(req1, lenreq1, &ri));
  115. ck_assert_str_eq("1.1", ri.http_version);
  116. ck_assert_int_eq(0, ri.num_headers);
  117. /* req2 is a complete, but invalid request */
  118. ck_assert_int_eq(lenreq2, get_http_header_len(req2, lenreq2));
  119. ck_assert_int_eq(-1, test_parse_http_request(req2, lenreq2, &ri));
  120. /* req3 is a complete and valid request */
  121. ck_assert_int_eq(lenreq3, get_http_header_len(req3, lenreq3));
  122. ck_assert_int_eq(lenreq3, test_parse_http_request(req3, lenreq3, &ri));
  123. ck_assert_int_eq(-1, test_parse_http_response(req3, lenreq3, &respi));
  124. /* Multiline header are obsolete, so return an error
  125. * (https://tools.ietf.org/html/rfc7230#section-3.2.4). */
  126. ck_assert_int_eq(-1, test_parse_http_request(req4, lenreq4, &ri));
  127. /* req5 is a complete and valid request (also somewhat malformed,
  128. * since it uses \n\n instead of \r\n\r\n) */
  129. ck_assert_int_eq(lenreq5, get_http_header_len(req5, lenreq5));
  130. ck_assert_int_eq(-1, test_parse_http_response(req5, lenreq5, &respi));
  131. ck_assert_int_eq(lenreq5, test_parse_http_request(req5, lenreq5, &ri));
  132. ck_assert_str_eq("GET", ri.request_method);
  133. ck_assert_str_eq("1.0", ri.http_version);
  134. /* req6 is incomplete */
  135. ck_assert_int_eq(0, get_http_header_len(req6, lenreq6));
  136. ck_assert_int_eq(0, test_parse_http_request(req6, lenreq6, &ri));
  137. /* req7 is invalid, but not yet complete */
  138. ck_assert_int_eq(0, get_http_header_len(req7, lenreq7));
  139. ck_assert_int_eq(0, test_parse_http_request(req7, lenreq7, &ri));
  140. /* req8 is a valid response */
  141. ck_assert_int_eq(lenreq8, get_http_header_len(req8, lenreq8));
  142. ck_assert_int_eq(-1, test_parse_http_request(req8, lenreq8, &ri));
  143. ck_assert_int_eq(lenreq8, test_parse_http_response(req8, lenreq8, &respi));
  144. /* req9 is a valid response */
  145. ck_assert_int_eq(lenreq9, get_http_header_len(req9, lenreq9));
  146. ck_assert_int_eq(-1, test_parse_http_request(req9, lenreq9, &ri));
  147. ck_assert_int_eq(lenreq9, test_parse_http_response(req9, lenreq9, &respi));
  148. ck_assert_int_eq(1, respi.num_headers);
  149. /* req10 is a valid request */
  150. ck_assert_int_eq(lenreq10, get_http_header_len(req10, lenreq10));
  151. ck_assert_int_eq(lenreq10, test_parse_http_request(req10, lenreq10, &ri));
  152. ck_assert_str_eq("1.1", ri.http_version);
  153. ck_assert_int_eq(2, ri.num_headers);
  154. ck_assert_str_eq("A", ri.http_headers[0].name);
  155. ck_assert_str_eq("foo bar", ri.http_headers[0].value);
  156. ck_assert_str_eq("B", ri.http_headers[1].name);
  157. ck_assert_str_eq("bar", ri.http_headers[1].value);
  158. /* req11 is a complete but valid request */
  159. ck_assert_int_eq(-1, test_parse_http_request(req11, lenreq11, &ri));
  160. /* req12 is a valid request with body data */
  161. ck_assert_int_gt(lenreq12, lenhdr12);
  162. ck_assert_int_eq(lenhdr12, get_http_header_len(req12, lenreq12));
  163. ck_assert_int_eq(lenhdr12, test_parse_http_request(req12, lenreq12, &ri));
  164. }
  165. END_TEST
  166. START_TEST(test_should_keep_alive)
  167. {
  168. /* Adapted from unit_test.c */
  169. /* Copyright (c) 2013-2015 the Civetweb developers */
  170. /* Copyright (c) 2004-2013 Sergey Lyubka */
  171. struct mg_connection conn;
  172. struct mg_context ctx;
  173. char req1[] = "GET / HTTP/1.1\r\n\r\n";
  174. char req2[] = "GET / HTTP/1.0\r\n\r\n";
  175. char req3[] = "GET / HTTP/1.1\r\nConnection: close\r\n\r\n";
  176. char req4[] = "GET / HTTP/1.1\r\nConnection: keep-alive\r\n\r\n";
  177. char yes[] = "yes";
  178. char no[] = "no";
  179. int lenreq1 = (int)strlen(req1);
  180. int lenreq2 = (int)strlen(req2);
  181. int lenreq3 = (int)strlen(req3);
  182. int lenreq4 = (int)strlen(req4);
  183. memset(&conn, 0, sizeof(conn));
  184. conn.ctx = &ctx;
  185. ck_assert_int_eq(test_parse_http_request(req1, lenreq1, &conn.request_info),
  186. lenreq1);
  187. ctx.config[ENABLE_KEEP_ALIVE] = no;
  188. ck_assert_int_eq(should_keep_alive(&conn), 0);
  189. ctx.config[ENABLE_KEEP_ALIVE] = yes;
  190. ck_assert_int_eq(should_keep_alive(&conn), 1);
  191. conn.must_close = 1;
  192. ck_assert_int_eq(should_keep_alive(&conn), 0);
  193. conn.must_close = 0;
  194. test_parse_http_request(req2, lenreq2, &conn.request_info);
  195. ck_assert_int_eq(should_keep_alive(&conn), 0);
  196. test_parse_http_request(req3, lenreq3, &conn.request_info);
  197. ck_assert_int_eq(should_keep_alive(&conn), 0);
  198. test_parse_http_request(req4, lenreq4, &conn.request_info);
  199. ck_assert_int_eq(should_keep_alive(&conn), 1);
  200. conn.status_code = 401;
  201. ck_assert_int_eq(should_keep_alive(&conn), 0);
  202. conn.status_code = 200;
  203. conn.must_close = 1;
  204. ck_assert_int_eq(should_keep_alive(&conn), 0);
  205. }
  206. END_TEST
  207. START_TEST(test_match_prefix)
  208. {
  209. /* Adapted from unit_test.c */
  210. /* Copyright (c) 2013-2015 the Civetweb developers */
  211. /* Copyright (c) 2004-2013 Sergey Lyubka */
  212. ck_assert_int_eq(4, match_prefix("/api", 4, "/api"));
  213. ck_assert_int_eq(3, match_prefix("/a/", 3, "/a/b/c"));
  214. ck_assert_int_eq(-1, match_prefix("/a/", 3, "/ab/c"));
  215. ck_assert_int_eq(4, match_prefix("/*/", 3, "/ab/c"));
  216. ck_assert_int_eq(6, match_prefix("**", 2, "/a/b/c"));
  217. ck_assert_int_eq(2, match_prefix("/*", 2, "/a/b/c"));
  218. ck_assert_int_eq(2, match_prefix("*/*", 3, "/a/b/c"));
  219. ck_assert_int_eq(5, match_prefix("**/", 3, "/a/b/c"));
  220. ck_assert_int_eq(5, match_prefix("**.foo|**.bar", 13, "a.bar"));
  221. ck_assert_int_eq(2, match_prefix("a|b|cd", 6, "cdef"));
  222. ck_assert_int_eq(2, match_prefix("a|b|c?", 6, "cdef"));
  223. ck_assert_int_eq(1, match_prefix("a|?|cd", 6, "cdef"));
  224. ck_assert_int_eq(-1, match_prefix("/a/**.cgi", 9, "/foo/bar/x.cgi"));
  225. ck_assert_int_eq(12, match_prefix("/a/**.cgi", 9, "/a/bar/x.cgi"));
  226. ck_assert_int_eq(5, match_prefix("**/", 3, "/a/b/c"));
  227. ck_assert_int_eq(-1, match_prefix("**/$", 4, "/a/b/c"));
  228. ck_assert_int_eq(5, match_prefix("**/$", 4, "/a/b/"));
  229. ck_assert_int_eq(0, match_prefix("$", 1, ""));
  230. ck_assert_int_eq(-1, match_prefix("$", 1, "x"));
  231. ck_assert_int_eq(1, match_prefix("*$", 2, "x"));
  232. ck_assert_int_eq(1, match_prefix("/$", 2, "/"));
  233. ck_assert_int_eq(-1, match_prefix("**/$", 4, "/a/b/c"));
  234. ck_assert_int_eq(5, match_prefix("**/$", 4, "/a/b/"));
  235. ck_assert_int_eq(0, match_prefix("*", 1, "/hello/"));
  236. ck_assert_int_eq(-1, match_prefix("**.a$|**.b$", 11, "/a/b.b/"));
  237. ck_assert_int_eq(6, match_prefix("**.a$|**.b$", 11, "/a/b.b"));
  238. ck_assert_int_eq(6, match_prefix("**.a$|**.b$", 11, "/a/B.A"));
  239. ck_assert_int_eq(5, match_prefix("**o$", 4, "HELLO"));
  240. }
  241. END_TEST
  242. START_TEST(test_remove_double_dots_and_double_slashes)
  243. {
  244. /* Adapted from unit_test.c */
  245. /* Copyright (c) 2013-2015 the Civetweb developers */
  246. /* Copyright (c) 2004-2013 Sergey Lyubka */
  247. struct {
  248. char before[20], after[20];
  249. } data[] = {
  250. {"////a", "/a"},
  251. {"/.....", "/."},
  252. {"/......", "/"},
  253. {"..", "."},
  254. {"...", "."},
  255. {"/...///", "/./"},
  256. {"/a...///", "/a.../"},
  257. {"/.x", "/.x"},
  258. {"/\\", "/"},
  259. {"/a\\", "/a\\"},
  260. {"/a\\\\...", "/a\\."},
  261. };
  262. size_t i;
  263. for (i = 0; i < ARRAY_SIZE(data); i++) {
  264. remove_double_dots_and_double_slashes(data[i].before);
  265. ck_assert_str_eq(data[i].before, data[i].after);
  266. }
  267. }
  268. END_TEST
  269. START_TEST(test_is_valid_uri)
  270. {
  271. /* is_valid_uri is superseeded by get_uri_type */
  272. ck_assert_int_eq(2, get_uri_type("/api"));
  273. ck_assert_int_eq(2, get_uri_type("/api/"));
  274. ck_assert_int_eq(2,
  275. get_uri_type("/some/long/path%20with%20space/file.xyz"));
  276. ck_assert_int_eq(0, get_uri_type("api"));
  277. ck_assert_int_eq(1, get_uri_type("*"));
  278. ck_assert_int_eq(0, get_uri_type("*xy"));
  279. ck_assert_int_eq(3, get_uri_type("http://somewhere/"));
  280. ck_assert_int_eq(3, get_uri_type("https://somewhere/some/file.html"));
  281. ck_assert_int_eq(4, get_uri_type("http://somewhere:8080/"));
  282. ck_assert_int_eq(4, get_uri_type("https://somewhere:8080/some/file.html"));
  283. }
  284. END_TEST
  285. START_TEST(test_next_option)
  286. {
  287. /* Adapted from unit_test.c */
  288. /* Copyright (c) 2013-2015 the Civetweb developers */
  289. /* Copyright (c) 2004-2013 Sergey Lyubka */
  290. const char *p, *list = "x/8,/y**=1;2k,z";
  291. struct vec a, b;
  292. int i;
  293. ck_assert(next_option(NULL, &a, &b) == NULL);
  294. for (i = 0, p = list; (p = next_option(p, &a, &b)) != NULL; i++) {
  295. ck_assert(i != 0 || (a.ptr == list && a.len == 3 && b.len == 0));
  296. ck_assert(i != 1
  297. || (a.ptr == list + 4 && a.len == 4 && b.ptr == list + 9
  298. && b.len == 4));
  299. ck_assert(i != 2 || (a.ptr == list + 14 && a.len == 1 && b.len == 0));
  300. }
  301. }
  302. END_TEST
  303. START_TEST(test_skip_quoted)
  304. {
  305. /* Adapted from unit_test.c */
  306. /* Copyright (c) 2013-2015 the Civetweb developers */
  307. /* Copyright (c) 2004-2013 Sergey Lyubka */
  308. char x[] = "a=1, b=2, c='hi \' there', d='here\\, there'", *s = x, *p;
  309. p = skip_quoted(&s, ", ", ", ", 0);
  310. ck_assert(p != NULL && !strcmp(p, "a=1"));
  311. p = skip_quoted(&s, ", ", ", ", 0);
  312. ck_assert(p != NULL && !strcmp(p, "b=2"));
  313. p = skip_quoted(&s, ",", " ", 0);
  314. ck_assert(p != NULL && !strcmp(p, "c='hi \' there'"));
  315. p = skip_quoted(&s, ",", " ", '\\');
  316. ck_assert(p != NULL && !strcmp(p, "d='here, there'"));
  317. ck_assert(*s == 0);
  318. }
  319. END_TEST
  320. static int
  321. alloc_printf(char **buf, size_t size, const char *fmt, ...)
  322. {
  323. /* Test helper function - adapted from unit_test.c */
  324. /* Copyright (c) 2013-2015 the Civetweb developers */
  325. /* Copyright (c) 2004-2013 Sergey Lyubka */
  326. va_list ap;
  327. int ret = 0;
  328. va_start(ap, fmt);
  329. ret = alloc_vprintf(buf, *buf, size, fmt, ap);
  330. va_end(ap);
  331. return ret;
  332. }
  333. static int
  334. alloc_printf2(char **buf, const char *fmt, ...)
  335. {
  336. /* Test alternative implementation */
  337. va_list ap;
  338. int ret = 0;
  339. va_start(ap, fmt);
  340. ret = alloc_vprintf2(buf, fmt, ap);
  341. va_end(ap);
  342. return ret;
  343. }
  344. START_TEST(test_alloc_vprintf)
  345. {
  346. /* Adapted from unit_test.c */
  347. /* Copyright (c) 2013-2015 the Civetweb developers */
  348. /* Copyright (c) 2004-2013 Sergey Lyubka */
  349. char buf[MG_BUF_LEN], *p = buf;
  350. ck_assert(alloc_printf(&p, sizeof(buf), "%s", "hi") == 2);
  351. ck_assert(p == buf);
  352. ck_assert(alloc_printf(&p, sizeof(buf), "%s", "") == 0);
  353. ck_assert(p == buf);
  354. ck_assert(alloc_printf(&p, sizeof(buf), "") == 0);
  355. ck_assert(p == buf);
  356. /* Pass small buffer, make sure alloc_printf allocates */
  357. ck_assert(alloc_printf(&p, 1, "%s", "hello") == 5);
  358. ck_assert(p != buf);
  359. mg_free(p);
  360. p = buf;
  361. /* Test alternative implementation */
  362. ck_assert(alloc_printf2(&p, "%s", "hello") == 5);
  363. ck_assert(p != buf);
  364. mg_free(p);
  365. p = buf;
  366. }
  367. END_TEST
  368. START_TEST(test_mg_vsnprintf)
  369. {
  370. char buf[16];
  371. int is_trunc;
  372. memset(buf, 0, sizeof(buf));
  373. is_trunc = 777;
  374. mg_snprintf(NULL, &is_trunc, buf, 10, "%8i", 123);
  375. ck_assert_str_eq(buf, " 123");
  376. ck_assert_int_eq(is_trunc, 0);
  377. is_trunc = 777;
  378. mg_snprintf(NULL, &is_trunc, buf, 10, "%9i", 123);
  379. ck_assert_str_eq(buf, " 123");
  380. ck_assert_int_eq(is_trunc, 0);
  381. is_trunc = 777;
  382. mg_snprintf(NULL, &is_trunc, buf, 9, "%9i", 123);
  383. ck_assert_str_eq(buf, " 12");
  384. ck_assert_int_eq(is_trunc, 1);
  385. is_trunc = 777;
  386. mg_snprintf(NULL, &is_trunc, buf, 8, "%9i", 123);
  387. ck_assert_str_eq(buf, " 1");
  388. ck_assert_int_eq(is_trunc, 1);
  389. is_trunc = 777;
  390. mg_snprintf(NULL, &is_trunc, buf, 7, "%9i", 123);
  391. ck_assert_str_eq(buf, " ");
  392. ck_assert_int_eq(is_trunc, 1);
  393. strcpy(buf, "1234567890");
  394. mg_snprintf(NULL, &is_trunc, buf, 0, "%i", 543);
  395. ck_assert_str_eq(buf, "1234567890");
  396. }
  397. END_TEST
  398. START_TEST(test_mg_strcasestr)
  399. {
  400. /* Adapted from unit_test.c */
  401. /* Copyright (c) 2013-2015 the Civetweb developers */
  402. /* Copyright (c) 2004-2013 Sergey Lyubka */
  403. static const char *big1 = "abcdef";
  404. ck_assert(mg_strcasestr("Y", "X") == NULL);
  405. ck_assert(mg_strcasestr("Y", "y") != NULL);
  406. ck_assert(mg_strcasestr(big1, "X") == NULL);
  407. ck_assert(mg_strcasestr(big1, "CD") == big1 + 2);
  408. ck_assert(mg_strcasestr("aa", "AAB") == NULL);
  409. }
  410. END_TEST
  411. START_TEST(test_parse_port_string)
  412. {
  413. /* Adapted from unit_test.c */
  414. /* Copyright (c) 2013-2015 the Civetweb developers */
  415. /* Copyright (c) 2004-2013 Sergey Lyubka */
  416. static const char *valid[] =
  417. { "0",
  418. "1",
  419. "1s",
  420. "1r",
  421. "1.2.3.4:1",
  422. "1.2.3.4:1s",
  423. "1.2.3.4:1r",
  424. #if defined(USE_IPV6)
  425. "[::1]:123",
  426. "[::]:80",
  427. "[3ffe:2a00:100:7031::1]:900",
  428. "+80",
  429. #endif
  430. NULL };
  431. static const char *invalid[] = {
  432. "99999", "1k", "1.2.3", "1.2.3.4:", "1.2.3.4:2p", NULL};
  433. struct socket so;
  434. struct vec vec;
  435. int ip_family;
  436. int i;
  437. for (i = 0; valid[i] != NULL; i++) {
  438. vec.ptr = valid[i];
  439. vec.len = strlen(vec.ptr);
  440. ip_family = 123;
  441. ck_assert_int_ne(parse_port_string(&vec, &so, &ip_family), 0);
  442. if (i < 7) {
  443. ck_assert_int_eq(ip_family, 4);
  444. } else if (i < 10) {
  445. ck_assert_int_eq(ip_family, 6);
  446. } else {
  447. ck_assert_int_eq(ip_family, 4 + 6);
  448. }
  449. }
  450. for (i = 0; invalid[i] != NULL; i++) {
  451. vec.ptr = invalid[i];
  452. vec.len = strlen(vec.ptr);
  453. ip_family = 123;
  454. ck_assert_int_eq(parse_port_string(&vec, &so, &ip_family), 0);
  455. ck_assert_int_eq(ip_family, 0);
  456. }
  457. }
  458. END_TEST
  459. START_TEST(test_encode_decode)
  460. {
  461. char buf[128];
  462. const char *alpha = "abcdefghijklmnopqrstuvwxyz";
  463. const char *nonalpha = " !\"#$%&'()*+,-./0123456789:;<=>?@";
  464. const char *nonalpha_url_enc1 =
  465. "%20%21%22%23$%25%26%27()%2a%2b,-.%2f0123456789%3a;%3c%3d%3e%3f%40";
  466. const char *nonalpha_url_enc2 =
  467. "%20!%22%23%24%25%26'()*%2B%2C-.%2F0123456789%3A%3B%3C%3D%3E%3F%40";
  468. int ret;
  469. size_t len;
  470. #if defined(USE_WEBSOCKET) || defined(USE_LUA)
  471. const char *alpha_b64_enc = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXo=";
  472. const char *nonalpha_b64_enc =
  473. "ICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9Pj9A";
  474. memset(buf, 77, sizeof(buf));
  475. base64_encode((unsigned char *)"a", 1, buf);
  476. ck_assert_str_eq(buf, "YQ==");
  477. memset(buf, 77, sizeof(buf));
  478. base64_encode((unsigned char *)"ab", 1, buf);
  479. ck_assert_str_eq(buf, "YQ==");
  480. memset(buf, 77, sizeof(buf));
  481. base64_encode((unsigned char *)"ab", 2, buf);
  482. ck_assert_str_eq(buf, "YWI=");
  483. memset(buf, 77, sizeof(buf));
  484. base64_encode((unsigned char *)alpha, 3, buf);
  485. ck_assert_str_eq(buf, "YWJj");
  486. memset(buf, 77, sizeof(buf));
  487. base64_encode((unsigned char *)alpha, 4, buf);
  488. ck_assert_str_eq(buf, "YWJjZA==");
  489. memset(buf, 77, sizeof(buf));
  490. base64_encode((unsigned char *)alpha, 5, buf);
  491. ck_assert_str_eq(buf, "YWJjZGU=");
  492. memset(buf, 77, sizeof(buf));
  493. base64_encode((unsigned char *)alpha, 6, buf);
  494. ck_assert_str_eq(buf, "YWJjZGVm");
  495. memset(buf, 77, sizeof(buf));
  496. base64_encode((unsigned char *)alpha, (int)strlen(alpha), buf);
  497. ck_assert_str_eq(buf, alpha_b64_enc);
  498. memset(buf, 77, sizeof(buf));
  499. base64_encode((unsigned char *)nonalpha, (int)strlen(nonalpha), buf);
  500. ck_assert_str_eq(buf, nonalpha_b64_enc);
  501. #endif
  502. #if defined(USE_LUA)
  503. memset(buf, 77, sizeof(buf));
  504. len = 9999;
  505. ret = base64_decode((unsigned char *)alpha_b64_enc,
  506. (int)strlen(alpha_b64_enc),
  507. buf,
  508. &len);
  509. ck_assert_int_eq(ret, -1);
  510. ck_assert_uint_eq((unsigned int)len, (unsigned int)strlen(alpha));
  511. ck_assert_str_eq(buf, alpha);
  512. memset(buf, 77, sizeof(buf));
  513. len = 9999;
  514. ret = base64_decode((unsigned char *)"AAA*AAA", 7, buf, &len);
  515. ck_assert_int_eq(ret, 3);
  516. #endif
  517. memset(buf, 77, sizeof(buf));
  518. ret = mg_url_encode(alpha, buf, sizeof(buf));
  519. ck_assert_int_eq(ret, (int)strlen(buf));
  520. ck_assert_int_eq(ret, (int)strlen(alpha));
  521. ck_assert_str_eq(buf, alpha);
  522. memset(buf, 77, sizeof(buf));
  523. ret = mg_url_encode(nonalpha, buf, sizeof(buf));
  524. ck_assert_int_eq(ret, (int)strlen(buf));
  525. ck_assert_int_eq(ret, (int)strlen(nonalpha_url_enc1));
  526. ck_assert_str_eq(buf, nonalpha_url_enc1);
  527. memset(buf, 77, sizeof(buf));
  528. ret = mg_url_decode(alpha, (int)strlen(alpha), buf, sizeof(buf), 0);
  529. ck_assert_int_eq(ret, (int)strlen(buf));
  530. ck_assert_int_eq(ret, (int)strlen(alpha));
  531. ck_assert_str_eq(buf, alpha);
  532. memset(buf, 77, sizeof(buf));
  533. ret = mg_url_decode(
  534. nonalpha_url_enc1, (int)strlen(nonalpha_url_enc1), buf, sizeof(buf), 0);
  535. ck_assert_int_eq(ret, (int)strlen(buf));
  536. ck_assert_int_eq(ret, (int)strlen(nonalpha));
  537. ck_assert_str_eq(buf, nonalpha);
  538. memset(buf, 77, sizeof(buf));
  539. ret = mg_url_decode(
  540. nonalpha_url_enc2, (int)strlen(nonalpha_url_enc2), buf, sizeof(buf), 0);
  541. ck_assert_int_eq(ret, (int)strlen(buf));
  542. ck_assert_int_eq(ret, (int)strlen(nonalpha));
  543. ck_assert_str_eq(buf, nonalpha);
  544. /* len could be unused, if base64_decode is not tested because USE_LUA is
  545. * not defined */
  546. (void)len;
  547. }
  548. END_TEST
  549. START_TEST(test_mask_data)
  550. {
  551. #if defined(USE_WEBSOCKET)
  552. char in[1024];
  553. char out[1024];
  554. int i;
  555. #endif
  556. uint32_t mask = 0x61626364;
  557. /* TODO: adapt test for big endian */
  558. ck_assert((*(unsigned char *)&mask) == 0x64u);
  559. #if defined(USE_WEBSOCKET)
  560. memset(in, 0, sizeof(in));
  561. memset(out, 99, sizeof(out));
  562. mask_data(in, sizeof(out), 0, out);
  563. ck_assert(!memcmp(out, in, sizeof(out)));
  564. for (i = 0; i < 1024; i++) {
  565. in[i] = (char)((unsigned char)i);
  566. }
  567. mask_data(in, 107, 0, out);
  568. ck_assert(!memcmp(out, in, 107));
  569. mask_data(in, 256, 0x01010101, out);
  570. for (i = 0; i < 256; i++) {
  571. ck_assert_int_eq((int)((unsigned char)out[i]),
  572. (int)(((unsigned char)in[i]) ^ (char)1u));
  573. }
  574. for (i = 256; i < (int)sizeof(out); i++) {
  575. ck_assert_int_eq((int)((unsigned char)out[i]), (int)0);
  576. }
  577. /* TODO: check this for big endian */
  578. mask_data(in, 5, 0x01020304, out);
  579. ck_assert_uint_eq((unsigned char)out[0], 0u ^ 4u);
  580. ck_assert_uint_eq((unsigned char)out[1], 1u ^ 3u);
  581. ck_assert_uint_eq((unsigned char)out[2], 2u ^ 2u);
  582. ck_assert_uint_eq((unsigned char)out[3], 3u ^ 1u);
  583. ck_assert_uint_eq((unsigned char)out[4], 4u ^ 4u);
  584. #endif
  585. }
  586. END_TEST
  587. START_TEST(test_parse_date_string)
  588. {
  589. #if !defined(NO_CACHING)
  590. time_t now = time(0);
  591. struct tm *tm = gmtime(&now);
  592. char date[64] = {0};
  593. unsigned long i;
  594. ck_assert_uint_eq((unsigned long)parse_date_string("1/Jan/1970 00:01:02"),
  595. 62ul);
  596. ck_assert_uint_eq((unsigned long)parse_date_string("1 Jan 1970 00:02:03"),
  597. 123ul);
  598. ck_assert_uint_eq((unsigned long)parse_date_string("1-Jan-1970 00:03:04"),
  599. 184ul);
  600. ck_assert_uint_eq((unsigned long)parse_date_string(
  601. "Xyz, 1 Jan 1970 00:04:05"),
  602. 245ul);
  603. gmt_time_string(date, sizeof(date), &now);
  604. ck_assert_uint_eq((uintmax_t)parse_date_string(date), (uintmax_t)now);
  605. sprintf(date,
  606. "%02u %s %04u %02u:%02u:%02u",
  607. tm->tm_mday,
  608. month_names[tm->tm_mon],
  609. tm->tm_year + 1900,
  610. tm->tm_hour,
  611. tm->tm_min,
  612. tm->tm_sec);
  613. ck_assert_uint_eq((uintmax_t)parse_date_string(date), (uintmax_t)now);
  614. gmt_time_string(date, 1, NULL);
  615. ck_assert_str_eq(date, "");
  616. gmt_time_string(date, 6, NULL);
  617. ck_assert_str_eq(date,
  618. "Thu, "); /* part of "Thu, 01 Jan 1970 00:00:00 GMT" */
  619. gmt_time_string(date, sizeof(date), NULL);
  620. ck_assert_str_eq(date, "Thu, 01 Jan 1970 00:00:00 GMT");
  621. for (i = 2ul; i < 0x8000000ul; i += i / 2) {
  622. now = (time_t)i;
  623. gmt_time_string(date, sizeof(date), &now);
  624. ck_assert_uint_eq((uintmax_t)parse_date_string(date), (uintmax_t)now);
  625. tm = gmtime(&now);
  626. sprintf(date,
  627. "%02u-%s-%04u %02u:%02u:%02u",
  628. tm->tm_mday,
  629. month_names[tm->tm_mon],
  630. tm->tm_year + 1900,
  631. tm->tm_hour,
  632. tm->tm_min,
  633. tm->tm_sec);
  634. ck_assert_uint_eq((uintmax_t)parse_date_string(date), (uintmax_t)now);
  635. }
  636. #endif
  637. }
  638. END_TEST
  639. START_TEST(test_sha1)
  640. {
  641. #ifdef SHA1_DIGEST_SIZE
  642. SHA_CTX sha_ctx;
  643. uint8_t digest[SHA1_DIGEST_SIZE] = {0};
  644. char str[48] = {0};
  645. int i;
  646. const char *test_str;
  647. ck_assert_uint_eq(sizeof(digest), 20);
  648. ck_assert_uint_gt(sizeof(str), sizeof(digest) * 2 + 1);
  649. /* empty string */
  650. SHA1_Init(&sha_ctx);
  651. SHA1_Final(digest, &sha_ctx);
  652. bin2str(str, digest, sizeof(digest));
  653. ck_assert_uint_eq(strlen(str), 40);
  654. ck_assert_str_eq(str, "da39a3ee5e6b4b0d3255bfef95601890afd80709");
  655. /* empty string */
  656. SHA1_Init(&sha_ctx);
  657. SHA1_Update(&sha_ctx, (uint8_t *)"abc", 0);
  658. SHA1_Final(digest, &sha_ctx);
  659. bin2str(str, digest, sizeof(digest));
  660. ck_assert_uint_eq(strlen(str), 40);
  661. ck_assert_str_eq(str, "da39a3ee5e6b4b0d3255bfef95601890afd80709");
  662. /* "abc" */
  663. SHA1_Init(&sha_ctx);
  664. SHA1_Update(&sha_ctx, (uint8_t *)"abc", 3);
  665. SHA1_Final(digest, &sha_ctx);
  666. bin2str(str, digest, sizeof(digest));
  667. ck_assert_uint_eq(strlen(str), 40);
  668. ck_assert_str_eq(str, "a9993e364706816aba3e25717850c26c9cd0d89d");
  669. /* "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq" */
  670. test_str = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq";
  671. SHA1_Init(&sha_ctx);
  672. SHA1_Update(&sha_ctx, (uint8_t *)test_str, (uint32_t)strlen(test_str));
  673. SHA1_Final(digest, &sha_ctx);
  674. bin2str(str, digest, sizeof(digest));
  675. ck_assert_uint_eq(strlen(str), 40);
  676. ck_assert_str_eq(str, "84983e441c3bd26ebaae4aa1f95129e5e54670f1");
  677. /* a million "a" */
  678. SHA1_Init(&sha_ctx);
  679. for (i = 0; i < 1000000; i++) {
  680. SHA1_Update(&sha_ctx, (uint8_t *)"a", 1);
  681. }
  682. SHA1_Final(digest, &sha_ctx);
  683. bin2str(str, digest, sizeof(digest));
  684. ck_assert_uint_eq(strlen(str), 40);
  685. ck_assert_str_eq(str, "34aa973cd4c4daa4f61eeb2bdbad27316534016f");
  686. /* a million "a" in blocks of 10 */
  687. SHA1_Init(&sha_ctx);
  688. for (i = 0; i < 100000; i++) {
  689. SHA1_Update(&sha_ctx, (uint8_t *)"aaaaaaaaaa", 10);
  690. }
  691. SHA1_Final(digest, &sha_ctx);
  692. bin2str(str, digest, sizeof(digest));
  693. ck_assert_uint_eq(strlen(str), 40);
  694. ck_assert_str_eq(str, "34aa973cd4c4daa4f61eeb2bdbad27316534016f");
  695. #else
  696. /* Can not test, if SHA1 is not included */
  697. ck_assert(1);
  698. #endif
  699. }
  700. END_TEST
  701. Suite *
  702. make_private_suite(void)
  703. {
  704. Suite *const suite = suite_create("Private");
  705. TCase *const tcase_http_message = tcase_create("HTTP Message");
  706. TCase *const tcase_url_parsing = tcase_create("URL Parsing");
  707. TCase *const tcase_internal_parse = tcase_create("Internal Parsing");
  708. TCase *const tcase_encode_decode = tcase_create("Encode Decode");
  709. TCase *const tcase_mask_data = tcase_create("Mask Data");
  710. TCase *const tcase_parse_date_string = tcase_create("Date Parsing");
  711. TCase *const tcase_sha1 = tcase_create("SHA1");
  712. tcase_add_test(tcase_http_message, test_parse_http_message);
  713. tcase_add_test(tcase_http_message, test_should_keep_alive);
  714. tcase_set_timeout(tcase_http_message, civetweb_min_test_timeout);
  715. suite_add_tcase(suite, tcase_http_message);
  716. tcase_add_test(tcase_url_parsing, test_match_prefix);
  717. tcase_add_test(tcase_url_parsing,
  718. test_remove_double_dots_and_double_slashes);
  719. tcase_add_test(tcase_url_parsing, test_is_valid_uri);
  720. tcase_set_timeout(tcase_url_parsing, civetweb_min_test_timeout);
  721. suite_add_tcase(suite, tcase_url_parsing);
  722. tcase_add_test(tcase_internal_parse, test_next_option);
  723. tcase_add_test(tcase_internal_parse, test_skip_quoted);
  724. tcase_add_test(tcase_internal_parse, test_mg_strcasestr);
  725. tcase_add_test(tcase_internal_parse, test_alloc_vprintf);
  726. tcase_add_test(tcase_internal_parse, test_mg_vsnprintf);
  727. tcase_add_test(tcase_internal_parse, test_parse_port_string);
  728. tcase_set_timeout(tcase_internal_parse, civetweb_min_test_timeout);
  729. suite_add_tcase(suite, tcase_internal_parse);
  730. tcase_add_test(tcase_encode_decode, test_encode_decode);
  731. tcase_set_timeout(tcase_encode_decode, civetweb_min_test_timeout);
  732. suite_add_tcase(suite, tcase_encode_decode);
  733. tcase_add_test(tcase_mask_data, test_mask_data);
  734. tcase_set_timeout(tcase_mask_data, civetweb_min_test_timeout);
  735. suite_add_tcase(suite, tcase_mask_data);
  736. tcase_add_test(tcase_parse_date_string, test_parse_date_string);
  737. tcase_set_timeout(tcase_parse_date_string, civetweb_min_test_timeout);
  738. suite_add_tcase(suite, tcase_parse_date_string);
  739. tcase_add_test(tcase_sha1, test_sha1);
  740. tcase_set_timeout(tcase_sha1, civetweb_min_test_timeout);
  741. suite_add_tcase(suite, tcase_sha1);
  742. return suite;
  743. }
  744. #ifdef REPLACE_CHECK_FOR_LOCAL_DEBUGGING
  745. /* Used to debug test cases without using the check framework */
  746. void
  747. MAIN_PRIVATE(void)
  748. {
  749. #if defined(_WIN32)
  750. /* test_parse_port_string requires WSAStartup for IPv6 */
  751. WSADATA data;
  752. WSAStartup(MAKEWORD(2, 2), &data);
  753. #endif
  754. test_alloc_vprintf(0);
  755. test_mg_vsnprintf(0);
  756. test_remove_double_dots_and_double_slashes(0);
  757. test_parse_date_string(0);
  758. test_parse_port_string(0);
  759. test_parse_http_message(0);
  760. test_sha1(0);
  761. #if defined(_WIN32)
  762. WSACleanup();
  763. #endif
  764. }
  765. #endif