private.c 28 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932
  1. /* Copyright (c) 2015-2017 the Civetweb developers
  2. *
  3. * Permission is hereby granted, free of charge, to any person obtaining a copy
  4. * of this software and associated documentation files (the "Software"), to deal
  5. * in the Software without restriction, including without limitation the rights
  6. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  7. * copies of the Software, and to permit persons to whom the Software is
  8. * furnished to do so, subject to the following conditions:
  9. *
  10. * The above copyright notice and this permission notice shall be included in
  11. * all copies or substantial portions of the Software.
  12. *
  13. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  14. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  15. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
  16. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  17. * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  18. * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  19. * THE SOFTWARE.
  20. */
  21. /**
  22. * We include the source file so that we have access to the internal private
  23. * static functions
  24. */
  25. #ifdef _MSC_VER
  26. #ifndef _CRT_SECURE_NO_WARNINGS
  27. #define _CRT_SECURE_NO_WARNINGS
  28. #endif
  29. #define CIVETWEB_API static
  30. #endif
  31. #ifdef REPLACE_CHECK_FOR_LOCAL_DEBUGGING
  32. #undef MEMORY_DEBUGGING
  33. #endif
  34. #include "../src/civetweb.c"
  35. #include <stdlib.h>
  36. #include <time.h>
  37. #include "private.h"
  38. /* This unit test file uses the excellent Check unit testing library.
  39. * The API documentation is available here:
  40. * http://check.sourceforge.net/doc/check_html/index.html
  41. */
  42. static int
  43. test_parse_http_response(char *buf, int len, struct mg_response_info *ri)
  44. {
  45. char *s = malloc(len);
  46. memcpy(s, buf, len);
  47. int r = parse_http_response(s, len, ri);
  48. // free(s); -- leak is intentional in the test
  49. return r;
  50. }
  51. static int
  52. test_parse_http_request(char *buf, int len, struct mg_request_info *ri)
  53. {
  54. char *s = malloc(len);
  55. memcpy(s, buf, len);
  56. int r = parse_http_request(s, len, ri);
  57. // free(s); -- leak is intentional in the test
  58. return r;
  59. }
  60. START_TEST(test_parse_http_message)
  61. {
  62. /* Adapted from unit_test.c */
  63. /* Copyright (c) 2013-2015 the Civetweb developers */
  64. /* Copyright (c) 2004-2013 Sergey Lyubka */
  65. struct mg_request_info ri;
  66. struct mg_response_info respi;
  67. char empty[] = "";
  68. char space[] = " \x00";
  69. char req1[] = "GET / HTTP/1.1\r\n\r\n";
  70. char req2[] = "BLAH / HTTP/1.1\r\n\r\n";
  71. char req3[] = "GET / HTTP/1.1\nKey: Val\n\n";
  72. char req4[] =
  73. "GET / HTTP/1.1\r\nA: foo bar\r\nB: bar\r\nskip\r\nbaz:\r\n\r\n";
  74. char req5[] = "GET / HTTP/1.0\n\n";
  75. char req6[] = "G";
  76. char req7[] = " blah ";
  77. char req8[] = "HTTP/1.0 404 Not Found\n\n";
  78. char req9[] = "HTTP/1.1 200 OK\r\nConnection: close\r\n\r\n";
  79. char req10[] = "GET / HTTP/1.1\r\nA: foo bar\r\nB: bar\r\n\r\n";
  80. char req11[] = "GET /\r\nError: X\r\n\r\n";
  81. char req12[] =
  82. "POST /a/b/c.d?e=f&g HTTP/1.1\r\nKey1: val1\r\nKey2: val2\r\n\r\nBODY";
  83. int lenreq1 = (int)strlen(req1);
  84. int lenreq2 = (int)strlen(req2);
  85. int lenreq3 = (int)strlen(req3);
  86. int lenreq4 = (int)strlen(req4);
  87. int lenreq5 = (int)strlen(req5);
  88. int lenreq6 = (int)strlen(req6);
  89. int lenreq7 = (int)strlen(req7);
  90. int lenreq8 = (int)strlen(req8);
  91. int lenreq9 = (int)strlen(req9);
  92. int lenreq10 = (int)strlen(req10);
  93. int lenreq11 = (int)strlen(req11);
  94. int lenreq12 = (int)strlen(req12);
  95. int lenhdr12 = lenreq12 - 4; /* length without body */
  96. /* An empty string is neither a complete request nor a complete
  97. * response, so it must return 0 */
  98. ck_assert_int_eq(0, get_http_header_len(empty, 0));
  99. ck_assert_int_eq(0, test_parse_http_request(empty, 0, &ri));
  100. ck_assert_int_eq(0, test_parse_http_response(empty, 0, &respi));
  101. /* Same is true for a leading space */
  102. ck_assert_int_eq(0, get_http_header_len(space, 1));
  103. ck_assert_int_eq(0, test_parse_http_request(space, 1, &ri));
  104. ck_assert_int_eq(0, test_parse_http_response(space, 1, &respi));
  105. /* But a control character (like 0) makes it invalid */
  106. ck_assert_int_eq(-1, get_http_header_len(space, 2));
  107. ck_assert_int_eq(-1, test_parse_http_request(space, 2, &ri));
  108. ck_assert_int_eq(-1, test_parse_http_response(space, 2, &respi));
  109. /* req1 is a valid request */
  110. ck_assert_int_eq(lenreq1, get_http_header_len(req1, lenreq1));
  111. ck_assert_int_eq(lenreq1, test_parse_http_request(req1, lenreq1, &ri));
  112. ck_assert_str_eq("1.1", ri.http_version);
  113. ck_assert_int_eq(0, ri.num_headers);
  114. ck_assert_int_eq(-1, test_parse_http_response(req1, lenreq1, &respi));
  115. /* req1 minus 1 byte at the end is incomplete */
  116. ck_assert_int_eq(0, get_http_header_len(req1, lenreq1 - 1));
  117. /* req1 minus 1 byte at the start is complete but invalid */
  118. ck_assert_int_eq(lenreq1 - 1, get_http_header_len(req1 + 1, lenreq1 - 1));
  119. ck_assert_int_eq(-1, test_parse_http_request(req1 + 1, lenreq1 - 1, &ri));
  120. /* req2 is a complete, but invalid request */
  121. ck_assert_int_eq(lenreq2, get_http_header_len(req2, lenreq2));
  122. ck_assert_int_eq(-1, test_parse_http_request(req2, lenreq2, &ri));
  123. /* req3 is a complete and valid request */
  124. ck_assert_int_eq(lenreq3, get_http_header_len(req3, lenreq3));
  125. ck_assert_int_eq(lenreq3, test_parse_http_request(req3, lenreq3, &ri));
  126. ck_assert_int_eq(-1, test_parse_http_response(req3, lenreq3, &respi));
  127. /* Multiline header are obsolete, so return an error
  128. * (https://tools.ietf.org/html/rfc7230#section-3.2.4). */
  129. ck_assert_int_eq(-1, test_parse_http_request(req4, lenreq4, &ri));
  130. /* req5 is a complete and valid request (also somewhat malformed,
  131. * since it uses \n\n instead of \r\n\r\n) */
  132. ck_assert_int_eq(lenreq5, get_http_header_len(req5, lenreq5));
  133. ck_assert_int_eq(lenreq5, test_parse_http_request(req5, lenreq5, &ri));
  134. ck_assert_str_eq("GET", ri.request_method);
  135. ck_assert_str_eq("1.0", ri.http_version);
  136. ck_assert_int_eq(-1, test_parse_http_response(req5, lenreq5, &respi));
  137. /* req6 is incomplete */
  138. ck_assert_int_eq(0, get_http_header_len(req6, lenreq6));
  139. ck_assert_int_eq(0, test_parse_http_request(req6, lenreq6, &ri));
  140. /* req7 is invalid, but not yet complete */
  141. ck_assert_int_eq(0, get_http_header_len(req7, lenreq7));
  142. ck_assert_int_eq(0, test_parse_http_request(req7, lenreq7, &ri));
  143. /* req8 is a valid response */
  144. ck_assert_int_eq(lenreq8, get_http_header_len(req8, lenreq8));
  145. ck_assert_int_eq(-1, test_parse_http_request(req8, lenreq8, &ri));
  146. ck_assert_int_eq(lenreq8, test_parse_http_response(req8, lenreq8, &respi));
  147. /* req9 is a valid response */
  148. ck_assert_int_eq(lenreq9, get_http_header_len(req9, lenreq9));
  149. ck_assert_int_eq(-1, test_parse_http_request(req9, lenreq9, &ri));
  150. ck_assert_int_eq(lenreq9, test_parse_http_response(req9, lenreq9, &respi));
  151. ck_assert_int_eq(1, respi.num_headers);
  152. /* req10 is a valid request */
  153. ck_assert_int_eq(lenreq10, get_http_header_len(req10, lenreq10));
  154. ck_assert_int_eq(lenreq10, test_parse_http_request(req10, lenreq10, &ri));
  155. ck_assert_str_eq("1.1", ri.http_version);
  156. ck_assert_int_eq(2, ri.num_headers);
  157. ck_assert_str_eq("A", ri.http_headers[0].name);
  158. ck_assert_str_eq("foo bar", ri.http_headers[0].value);
  159. ck_assert_str_eq("B", ri.http_headers[1].name);
  160. ck_assert_str_eq("bar", ri.http_headers[1].value);
  161. /* req11 is a complete but valid request */
  162. ck_assert_int_eq(-1, test_parse_http_request(req11, lenreq11, &ri));
  163. /* req12 is a valid request with body data */
  164. ck_assert_int_gt(lenreq12, lenhdr12);
  165. ck_assert_int_eq(lenhdr12, get_http_header_len(req12, lenreq12));
  166. ck_assert_int_eq(lenhdr12, test_parse_http_request(req12, lenreq12, &ri));
  167. }
  168. END_TEST
  169. START_TEST(test_should_keep_alive)
  170. {
  171. /* Adapted from unit_test.c */
  172. /* Copyright (c) 2013-2015 the Civetweb developers */
  173. /* Copyright (c) 2004-2013 Sergey Lyubka */
  174. struct mg_connection conn;
  175. struct mg_context ctx;
  176. char req1[] = "GET / HTTP/1.1\r\n\r\n";
  177. char req2[] = "GET / HTTP/1.0\r\n\r\n";
  178. char req3[] = "GET / HTTP/1.1\r\nConnection: close\r\n\r\n";
  179. char req4[] = "GET / HTTP/1.1\r\nConnection: keep-alive\r\n\r\n";
  180. char yes[] = "yes";
  181. char no[] = "no";
  182. int lenreq1 = (int)strlen(req1);
  183. int lenreq2 = (int)strlen(req2);
  184. int lenreq3 = (int)strlen(req3);
  185. int lenreq4 = (int)strlen(req4);
  186. memset(&conn, 0, sizeof(conn));
  187. conn.ctx = &ctx;
  188. ck_assert_int_eq(test_parse_http_request(req1, lenreq1, &conn.request_info),
  189. lenreq1);
  190. ctx.config[ENABLE_KEEP_ALIVE] = no;
  191. ck_assert_int_eq(should_keep_alive(&conn), 0);
  192. ctx.config[ENABLE_KEEP_ALIVE] = yes;
  193. ck_assert_int_eq(should_keep_alive(&conn), 1);
  194. conn.must_close = 1;
  195. ck_assert_int_eq(should_keep_alive(&conn), 0);
  196. conn.must_close = 0;
  197. test_parse_http_request(req2, lenreq2, &conn.request_info);
  198. ck_assert_int_eq(should_keep_alive(&conn), 0);
  199. test_parse_http_request(req3, lenreq3, &conn.request_info);
  200. ck_assert_int_eq(should_keep_alive(&conn), 0);
  201. test_parse_http_request(req4, lenreq4, &conn.request_info);
  202. ck_assert_int_eq(should_keep_alive(&conn), 1);
  203. conn.status_code = 401;
  204. ck_assert_int_eq(should_keep_alive(&conn), 0);
  205. conn.status_code = 200;
  206. conn.must_close = 1;
  207. ck_assert_int_eq(should_keep_alive(&conn), 0);
  208. }
  209. END_TEST
  210. START_TEST(test_match_prefix)
  211. {
  212. /* Adapted from unit_test.c */
  213. /* Copyright (c) 2013-2015 the Civetweb developers */
  214. /* Copyright (c) 2004-2013 Sergey Lyubka */
  215. ck_assert_int_eq(4, match_prefix("/api", 4, "/api"));
  216. ck_assert_int_eq(3, match_prefix("/a/", 3, "/a/b/c"));
  217. ck_assert_int_eq(-1, match_prefix("/a/", 3, "/ab/c"));
  218. ck_assert_int_eq(4, match_prefix("/*/", 3, "/ab/c"));
  219. ck_assert_int_eq(6, match_prefix("**", 2, "/a/b/c"));
  220. ck_assert_int_eq(2, match_prefix("/*", 2, "/a/b/c"));
  221. ck_assert_int_eq(2, match_prefix("*/*", 3, "/a/b/c"));
  222. ck_assert_int_eq(5, match_prefix("**/", 3, "/a/b/c"));
  223. ck_assert_int_eq(5, match_prefix("**.foo|**.bar", 13, "a.bar"));
  224. ck_assert_int_eq(2, match_prefix("a|b|cd", 6, "cdef"));
  225. ck_assert_int_eq(2, match_prefix("a|b|c?", 6, "cdef"));
  226. ck_assert_int_eq(1, match_prefix("a|?|cd", 6, "cdef"));
  227. ck_assert_int_eq(-1, match_prefix("/a/**.cgi", 9, "/foo/bar/x.cgi"));
  228. ck_assert_int_eq(12, match_prefix("/a/**.cgi", 9, "/a/bar/x.cgi"));
  229. ck_assert_int_eq(5, match_prefix("**/", 3, "/a/b/c"));
  230. ck_assert_int_eq(-1, match_prefix("**/$", 4, "/a/b/c"));
  231. ck_assert_int_eq(5, match_prefix("**/$", 4, "/a/b/"));
  232. ck_assert_int_eq(0, match_prefix("$", 1, ""));
  233. ck_assert_int_eq(-1, match_prefix("$", 1, "x"));
  234. ck_assert_int_eq(1, match_prefix("*$", 2, "x"));
  235. ck_assert_int_eq(1, match_prefix("/$", 2, "/"));
  236. ck_assert_int_eq(-1, match_prefix("**/$", 4, "/a/b/c"));
  237. ck_assert_int_eq(5, match_prefix("**/$", 4, "/a/b/"));
  238. ck_assert_int_eq(0, match_prefix("*", 1, "/hello/"));
  239. ck_assert_int_eq(-1, match_prefix("**.a$|**.b$", 11, "/a/b.b/"));
  240. ck_assert_int_eq(6, match_prefix("**.a$|**.b$", 11, "/a/b.b"));
  241. ck_assert_int_eq(6, match_prefix("**.a$|**.b$", 11, "/a/B.A"));
  242. ck_assert_int_eq(5, match_prefix("**o$", 4, "HELLO"));
  243. }
  244. END_TEST
  245. START_TEST(test_remove_double_dots_and_double_slashes)
  246. {
  247. /* Adapted from unit_test.c */
  248. /* Copyright (c) 2013-2015 the Civetweb developers */
  249. /* Copyright (c) 2004-2013 Sergey Lyubka */
  250. struct {
  251. char before[20], after[20];
  252. } data[] = {
  253. {"////a", "/a"},
  254. {"/.....", "/."},
  255. {"/......", "/"},
  256. {"..", "."},
  257. {"...", "."},
  258. {"/...///", "/./"},
  259. {"/a...///", "/a.../"},
  260. {"/.x", "/.x"},
  261. {"/\\", "/"},
  262. {"/a\\", "/a\\"},
  263. {"/a\\\\...", "/a\\."},
  264. };
  265. size_t i;
  266. for (i = 0; i < ARRAY_SIZE(data); i++) {
  267. remove_double_dots_and_double_slashes(data[i].before);
  268. ck_assert_str_eq(data[i].before, data[i].after);
  269. }
  270. }
  271. END_TEST
  272. START_TEST(test_is_valid_uri)
  273. {
  274. /* is_valid_uri is superseeded by get_uri_type */
  275. ck_assert_int_eq(2, get_uri_type("/api"));
  276. ck_assert_int_eq(2, get_uri_type("/api/"));
  277. ck_assert_int_eq(2,
  278. get_uri_type("/some/long/path%20with%20space/file.xyz"));
  279. ck_assert_int_eq(0, get_uri_type("api"));
  280. ck_assert_int_eq(1, get_uri_type("*"));
  281. ck_assert_int_eq(0, get_uri_type("*xy"));
  282. ck_assert_int_eq(3, get_uri_type("http://somewhere/"));
  283. ck_assert_int_eq(3, get_uri_type("https://somewhere/some/file.html"));
  284. ck_assert_int_eq(4, get_uri_type("http://somewhere:8080/"));
  285. ck_assert_int_eq(4, get_uri_type("https://somewhere:8080/some/file.html"));
  286. }
  287. END_TEST
  288. START_TEST(test_next_option)
  289. {
  290. /* Adapted from unit_test.c */
  291. /* Copyright (c) 2013-2015 the Civetweb developers */
  292. /* Copyright (c) 2004-2013 Sergey Lyubka */
  293. const char *p, *list = "x/8,/y**=1;2k,z";
  294. struct vec a, b;
  295. int i;
  296. ck_assert(next_option(NULL, &a, &b) == NULL);
  297. for (i = 0, p = list; (p = next_option(p, &a, &b)) != NULL; i++) {
  298. ck_assert(i != 0 || (a.ptr == list && a.len == 3 && b.len == 0));
  299. ck_assert(i != 1
  300. || (a.ptr == list + 4 && a.len == 4 && b.ptr == list + 9
  301. && b.len == 4));
  302. ck_assert(i != 2 || (a.ptr == list + 14 && a.len == 1 && b.len == 0));
  303. }
  304. }
  305. END_TEST
  306. START_TEST(test_skip_quoted)
  307. {
  308. /* Adapted from unit_test.c */
  309. /* Copyright (c) 2013-2015 the Civetweb developers */
  310. /* Copyright (c) 2004-2013 Sergey Lyubka */
  311. char x[] = "a=1, b=2, c='hi \' there', d='here\\, there'", *s = x, *p;
  312. p = skip_quoted(&s, ", ", ", ", 0);
  313. ck_assert(p != NULL && !strcmp(p, "a=1"));
  314. p = skip_quoted(&s, ", ", ", ", 0);
  315. ck_assert(p != NULL && !strcmp(p, "b=2"));
  316. p = skip_quoted(&s, ",", " ", 0);
  317. ck_assert(p != NULL && !strcmp(p, "c='hi \' there'"));
  318. p = skip_quoted(&s, ",", " ", '\\');
  319. ck_assert(p != NULL && !strcmp(p, "d='here, there'"));
  320. ck_assert(*s == 0);
  321. }
  322. END_TEST
  323. static int
  324. alloc_printf(char **buf, size_t size, const char *fmt, ...)
  325. {
  326. /* Test helper function - adapted from unit_test.c */
  327. /* Copyright (c) 2013-2015 the Civetweb developers */
  328. /* Copyright (c) 2004-2013 Sergey Lyubka */
  329. va_list ap;
  330. int ret = 0;
  331. va_start(ap, fmt);
  332. ret = alloc_vprintf(buf, *buf, size, fmt, ap);
  333. va_end(ap);
  334. return ret;
  335. }
  336. static int
  337. alloc_printf2(char **buf, const char *fmt, ...)
  338. {
  339. /* Test alternative implementation */
  340. va_list ap;
  341. int ret = 0;
  342. va_start(ap, fmt);
  343. ret = alloc_vprintf2(buf, fmt, ap);
  344. va_end(ap);
  345. return ret;
  346. }
  347. START_TEST(test_alloc_vprintf)
  348. {
  349. /* Adapted from unit_test.c */
  350. /* Copyright (c) 2013-2015 the Civetweb developers */
  351. /* Copyright (c) 2004-2013 Sergey Lyubka */
  352. char buf[MG_BUF_LEN], *p = buf;
  353. ck_assert(alloc_printf(&p, sizeof(buf), "%s", "hi") == 2);
  354. ck_assert(p == buf);
  355. ck_assert(alloc_printf(&p, sizeof(buf), "%s", "") == 0);
  356. ck_assert(p == buf);
  357. ck_assert(alloc_printf(&p, sizeof(buf), "") == 0);
  358. ck_assert(p == buf);
  359. /* Pass small buffer, make sure alloc_printf allocates */
  360. ck_assert(alloc_printf(&p, 1, "%s", "hello") == 5);
  361. ck_assert(p != buf);
  362. mg_free(p);
  363. p = buf;
  364. /* Test alternative implementation */
  365. ck_assert(alloc_printf2(&p, "%s", "hello") == 5);
  366. ck_assert(p != buf);
  367. mg_free(p);
  368. p = buf;
  369. }
  370. END_TEST
  371. START_TEST(test_mg_vsnprintf)
  372. {
  373. char buf[16];
  374. int is_trunc;
  375. memset(buf, 0, sizeof(buf));
  376. is_trunc = 777;
  377. mg_snprintf(NULL, &is_trunc, buf, 10, "%8i", 123);
  378. ck_assert_str_eq(buf, " 123");
  379. ck_assert_int_eq(is_trunc, 0);
  380. is_trunc = 777;
  381. mg_snprintf(NULL, &is_trunc, buf, 10, "%9i", 123);
  382. ck_assert_str_eq(buf, " 123");
  383. ck_assert_int_eq(is_trunc, 0);
  384. is_trunc = 777;
  385. mg_snprintf(NULL, &is_trunc, buf, 9, "%9i", 123);
  386. ck_assert_str_eq(buf, " 12");
  387. ck_assert_int_eq(is_trunc, 1);
  388. is_trunc = 777;
  389. mg_snprintf(NULL, &is_trunc, buf, 8, "%9i", 123);
  390. ck_assert_str_eq(buf, " 1");
  391. ck_assert_int_eq(is_trunc, 1);
  392. is_trunc = 777;
  393. mg_snprintf(NULL, &is_trunc, buf, 7, "%9i", 123);
  394. ck_assert_str_eq(buf, " ");
  395. ck_assert_int_eq(is_trunc, 1);
  396. strcpy(buf, "1234567890");
  397. mg_snprintf(NULL, &is_trunc, buf, 0, "%i", 543);
  398. ck_assert_str_eq(buf, "1234567890");
  399. }
  400. END_TEST
  401. START_TEST(test_mg_strcasestr)
  402. {
  403. /* Adapted from unit_test.c */
  404. /* Copyright (c) 2013-2015 the Civetweb developers */
  405. /* Copyright (c) 2004-2013 Sergey Lyubka */
  406. static const char *big1 = "abcdef";
  407. ck_assert(mg_strcasestr("Y", "X") == NULL);
  408. ck_assert(mg_strcasestr("Y", "y") != NULL);
  409. ck_assert(mg_strcasestr(big1, "X") == NULL);
  410. ck_assert(mg_strcasestr(big1, "CD") == big1 + 2);
  411. ck_assert(mg_strcasestr("aa", "AAB") == NULL);
  412. }
  413. END_TEST
  414. START_TEST(test_parse_port_string)
  415. {
  416. /* Adapted from unit_test.c */
  417. /* Copyright (c) 2013-2015 the Civetweb developers */
  418. /* Copyright (c) 2004-2013 Sergey Lyubka */
  419. static const char *valid[] =
  420. { "0",
  421. "1",
  422. "1s",
  423. "1r",
  424. "1.2.3.4:1",
  425. "1.2.3.4:1s",
  426. "1.2.3.4:1r",
  427. #if defined(USE_IPV6)
  428. "[::1]:123",
  429. "[::]:80",
  430. "[3ffe:2a00:100:7031::1]:900",
  431. "+80",
  432. #endif
  433. NULL };
  434. static const char *invalid[] = {
  435. "99999", "1k", "1.2.3", "1.2.3.4:", "1.2.3.4:2p", NULL};
  436. struct socket so;
  437. struct vec vec;
  438. int ip_family;
  439. int i;
  440. for (i = 0; valid[i] != NULL; i++) {
  441. vec.ptr = valid[i];
  442. vec.len = strlen(vec.ptr);
  443. ip_family = 123;
  444. ck_assert_int_ne(parse_port_string(&vec, &so, &ip_family), 0);
  445. if (i < 7) {
  446. ck_assert_int_eq(ip_family, 4);
  447. } else if (i < 10) {
  448. ck_assert_int_eq(ip_family, 6);
  449. } else {
  450. ck_assert_int_eq(ip_family, 4 + 6);
  451. }
  452. }
  453. for (i = 0; invalid[i] != NULL; i++) {
  454. vec.ptr = invalid[i];
  455. vec.len = strlen(vec.ptr);
  456. ip_family = 123;
  457. ck_assert_int_eq(parse_port_string(&vec, &so, &ip_family), 0);
  458. ck_assert_int_eq(ip_family, 0);
  459. }
  460. }
  461. END_TEST
  462. START_TEST(test_encode_decode)
  463. {
  464. char buf[128];
  465. const char *alpha = "abcdefghijklmnopqrstuvwxyz";
  466. const char *nonalpha = " !\"#$%&'()*+,-./0123456789:;<=>?@";
  467. const char *nonalpha_url_enc1 =
  468. "%20%21%22%23$%25%26%27()%2a%2b,-.%2f0123456789%3a;%3c%3d%3e%3f%40";
  469. const char *nonalpha_url_enc2 =
  470. "%20!%22%23%24%25%26'()*%2B%2C-.%2F0123456789%3A%3B%3C%3D%3E%3F%40";
  471. int ret;
  472. size_t len;
  473. #if defined(USE_WEBSOCKET) || defined(USE_LUA)
  474. const char *alpha_b64_enc = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXo=";
  475. const char *nonalpha_b64_enc =
  476. "ICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9Pj9A";
  477. memset(buf, 77, sizeof(buf));
  478. base64_encode((unsigned char *)"a", 1, buf);
  479. ck_assert_str_eq(buf, "YQ==");
  480. memset(buf, 77, sizeof(buf));
  481. base64_encode((unsigned char *)"ab", 1, buf);
  482. ck_assert_str_eq(buf, "YQ==");
  483. memset(buf, 77, sizeof(buf));
  484. base64_encode((unsigned char *)"ab", 2, buf);
  485. ck_assert_str_eq(buf, "YWI=");
  486. memset(buf, 77, sizeof(buf));
  487. base64_encode((unsigned char *)alpha, 3, buf);
  488. ck_assert_str_eq(buf, "YWJj");
  489. memset(buf, 77, sizeof(buf));
  490. base64_encode((unsigned char *)alpha, 4, buf);
  491. ck_assert_str_eq(buf, "YWJjZA==");
  492. memset(buf, 77, sizeof(buf));
  493. base64_encode((unsigned char *)alpha, 5, buf);
  494. ck_assert_str_eq(buf, "YWJjZGU=");
  495. memset(buf, 77, sizeof(buf));
  496. base64_encode((unsigned char *)alpha, 6, buf);
  497. ck_assert_str_eq(buf, "YWJjZGVm");
  498. memset(buf, 77, sizeof(buf));
  499. base64_encode((unsigned char *)alpha, (int)strlen(alpha), buf);
  500. ck_assert_str_eq(buf, alpha_b64_enc);
  501. memset(buf, 77, sizeof(buf));
  502. base64_encode((unsigned char *)nonalpha, (int)strlen(nonalpha), buf);
  503. ck_assert_str_eq(buf, nonalpha_b64_enc);
  504. #endif
  505. #if defined(USE_LUA)
  506. memset(buf, 77, sizeof(buf));
  507. len = 9999;
  508. ret = base64_decode((unsigned char *)alpha_b64_enc,
  509. (int)strlen(alpha_b64_enc),
  510. buf,
  511. &len);
  512. ck_assert_int_eq(ret, -1);
  513. ck_assert_uint_eq((unsigned int)len, (unsigned int)strlen(alpha));
  514. ck_assert_str_eq(buf, alpha);
  515. memset(buf, 77, sizeof(buf));
  516. len = 9999;
  517. ret = base64_decode((unsigned char *)"AAA*AAA", 7, buf, &len);
  518. ck_assert_int_eq(ret, 3);
  519. #endif
  520. memset(buf, 77, sizeof(buf));
  521. ret = mg_url_encode(alpha, buf, sizeof(buf));
  522. ck_assert_int_eq(ret, (int)strlen(buf));
  523. ck_assert_int_eq(ret, (int)strlen(alpha));
  524. ck_assert_str_eq(buf, alpha);
  525. memset(buf, 77, sizeof(buf));
  526. ret = mg_url_encode(nonalpha, buf, sizeof(buf));
  527. ck_assert_int_eq(ret, (int)strlen(buf));
  528. ck_assert_int_eq(ret, (int)strlen(nonalpha_url_enc1));
  529. ck_assert_str_eq(buf, nonalpha_url_enc1);
  530. memset(buf, 77, sizeof(buf));
  531. ret = mg_url_decode(alpha, (int)strlen(alpha), buf, sizeof(buf), 0);
  532. ck_assert_int_eq(ret, (int)strlen(buf));
  533. ck_assert_int_eq(ret, (int)strlen(alpha));
  534. ck_assert_str_eq(buf, alpha);
  535. memset(buf, 77, sizeof(buf));
  536. ret = mg_url_decode(
  537. nonalpha_url_enc1, (int)strlen(nonalpha_url_enc1), buf, sizeof(buf), 0);
  538. ck_assert_int_eq(ret, (int)strlen(buf));
  539. ck_assert_int_eq(ret, (int)strlen(nonalpha));
  540. ck_assert_str_eq(buf, nonalpha);
  541. memset(buf, 77, sizeof(buf));
  542. ret = mg_url_decode(
  543. nonalpha_url_enc2, (int)strlen(nonalpha_url_enc2), buf, sizeof(buf), 0);
  544. ck_assert_int_eq(ret, (int)strlen(buf));
  545. ck_assert_int_eq(ret, (int)strlen(nonalpha));
  546. ck_assert_str_eq(buf, nonalpha);
  547. /* len could be unused, if base64_decode is not tested because USE_LUA is
  548. * not defined */
  549. (void)len;
  550. }
  551. END_TEST
  552. START_TEST(test_mask_data)
  553. {
  554. #if defined(USE_WEBSOCKET)
  555. char in[1024];
  556. char out[1024];
  557. int i;
  558. #endif
  559. uint32_t mask = 0x61626364;
  560. /* TODO: adapt test for big endian */
  561. ck_assert((*(unsigned char *)&mask) == 0x64u);
  562. #if defined(USE_WEBSOCKET)
  563. memset(in, 0, sizeof(in));
  564. memset(out, 99, sizeof(out));
  565. mask_data(in, sizeof(out), 0, out);
  566. ck_assert(!memcmp(out, in, sizeof(out)));
  567. for (i = 0; i < 1024; i++) {
  568. in[i] = (char)((unsigned char)i);
  569. }
  570. mask_data(in, 107, 0, out);
  571. ck_assert(!memcmp(out, in, 107));
  572. mask_data(in, 256, 0x01010101, out);
  573. for (i = 0; i < 256; i++) {
  574. ck_assert_int_eq((int)((unsigned char)out[i]),
  575. (int)(((unsigned char)in[i]) ^ (char)1u));
  576. }
  577. for (i = 256; i < (int)sizeof(out); i++) {
  578. ck_assert_int_eq((int)((unsigned char)out[i]), (int)0);
  579. }
  580. /* TODO: check this for big endian */
  581. mask_data(in, 5, 0x01020304, out);
  582. ck_assert_uint_eq((unsigned char)out[0], 0u ^ 4u);
  583. ck_assert_uint_eq((unsigned char)out[1], 1u ^ 3u);
  584. ck_assert_uint_eq((unsigned char)out[2], 2u ^ 2u);
  585. ck_assert_uint_eq((unsigned char)out[3], 3u ^ 1u);
  586. ck_assert_uint_eq((unsigned char)out[4], 4u ^ 4u);
  587. #endif
  588. }
  589. END_TEST
  590. START_TEST(test_parse_date_string)
  591. {
  592. #if !defined(NO_CACHING)
  593. time_t now = time(0);
  594. struct tm *tm = gmtime(&now);
  595. char date[64] = {0};
  596. unsigned long i;
  597. ck_assert_uint_eq((unsigned long)parse_date_string("1/Jan/1970 00:01:02"),
  598. 62ul);
  599. ck_assert_uint_eq((unsigned long)parse_date_string("1 Jan 1970 00:02:03"),
  600. 123ul);
  601. ck_assert_uint_eq((unsigned long)parse_date_string("1-Jan-1970 00:03:04"),
  602. 184ul);
  603. ck_assert_uint_eq((unsigned long)parse_date_string(
  604. "Xyz, 1 Jan 1970 00:04:05"),
  605. 245ul);
  606. gmt_time_string(date, sizeof(date), &now);
  607. ck_assert_uint_eq((uintmax_t)parse_date_string(date), (uintmax_t)now);
  608. sprintf(date,
  609. "%02u %s %04u %02u:%02u:%02u",
  610. tm->tm_mday,
  611. month_names[tm->tm_mon],
  612. tm->tm_year + 1900,
  613. tm->tm_hour,
  614. tm->tm_min,
  615. tm->tm_sec);
  616. ck_assert_uint_eq((uintmax_t)parse_date_string(date), (uintmax_t)now);
  617. gmt_time_string(date, 1, NULL);
  618. ck_assert_str_eq(date, "");
  619. gmt_time_string(date, 6, NULL);
  620. ck_assert_str_eq(date,
  621. "Thu, "); /* part of "Thu, 01 Jan 1970 00:00:00 GMT" */
  622. gmt_time_string(date, sizeof(date), NULL);
  623. ck_assert_str_eq(date, "Thu, 01 Jan 1970 00:00:00 GMT");
  624. for (i = 2ul; i < 0x8000000ul; i += i / 2) {
  625. now = (time_t)i;
  626. gmt_time_string(date, sizeof(date), &now);
  627. ck_assert_uint_eq((uintmax_t)parse_date_string(date), (uintmax_t)now);
  628. tm = gmtime(&now);
  629. sprintf(date,
  630. "%02u-%s-%04u %02u:%02u:%02u",
  631. tm->tm_mday,
  632. month_names[tm->tm_mon],
  633. tm->tm_year + 1900,
  634. tm->tm_hour,
  635. tm->tm_min,
  636. tm->tm_sec);
  637. ck_assert_uint_eq((uintmax_t)parse_date_string(date), (uintmax_t)now);
  638. }
  639. #endif
  640. }
  641. END_TEST
  642. START_TEST(test_sha1)
  643. {
  644. #ifdef SHA1_DIGEST_SIZE
  645. SHA_CTX sha_ctx;
  646. uint8_t digest[SHA1_DIGEST_SIZE] = {0};
  647. char str[48] = {0};
  648. int i;
  649. const char *test_str;
  650. ck_assert_uint_eq(sizeof(digest), 20);
  651. ck_assert_uint_gt(sizeof(str), sizeof(digest) * 2 + 1);
  652. /* empty string */
  653. SHA1_Init(&sha_ctx);
  654. SHA1_Final(digest, &sha_ctx);
  655. bin2str(str, digest, sizeof(digest));
  656. ck_assert_uint_eq(strlen(str), 40);
  657. ck_assert_str_eq(str, "da39a3ee5e6b4b0d3255bfef95601890afd80709");
  658. /* empty string */
  659. SHA1_Init(&sha_ctx);
  660. SHA1_Update(&sha_ctx, (uint8_t *)"abc", 0);
  661. SHA1_Final(digest, &sha_ctx);
  662. bin2str(str, digest, sizeof(digest));
  663. ck_assert_uint_eq(strlen(str), 40);
  664. ck_assert_str_eq(str, "da39a3ee5e6b4b0d3255bfef95601890afd80709");
  665. /* "abc" */
  666. SHA1_Init(&sha_ctx);
  667. SHA1_Update(&sha_ctx, (uint8_t *)"abc", 3);
  668. SHA1_Final(digest, &sha_ctx);
  669. bin2str(str, digest, sizeof(digest));
  670. ck_assert_uint_eq(strlen(str), 40);
  671. ck_assert_str_eq(str, "a9993e364706816aba3e25717850c26c9cd0d89d");
  672. /* "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq" */
  673. test_str = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq";
  674. SHA1_Init(&sha_ctx);
  675. SHA1_Update(&sha_ctx, (uint8_t *)test_str, (uint32_t)strlen(test_str));
  676. SHA1_Final(digest, &sha_ctx);
  677. bin2str(str, digest, sizeof(digest));
  678. ck_assert_uint_eq(strlen(str), 40);
  679. ck_assert_str_eq(str, "84983e441c3bd26ebaae4aa1f95129e5e54670f1");
  680. /* a million "a" */
  681. SHA1_Init(&sha_ctx);
  682. for (i = 0; i < 1000000; i++) {
  683. SHA1_Update(&sha_ctx, (uint8_t *)"a", 1);
  684. }
  685. SHA1_Final(digest, &sha_ctx);
  686. bin2str(str, digest, sizeof(digest));
  687. ck_assert_uint_eq(strlen(str), 40);
  688. ck_assert_str_eq(str, "34aa973cd4c4daa4f61eeb2bdbad27316534016f");
  689. /* a million "a" in blocks of 10 */
  690. SHA1_Init(&sha_ctx);
  691. for (i = 0; i < 100000; i++) {
  692. SHA1_Update(&sha_ctx, (uint8_t *)"aaaaaaaaaa", 10);
  693. }
  694. SHA1_Final(digest, &sha_ctx);
  695. bin2str(str, digest, sizeof(digest));
  696. ck_assert_uint_eq(strlen(str), 40);
  697. ck_assert_str_eq(str, "34aa973cd4c4daa4f61eeb2bdbad27316534016f");
  698. #else
  699. /* Can not test, if SHA1 is not included */
  700. ck_assert(1);
  701. #endif
  702. }
  703. END_TEST
  704. Suite *
  705. make_private_suite(void)
  706. {
  707. Suite *const suite = suite_create("Private");
  708. TCase *const tcase_http_message = tcase_create("HTTP Message");
  709. TCase *const tcase_url_parsing = tcase_create("URL Parsing");
  710. TCase *const tcase_internal_parse = tcase_create("Internal Parsing");
  711. TCase *const tcase_encode_decode = tcase_create("Encode Decode");
  712. TCase *const tcase_mask_data = tcase_create("Mask Data");
  713. TCase *const tcase_parse_date_string = tcase_create("Date Parsing");
  714. TCase *const tcase_sha1 = tcase_create("SHA1");
  715. tcase_add_test(tcase_http_message, test_parse_http_message);
  716. tcase_add_test(tcase_http_message, test_should_keep_alive);
  717. tcase_set_timeout(tcase_http_message, civetweb_min_test_timeout);
  718. suite_add_tcase(suite, tcase_http_message);
  719. tcase_add_test(tcase_url_parsing, test_match_prefix);
  720. tcase_add_test(tcase_url_parsing,
  721. test_remove_double_dots_and_double_slashes);
  722. tcase_add_test(tcase_url_parsing, test_is_valid_uri);
  723. tcase_set_timeout(tcase_url_parsing, civetweb_min_test_timeout);
  724. suite_add_tcase(suite, tcase_url_parsing);
  725. tcase_add_test(tcase_internal_parse, test_next_option);
  726. tcase_add_test(tcase_internal_parse, test_skip_quoted);
  727. tcase_add_test(tcase_internal_parse, test_mg_strcasestr);
  728. tcase_add_test(tcase_internal_parse, test_alloc_vprintf);
  729. tcase_add_test(tcase_internal_parse, test_mg_vsnprintf);
  730. tcase_add_test(tcase_internal_parse, test_parse_port_string);
  731. tcase_set_timeout(tcase_internal_parse, civetweb_min_test_timeout);
  732. suite_add_tcase(suite, tcase_internal_parse);
  733. tcase_add_test(tcase_encode_decode, test_encode_decode);
  734. tcase_set_timeout(tcase_encode_decode, civetweb_min_test_timeout);
  735. suite_add_tcase(suite, tcase_encode_decode);
  736. tcase_add_test(tcase_mask_data, test_mask_data);
  737. tcase_set_timeout(tcase_mask_data, civetweb_min_test_timeout);
  738. suite_add_tcase(suite, tcase_mask_data);
  739. tcase_add_test(tcase_parse_date_string, test_parse_date_string);
  740. tcase_set_timeout(tcase_parse_date_string, civetweb_min_test_timeout);
  741. suite_add_tcase(suite, tcase_parse_date_string);
  742. tcase_add_test(tcase_sha1, test_sha1);
  743. tcase_set_timeout(tcase_sha1, civetweb_min_test_timeout);
  744. suite_add_tcase(suite, tcase_sha1);
  745. return suite;
  746. }
  747. #ifdef REPLACE_CHECK_FOR_LOCAL_DEBUGGING
  748. /* Used to debug test cases without using the check framework */
  749. void
  750. MAIN_PRIVATE(void)
  751. {
  752. #if defined(_WIN32)
  753. /* test_parse_port_string requires WSAStartup for IPv6 */
  754. WSADATA data;
  755. WSAStartup(MAKEWORD(2, 2), &data);
  756. #endif
  757. test_alloc_vprintf(0);
  758. test_mg_vsnprintf(0);
  759. test_remove_double_dots_and_double_slashes(0);
  760. test_parse_date_string(0);
  761. test_parse_port_string(0);
  762. test_parse_http_message(0);
  763. test_sha1(0);
  764. #if defined(_WIN32)
  765. WSACleanup();
  766. #endif
  767. }
  768. #endif