143 lines
4.3 KiB
C
143 lines
4.3 KiB
C
/***************************************************************************
|
|
* _ _ ____ _
|
|
* Project ___| | | | _ \| |
|
|
* / __| | | | |_) | |
|
|
* | (__| |_| | _ <| |___
|
|
* \___|\___/|_| \_\_____|
|
|
*
|
|
* Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
*
|
|
* This software is licensed as described in the file COPYING, which
|
|
* you should have received as part of this distribution. The terms
|
|
* are also available at https://curl.se/docs/copyright.html.
|
|
*
|
|
* You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
* copies of the Software, and permit persons to whom the Software is
|
|
* furnished to do so, under the terms of the COPYING file.
|
|
*
|
|
* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
* KIND, either express or implied.
|
|
*
|
|
* SPDX-License-Identifier: curl
|
|
*
|
|
***************************************************************************/
|
|
#include "unitcheck.h"
|
|
#include "memdebug.h"
|
|
#include "unitprotos.h"
|
|
|
|
static CURLcode test_unit1395(const char *arg)
|
|
{
|
|
UNITTEST_BEGIN_SIMPLE
|
|
|
|
unsigned int i;
|
|
int fails = 0;
|
|
|
|
struct dotdot {
|
|
const char *input;
|
|
const char *output;
|
|
};
|
|
|
|
const struct dotdot pairs[] = {
|
|
{ "%2f%2e%2e%2f/../a", "%2f%2e%2e%2f/a" },
|
|
{ "%2f%2e%2e%2f/../", "%2f%2e%2e%2f/" },
|
|
{ "%2f%2e%2e%2f/.", "%2f%2e%2e%2f/" },
|
|
{ "%2f%2e%2e%2f/", "%2f%2e%2e%2f/" },
|
|
{ "%2f%2e%2e%2f", "%2f%2e%2e%2f" },
|
|
{ "%2f%2e%2e%2", "%2f%2e%2e%2" },
|
|
{ "%2f%2e%2e%", "%2f%2e%2e%" },
|
|
{ "%2f%2e%2e", "%2f%2e%2e" },
|
|
{ "%2f%2e%2", "%2f%2e%2" },
|
|
{ "%2f%2e%", "%2f%2e%" },
|
|
{ "%2f%2e", "%2f%2e" },
|
|
{ "%2f%2", "%2f%2" },
|
|
{ "%2f%", "%2f%" },
|
|
{ "%2f", "%2f" },
|
|
{ "%2", "%2" },
|
|
{ "%", NULL },
|
|
{ "2", NULL },
|
|
{ "e", NULL },
|
|
{ ".", NULL },
|
|
{ "./", "" },
|
|
{ "..", "" },
|
|
{ "../", "" },
|
|
{ "../a", "a" },
|
|
{ "///moo.", "///moo." },
|
|
{ ".///moo.", "//moo." },
|
|
{ "./moo..", "moo.." },
|
|
{ "./moo../", "moo../" },
|
|
{ "./moo../.m", "moo../.m" },
|
|
{ "./moo", "moo" },
|
|
{ "../moo", "moo" },
|
|
{ "../moo?", "moo?" },
|
|
{ "../moo?#", "moo?#" },
|
|
{ "../moo?#?..", "moo?#?.." },
|
|
{ "/../moo/..", "/" },
|
|
{ "/a/c/%2e%2E/b", "/a/b" },
|
|
{ "/a/%2e/g", "/a/g" },
|
|
{ "/a/b/c/./g", "/a/b/c/g" },
|
|
{ "/a/c/../b", "/a/b" },
|
|
{ "/a/b/c/./../../g", "/a/g" },
|
|
{ "/a/b/c/./%2e%2E/../g", "/a/g" },
|
|
{ "/a/b/c/./../%2e%2E/g", "/a/g" },
|
|
{ "/a/b/c/%2E/%2e%2E/%2e%2E/g", "/a/g" },
|
|
{ "mid/content=5/../6", "mid/6" },
|
|
{ "/hello/../moo", "/moo" },
|
|
{ "/1/../1", "/1" },
|
|
{ "/1/./1", "/1/1" },
|
|
{ "/1/%2e/1", "/1/1" },
|
|
{ "/1/%2E/1", "/1/1" },
|
|
{ "/1/..", "/" },
|
|
{ "/1/.", "/1/" },
|
|
{ "/1/%2e", "/1/" },
|
|
{ "/1/%2E", "/1/" },
|
|
{ "/1/./..", "/" },
|
|
{ "/1/%2e/.%2E", "/" },
|
|
{ "/1/./%2e.", "/" },
|
|
{ "/1/./../2", "/2" },
|
|
{ "/hello/1/./../2", "/hello/2" },
|
|
{ "test/this", "test/this" },
|
|
{ "test/this/../now", "test/now" },
|
|
{ "/1../moo../foo", "/1../moo../foo"},
|
|
{ "/../../moo", "/moo"},
|
|
{ "/../../moo?", "/moo?"},
|
|
{ "/123?", "/123?" },
|
|
{ "/", NULL },
|
|
{ "", NULL },
|
|
{ "/.../", "/.../" },
|
|
{ "/.", "/" },
|
|
{ "/..", "/" },
|
|
{ "/moo/..", "/" },
|
|
{ "/..", "/" },
|
|
{ "/.", "/" },
|
|
};
|
|
|
|
for(i = 0; i < CURL_ARRAYSIZE(pairs); i++) {
|
|
char *out;
|
|
int err = dedotdotify(pairs[i].input, strlen(pairs[i].input), &out);
|
|
abort_unless(err == 0, "returned error");
|
|
abort_if(err && out, "returned error with output");
|
|
|
|
if(out && pairs[i].output && strcmp(out, pairs[i].output)) {
|
|
curl_mfprintf(stderr, "Test %u: '%s' gave '%s' instead of '%s'\n",
|
|
i, pairs[i].input, out, pairs[i].output);
|
|
fail("Test case output mismatched");
|
|
fails++;
|
|
}
|
|
else if((!out && pairs[i].output) ||
|
|
(out && !pairs[i].output)) {
|
|
curl_mfprintf(stderr, "Test %u: '%s' gave '%s' instead of '%s'\n",
|
|
i, pairs[i].input, out ? out : "(null)",
|
|
pairs[i].output ? pairs[i].output : "(null)");
|
|
fail("Test case output mismatched");
|
|
fails++;
|
|
}
|
|
else
|
|
curl_mfprintf(stderr, "Test %u: OK\n", i);
|
|
free(out);
|
|
}
|
|
|
|
fail_if(fails, "output mismatched");
|
|
|
|
UNITTEST_END_SIMPLE
|
|
}
|