用于EagleEye3.0 规则集漏报和误报测试的示例项目,项目收集于github和gitee
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

221 lines
7.9 KiB

/* Copyright (c) 2012, 2019, Oracle and/or its affiliates. All rights reserved.
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License, version 2.0,
as published by the Free Software Foundation.
This program is also distributed with certain software (including
but not limited to OpenSSL) that is licensed under separate terms,
as designated in a particular file or component or in included license
documentation. The authors of MySQL hereby grant you an additional
permission to link the program and your derivative works with the
separately licensed software that they have included with MySQL.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License, version 2.0, for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA */
// First include (the generated) my_config.h, to get correct platform defines.
#include <gtest/gtest.h>
#include "my_config.h"
#include "test_utils.h"
#include "my_io.h"
#include "my_thread.h"
#include "sql/log.h"
#include "sql/named_pipe.h"
#include "sql/sql_class.h"
#include <sddl.h>
namespace win_unittest {
using my_testing::Mock_error_handler;
using my_testing::Server_initializer;
extern "C" void mock_error_handler_hook(uint err, const char *str, myf MyFlags);
/**
An alternative error_handler for non-server unit tests since it does
not rely on THD. It sets the global error handler function.
Note that a Mock_global_error_handler instance is used in
TEST_F(NamedPipeTest, CreatePipeTwice) specifically to verify that a
server range error code is passed to my_printf_error during the execution of
create_server_named_pipe.
The use of my_printf_error with a server range error code would cause
an assertion failure if the "usual" combination of Mock_error_handler and
my_message_sql were used to verify this expected error code.
As and when the logger is refactored to simplify unit testing of expected
error codes, the my_printf_error call should be replaced with LogErr or
log_message and this use of Mock_global_error_handler replaced with the
appropriate (new) logger test.
*/
class Mock_global_error_handler {
public:
explicit Mock_global_error_handler(uint expected_error)
: m_expected_error(expected_error), m_handle_called(0) {
current = this;
m_old_error_handler_hook = error_handler_hook;
error_handler_hook = mock_error_handler_hook;
}
virtual ~Mock_global_error_handler() {
if (m_expected_error == 0) {
EXPECT_EQ(0, m_handle_called);
} else {
EXPECT_GT(m_handle_called, 0);
}
error_handler_hook = m_old_error_handler_hook;
current = NULL;
}
void error_handler(uint err) {
EXPECT_EQ(m_expected_error, err);
++m_handle_called;
}
int handle_called() const { return m_handle_called; }
static Mock_global_error_handler *current;
private:
uint m_expected_error;
int m_handle_called;
void (*m_old_error_handler_hook)(uint, const char *, myf);
};
Mock_global_error_handler *Mock_global_error_handler::current = NULL;
/*
Error handler function.
*/
extern "C" void mock_error_handler_hook(uint err, const char *, myf) {
if (Mock_global_error_handler::current)
Mock_global_error_handler::current->error_handler(err);
}
class NamedPipeTest : public ::testing::Test {
protected:
static void SetUpTestCase() {
m_old_error_handler_hook = error_handler_hook;
// Make sure my_error() ends up calling my_message_sql so that
// Mock_error_handler is actually triggered.
error_handler_hook = my_message_sql;
}
static void TearDownTestCase() {
error_handler_hook = m_old_error_handler_hook;
}
virtual void SetUp() {
m_initializer.SetUp();
char pipe_rand_name[256];
m_pipe_handle = INVALID_HANDLE_VALUE;
/*
Generate a Unique Pipe Name incase multiple instances of the test is run.
*/
sprintf_s(pipe_rand_name, sizeof(pipe_rand_name), "Pipe-%x",
GetTickCount());
const ::testing::TestInfo *const test_info =
::testing::UnitTest::GetInstance()->current_test_info();
m_name.append(pipe_rand_name);
m_name.append("gunit");
m_name.append(test_info->name());
}
virtual void TearDown() {
if (m_pipe_handle != INVALID_HANDLE_VALUE) {
EXPECT_TRUE(CloseHandle(m_pipe_handle));
}
m_initializer.TearDown();
}
SECURITY_ATTRIBUTES *mp_sec_attr;
char m_pipe_name[256];
HANDLE m_pipe_handle;
std::string m_name;
Server_initializer m_initializer;
static void (*m_old_error_handler_hook)(uint, const char *, myf);
};
void (*NamedPipeTest::m_old_error_handler_hook)(uint, const char *, myf);
// Basic test: create a named pipe.
TEST_F(NamedPipeTest, CreatePipe) {
char exp_pipe_name[256];
m_pipe_handle = create_server_named_pipe(&mp_sec_attr, 1024, m_name.c_str(),
m_pipe_name, sizeof(m_pipe_name));
strxnmov(exp_pipe_name, sizeof(exp_pipe_name) - 1, "\\\\.\\pipe\\",
m_name.c_str(), NullS);
EXPECT_STREQ(m_pipe_name, exp_pipe_name);
EXPECT_NE(INVALID_HANDLE_VALUE, m_pipe_handle);
}
// Verify that we fail if we try to create the same named pipe twice.
TEST_F(NamedPipeTest, CreatePipeTwice) {
m_pipe_handle = create_server_named_pipe(&mp_sec_attr, 1024, m_name.c_str(),
m_pipe_name, sizeof(m_pipe_name));
EXPECT_NE(INVALID_HANDLE_VALUE, m_pipe_handle);
// Use Mock_global_error_handler rather than Mock_error_handler to verify
// server error codes (routing server error codes through my_message_sql
// via the error_handler_hook with Mock_error_handler would fail an assertion)
Mock_global_error_handler error_handler(ER_NPIPE_PIPE_ALREADY_IN_USE);
HANDLE handle = create_server_named_pipe(&mp_sec_attr, 1024, m_name.c_str(),
m_pipe_name, sizeof(m_pipe_name));
EXPECT_EQ(INVALID_HANDLE_VALUE, handle);
}
// Verify that a warning is written to the error log when using
// "*everyone* as the full access group name.
TEST_F(NamedPipeTest, CreatePipeForEveryone) {
Mock_error_handler error_handler(m_initializer.thd(),
WARN_NAMED_PIPE_ACCESS_EVERYONE);
m_pipe_handle =
create_server_named_pipe(&mp_sec_attr, 1024, m_name.c_str(), m_pipe_name,
sizeof(m_pipe_name), "*everyone*");
EXPECT_NE(INVALID_HANDLE_VALUE, m_pipe_handle);
}
// Verify that a warning is written to the error log when using
// the group name corresponding to the built in Windows group
// with SID S-1-1-0 (i.e. "everyone" on English systems)
TEST_F(NamedPipeTest, CreatePipeForEveryoneSid) {
PSID everyone_SID;
EXPECT_TRUE(ConvertStringSidToSid("S-1-1-0", &everyone_SID));
const DWORD max_name_len = 256;
char everyone_name[max_name_len];
DWORD everyone_name_size = max_name_len;
char domain_name[max_name_len];
DWORD domain_name_size = max_name_len;
SID_NAME_USE name_use;
EXPECT_TRUE(LookupAccountSid(NULL, everyone_SID, everyone_name,
&everyone_name_size, domain_name,
&domain_name_size, &name_use));
// The "S-1-1-0" SID is well known, so we expect the domain_name to empty and
// the name_use to be SidTypeWellKnownGroup
EXPECT_EQ(domain_name_size, 0);
EXPECT_EQ(name_use, SidTypeWellKnownGroup);
Mock_error_handler error_handler(m_initializer.thd(),
WARN_NAMED_PIPE_ACCESS_EVERYONE);
m_pipe_handle =
create_server_named_pipe(&mp_sec_attr, 1024, m_name.c_str(), m_pipe_name,
sizeof(m_pipe_name), everyone_name);
EXPECT_NE(INVALID_HANDLE_VALUE, m_pipe_handle);
}
} // namespace win_unittest