1*8542734aSAndroid Build Coastguard Worker /*
2*8542734aSAndroid Build Coastguard Worker * Copyright 2016 The Android Open Source Project
3*8542734aSAndroid Build Coastguard Worker *
4*8542734aSAndroid Build Coastguard Worker * Licensed under the Apache License, Version 2.0 (the "License");
5*8542734aSAndroid Build Coastguard Worker * you may not use this file except in compliance with the License.
6*8542734aSAndroid Build Coastguard Worker * You may obtain a copy of the License at
7*8542734aSAndroid Build Coastguard Worker *
8*8542734aSAndroid Build Coastguard Worker * http://www.apache.org/licenses/LICENSE-2.0
9*8542734aSAndroid Build Coastguard Worker *
10*8542734aSAndroid Build Coastguard Worker * Unless required by applicable law or agreed to in writing, software
11*8542734aSAndroid Build Coastguard Worker * distributed under the License is distributed on an "AS IS" BASIS,
12*8542734aSAndroid Build Coastguard Worker * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*8542734aSAndroid Build Coastguard Worker * See the License for the specific language governing permissions and
14*8542734aSAndroid Build Coastguard Worker * limitations under the License.
15*8542734aSAndroid Build Coastguard Worker *
16*8542734aSAndroid Build Coastguard Worker * IptablesBaseTest.cpp - utility class for tests that use iptables
17*8542734aSAndroid Build Coastguard Worker */
18*8542734aSAndroid Build Coastguard Worker
19*8542734aSAndroid Build Coastguard Worker #include <deque>
20*8542734aSAndroid Build Coastguard Worker #include <string>
21*8542734aSAndroid Build Coastguard Worker #include <vector>
22*8542734aSAndroid Build Coastguard Worker
23*8542734aSAndroid Build Coastguard Worker #include <gtest/gtest.h>
24*8542734aSAndroid Build Coastguard Worker
25*8542734aSAndroid Build Coastguard Worker #include <android-base/stringprintf.h>
26*8542734aSAndroid Build Coastguard Worker
27*8542734aSAndroid Build Coastguard Worker #define LOG_TAG "IptablesBaseTest"
28*8542734aSAndroid Build Coastguard Worker #include "IptablesBaseTest.h"
29*8542734aSAndroid Build Coastguard Worker #include "NetdConstants.h"
30*8542734aSAndroid Build Coastguard Worker
31*8542734aSAndroid Build Coastguard Worker #include <log/log.h>
32*8542734aSAndroid Build Coastguard Worker
33*8542734aSAndroid Build Coastguard Worker using android::base::StringPrintf;
34*8542734aSAndroid Build Coastguard Worker
IptablesBaseTest()35*8542734aSAndroid Build Coastguard Worker IptablesBaseTest::IptablesBaseTest() {
36*8542734aSAndroid Build Coastguard Worker sCmds.clear();
37*8542734aSAndroid Build Coastguard Worker sRestoreCmds.clear();
38*8542734aSAndroid Build Coastguard Worker sReturnValues.clear();
39*8542734aSAndroid Build Coastguard Worker }
40*8542734aSAndroid Build Coastguard Worker
fake_android_fork_exec(int argc,char * argv[],int * status,bool,bool)41*8542734aSAndroid Build Coastguard Worker int IptablesBaseTest::fake_android_fork_exec(int argc, char* argv[], int *status, bool, bool) {
42*8542734aSAndroid Build Coastguard Worker std::string cmd = argv[0];
43*8542734aSAndroid Build Coastguard Worker for (int i = 1; i < argc; i++) {
44*8542734aSAndroid Build Coastguard Worker if (argv[i] == nullptr) break;
45*8542734aSAndroid Build Coastguard Worker cmd += " ";
46*8542734aSAndroid Build Coastguard Worker cmd += argv[i];
47*8542734aSAndroid Build Coastguard Worker }
48*8542734aSAndroid Build Coastguard Worker sCmds.push_back(cmd);
49*8542734aSAndroid Build Coastguard Worker
50*8542734aSAndroid Build Coastguard Worker int ret;
51*8542734aSAndroid Build Coastguard Worker if (sReturnValues.size()) {
52*8542734aSAndroid Build Coastguard Worker ret = sReturnValues.front();
53*8542734aSAndroid Build Coastguard Worker sReturnValues.pop_front();
54*8542734aSAndroid Build Coastguard Worker } else {
55*8542734aSAndroid Build Coastguard Worker ret = 0;
56*8542734aSAndroid Build Coastguard Worker }
57*8542734aSAndroid Build Coastguard Worker
58*8542734aSAndroid Build Coastguard Worker if (status) {
59*8542734aSAndroid Build Coastguard Worker *status = ret;
60*8542734aSAndroid Build Coastguard Worker }
61*8542734aSAndroid Build Coastguard Worker return ret;
62*8542734aSAndroid Build Coastguard Worker }
63*8542734aSAndroid Build Coastguard Worker
fake_popen(const char *,const char * type)64*8542734aSAndroid Build Coastguard Worker FILE *IptablesBaseTest::fake_popen(const char * /* cmd */, const char *type) {
65*8542734aSAndroid Build Coastguard Worker if (sPopenContents.empty() || strcmp(type, "r") != 0) {
66*8542734aSAndroid Build Coastguard Worker return nullptr;
67*8542734aSAndroid Build Coastguard Worker }
68*8542734aSAndroid Build Coastguard Worker
69*8542734aSAndroid Build Coastguard Worker std::string realCmd = StringPrintf("echo '%s'", sPopenContents.front().c_str());
70*8542734aSAndroid Build Coastguard Worker sPopenContents.pop_front();
71*8542734aSAndroid Build Coastguard Worker return popen(realCmd.c_str(), "r"); // NOLINT(cert-env33-c)
72*8542734aSAndroid Build Coastguard Worker }
73*8542734aSAndroid Build Coastguard Worker
fakeExecIptablesRestoreWithOutput(IptablesTarget target,const std::string & commands,std::string * output)74*8542734aSAndroid Build Coastguard Worker int IptablesBaseTest::fakeExecIptablesRestoreWithOutput(IptablesTarget target,
75*8542734aSAndroid Build Coastguard Worker const std::string& commands,
76*8542734aSAndroid Build Coastguard Worker std::string *output) {
77*8542734aSAndroid Build Coastguard Worker sRestoreCmds.push_back({ target, commands });
78*8542734aSAndroid Build Coastguard Worker if (output != nullptr) {
79*8542734aSAndroid Build Coastguard Worker *output = sIptablesRestoreOutput.size() ? sIptablesRestoreOutput.front().c_str() : "";
80*8542734aSAndroid Build Coastguard Worker }
81*8542734aSAndroid Build Coastguard Worker if (sIptablesRestoreOutput.size()) {
82*8542734aSAndroid Build Coastguard Worker sIptablesRestoreOutput.pop_front();
83*8542734aSAndroid Build Coastguard Worker }
84*8542734aSAndroid Build Coastguard Worker return 0;
85*8542734aSAndroid Build Coastguard Worker }
86*8542734aSAndroid Build Coastguard Worker
fakeExecIptablesRestore(IptablesTarget target,const std::string & commands)87*8542734aSAndroid Build Coastguard Worker int IptablesBaseTest::fakeExecIptablesRestore(IptablesTarget target, const std::string& commands) {
88*8542734aSAndroid Build Coastguard Worker return fakeExecIptablesRestoreWithOutput(target, commands, nullptr);
89*8542734aSAndroid Build Coastguard Worker }
90*8542734aSAndroid Build Coastguard Worker
fakeExecIptablesRestoreCommand(IptablesTarget target,const std::string & table,const std::string & command,std::string * output)91*8542734aSAndroid Build Coastguard Worker int IptablesBaseTest::fakeExecIptablesRestoreCommand(IptablesTarget target,
92*8542734aSAndroid Build Coastguard Worker const std::string& table,
93*8542734aSAndroid Build Coastguard Worker const std::string& command,
94*8542734aSAndroid Build Coastguard Worker std::string *output) {
95*8542734aSAndroid Build Coastguard Worker std::string fullCmd = StringPrintf("-t %s %s", table.c_str(), command.c_str());
96*8542734aSAndroid Build Coastguard Worker return fakeExecIptablesRestoreWithOutput(target, fullCmd, output);
97*8542734aSAndroid Build Coastguard Worker }
98*8542734aSAndroid Build Coastguard Worker
expectIptablesRestoreCommands(const std::vector<std::string> & expectedCmds)99*8542734aSAndroid Build Coastguard Worker void IptablesBaseTest::expectIptablesRestoreCommands(const std::vector<std::string>& expectedCmds) {
100*8542734aSAndroid Build Coastguard Worker ExpectedIptablesCommands expected;
101*8542734aSAndroid Build Coastguard Worker for (const auto& cmd : expectedCmds) {
102*8542734aSAndroid Build Coastguard Worker expected.push_back({ V4V6, cmd });
103*8542734aSAndroid Build Coastguard Worker }
104*8542734aSAndroid Build Coastguard Worker expectIptablesRestoreCommands(expected);
105*8542734aSAndroid Build Coastguard Worker }
106*8542734aSAndroid Build Coastguard Worker
expectIptablesRestoreCommands(const ExpectedIptablesCommands & expectedCmds)107*8542734aSAndroid Build Coastguard Worker void IptablesBaseTest::expectIptablesRestoreCommands(const ExpectedIptablesCommands& expectedCmds) {
108*8542734aSAndroid Build Coastguard Worker ASSERT_EQ(expectedCmds.size(), sRestoreCmds.size());
109*8542734aSAndroid Build Coastguard Worker for (size_t i = 0; i < expectedCmds.size(); i++) {
110*8542734aSAndroid Build Coastguard Worker EXPECT_EQ(expectedCmds[i], sRestoreCmds[i]) <<
111*8542734aSAndroid Build Coastguard Worker "iptables-restore command " << i << " differs";
112*8542734aSAndroid Build Coastguard Worker }
113*8542734aSAndroid Build Coastguard Worker sRestoreCmds.clear();
114*8542734aSAndroid Build Coastguard Worker }
115*8542734aSAndroid Build Coastguard Worker
116*8542734aSAndroid Build Coastguard Worker std::vector<std::string> IptablesBaseTest::sCmds = {};
117*8542734aSAndroid Build Coastguard Worker IptablesBaseTest::ExpectedIptablesCommands IptablesBaseTest::sRestoreCmds = {};
118*8542734aSAndroid Build Coastguard Worker std::deque<std::string> IptablesBaseTest::sPopenContents = {};
119*8542734aSAndroid Build Coastguard Worker std::deque<std::string> IptablesBaseTest::sIptablesRestoreOutput = {};
120*8542734aSAndroid Build Coastguard Worker std::deque<int> IptablesBaseTest::sReturnValues = {};
121