xref: /aosp_15_r20/system/netd/server/IptablesBaseTest.cpp (revision 8542734a0dd1db395a4d42aae09c37f3c3c3e7a1)
1*8542734aSAndroid Build Coastguard Worker /*
2*8542734aSAndroid Build Coastguard Worker  * Copyright 2016 The Android Open Source Project
3*8542734aSAndroid Build Coastguard Worker  *
4*8542734aSAndroid Build Coastguard Worker  * Licensed under the Apache License, Version 2.0 (the "License");
5*8542734aSAndroid Build Coastguard Worker  * you may not use this file except in compliance with the License.
6*8542734aSAndroid Build Coastguard Worker  * You may obtain a copy of the License at
7*8542734aSAndroid Build Coastguard Worker  *
8*8542734aSAndroid Build Coastguard Worker  * http://www.apache.org/licenses/LICENSE-2.0
9*8542734aSAndroid Build Coastguard Worker  *
10*8542734aSAndroid Build Coastguard Worker  * Unless required by applicable law or agreed to in writing, software
11*8542734aSAndroid Build Coastguard Worker  * distributed under the License is distributed on an "AS IS" BASIS,
12*8542734aSAndroid Build Coastguard Worker  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*8542734aSAndroid Build Coastguard Worker  * See the License for the specific language governing permissions and
14*8542734aSAndroid Build Coastguard Worker  * limitations under the License.
15*8542734aSAndroid Build Coastguard Worker  *
16*8542734aSAndroid Build Coastguard Worker  * IptablesBaseTest.cpp - utility class for tests that use iptables
17*8542734aSAndroid Build Coastguard Worker  */
18*8542734aSAndroid Build Coastguard Worker 
19*8542734aSAndroid Build Coastguard Worker #include <deque>
20*8542734aSAndroid Build Coastguard Worker #include <string>
21*8542734aSAndroid Build Coastguard Worker #include <vector>
22*8542734aSAndroid Build Coastguard Worker 
23*8542734aSAndroid Build Coastguard Worker #include <gtest/gtest.h>
24*8542734aSAndroid Build Coastguard Worker 
25*8542734aSAndroid Build Coastguard Worker #include <android-base/stringprintf.h>
26*8542734aSAndroid Build Coastguard Worker 
27*8542734aSAndroid Build Coastguard Worker #define LOG_TAG "IptablesBaseTest"
28*8542734aSAndroid Build Coastguard Worker #include "IptablesBaseTest.h"
29*8542734aSAndroid Build Coastguard Worker #include "NetdConstants.h"
30*8542734aSAndroid Build Coastguard Worker 
31*8542734aSAndroid Build Coastguard Worker #include <log/log.h>
32*8542734aSAndroid Build Coastguard Worker 
33*8542734aSAndroid Build Coastguard Worker using android::base::StringPrintf;
34*8542734aSAndroid Build Coastguard Worker 
IptablesBaseTest()35*8542734aSAndroid Build Coastguard Worker IptablesBaseTest::IptablesBaseTest() {
36*8542734aSAndroid Build Coastguard Worker     sCmds.clear();
37*8542734aSAndroid Build Coastguard Worker     sRestoreCmds.clear();
38*8542734aSAndroid Build Coastguard Worker     sReturnValues.clear();
39*8542734aSAndroid Build Coastguard Worker }
40*8542734aSAndroid Build Coastguard Worker 
fake_android_fork_exec(int argc,char * argv[],int * status,bool,bool)41*8542734aSAndroid Build Coastguard Worker int IptablesBaseTest::fake_android_fork_exec(int argc, char* argv[], int *status, bool, bool) {
42*8542734aSAndroid Build Coastguard Worker     std::string cmd = argv[0];
43*8542734aSAndroid Build Coastguard Worker     for (int i = 1; i < argc; i++) {
44*8542734aSAndroid Build Coastguard Worker         if (argv[i] == nullptr) break;
45*8542734aSAndroid Build Coastguard Worker         cmd += " ";
46*8542734aSAndroid Build Coastguard Worker         cmd += argv[i];
47*8542734aSAndroid Build Coastguard Worker     }
48*8542734aSAndroid Build Coastguard Worker     sCmds.push_back(cmd);
49*8542734aSAndroid Build Coastguard Worker 
50*8542734aSAndroid Build Coastguard Worker     int ret;
51*8542734aSAndroid Build Coastguard Worker     if (sReturnValues.size()) {
52*8542734aSAndroid Build Coastguard Worker         ret = sReturnValues.front();
53*8542734aSAndroid Build Coastguard Worker         sReturnValues.pop_front();
54*8542734aSAndroid Build Coastguard Worker     } else {
55*8542734aSAndroid Build Coastguard Worker         ret = 0;
56*8542734aSAndroid Build Coastguard Worker     }
57*8542734aSAndroid Build Coastguard Worker 
58*8542734aSAndroid Build Coastguard Worker     if (status) {
59*8542734aSAndroid Build Coastguard Worker         *status = ret;
60*8542734aSAndroid Build Coastguard Worker     }
61*8542734aSAndroid Build Coastguard Worker     return ret;
62*8542734aSAndroid Build Coastguard Worker }
63*8542734aSAndroid Build Coastguard Worker 
fake_popen(const char *,const char * type)64*8542734aSAndroid Build Coastguard Worker FILE *IptablesBaseTest::fake_popen(const char * /* cmd */, const char *type) {
65*8542734aSAndroid Build Coastguard Worker     if (sPopenContents.empty() || strcmp(type, "r") != 0) {
66*8542734aSAndroid Build Coastguard Worker         return nullptr;
67*8542734aSAndroid Build Coastguard Worker     }
68*8542734aSAndroid Build Coastguard Worker 
69*8542734aSAndroid Build Coastguard Worker     std::string realCmd = StringPrintf("echo '%s'", sPopenContents.front().c_str());
70*8542734aSAndroid Build Coastguard Worker     sPopenContents.pop_front();
71*8542734aSAndroid Build Coastguard Worker     return popen(realCmd.c_str(), "r");  // NOLINT(cert-env33-c)
72*8542734aSAndroid Build Coastguard Worker }
73*8542734aSAndroid Build Coastguard Worker 
fakeExecIptablesRestoreWithOutput(IptablesTarget target,const std::string & commands,std::string * output)74*8542734aSAndroid Build Coastguard Worker int IptablesBaseTest::fakeExecIptablesRestoreWithOutput(IptablesTarget target,
75*8542734aSAndroid Build Coastguard Worker                                                         const std::string& commands,
76*8542734aSAndroid Build Coastguard Worker                                                         std::string *output) {
77*8542734aSAndroid Build Coastguard Worker     sRestoreCmds.push_back({ target, commands });
78*8542734aSAndroid Build Coastguard Worker     if (output != nullptr) {
79*8542734aSAndroid Build Coastguard Worker         *output = sIptablesRestoreOutput.size() ? sIptablesRestoreOutput.front().c_str() : "";
80*8542734aSAndroid Build Coastguard Worker     }
81*8542734aSAndroid Build Coastguard Worker     if (sIptablesRestoreOutput.size()) {
82*8542734aSAndroid Build Coastguard Worker         sIptablesRestoreOutput.pop_front();
83*8542734aSAndroid Build Coastguard Worker     }
84*8542734aSAndroid Build Coastguard Worker     return 0;
85*8542734aSAndroid Build Coastguard Worker }
86*8542734aSAndroid Build Coastguard Worker 
fakeExecIptablesRestore(IptablesTarget target,const std::string & commands)87*8542734aSAndroid Build Coastguard Worker int IptablesBaseTest::fakeExecIptablesRestore(IptablesTarget target, const std::string& commands) {
88*8542734aSAndroid Build Coastguard Worker     return fakeExecIptablesRestoreWithOutput(target, commands, nullptr);
89*8542734aSAndroid Build Coastguard Worker }
90*8542734aSAndroid Build Coastguard Worker 
fakeExecIptablesRestoreCommand(IptablesTarget target,const std::string & table,const std::string & command,std::string * output)91*8542734aSAndroid Build Coastguard Worker int IptablesBaseTest::fakeExecIptablesRestoreCommand(IptablesTarget target,
92*8542734aSAndroid Build Coastguard Worker                                                      const std::string& table,
93*8542734aSAndroid Build Coastguard Worker                                                      const std::string& command,
94*8542734aSAndroid Build Coastguard Worker                                                      std::string *output) {
95*8542734aSAndroid Build Coastguard Worker     std::string fullCmd = StringPrintf("-t %s %s", table.c_str(), command.c_str());
96*8542734aSAndroid Build Coastguard Worker     return fakeExecIptablesRestoreWithOutput(target, fullCmd, output);
97*8542734aSAndroid Build Coastguard Worker }
98*8542734aSAndroid Build Coastguard Worker 
expectIptablesRestoreCommands(const std::vector<std::string> & expectedCmds)99*8542734aSAndroid Build Coastguard Worker void IptablesBaseTest::expectIptablesRestoreCommands(const std::vector<std::string>& expectedCmds) {
100*8542734aSAndroid Build Coastguard Worker     ExpectedIptablesCommands expected;
101*8542734aSAndroid Build Coastguard Worker     for (const auto& cmd : expectedCmds) {
102*8542734aSAndroid Build Coastguard Worker         expected.push_back({ V4V6, cmd });
103*8542734aSAndroid Build Coastguard Worker     }
104*8542734aSAndroid Build Coastguard Worker     expectIptablesRestoreCommands(expected);
105*8542734aSAndroid Build Coastguard Worker }
106*8542734aSAndroid Build Coastguard Worker 
expectIptablesRestoreCommands(const ExpectedIptablesCommands & expectedCmds)107*8542734aSAndroid Build Coastguard Worker void IptablesBaseTest::expectIptablesRestoreCommands(const ExpectedIptablesCommands& expectedCmds) {
108*8542734aSAndroid Build Coastguard Worker     ASSERT_EQ(expectedCmds.size(), sRestoreCmds.size());
109*8542734aSAndroid Build Coastguard Worker     for (size_t i = 0; i < expectedCmds.size(); i++) {
110*8542734aSAndroid Build Coastguard Worker         EXPECT_EQ(expectedCmds[i], sRestoreCmds[i]) <<
111*8542734aSAndroid Build Coastguard Worker             "iptables-restore command " << i << " differs";
112*8542734aSAndroid Build Coastguard Worker     }
113*8542734aSAndroid Build Coastguard Worker     sRestoreCmds.clear();
114*8542734aSAndroid Build Coastguard Worker }
115*8542734aSAndroid Build Coastguard Worker 
116*8542734aSAndroid Build Coastguard Worker std::vector<std::string> IptablesBaseTest::sCmds = {};
117*8542734aSAndroid Build Coastguard Worker IptablesBaseTest::ExpectedIptablesCommands IptablesBaseTest::sRestoreCmds = {};
118*8542734aSAndroid Build Coastguard Worker std::deque<std::string> IptablesBaseTest::sPopenContents = {};
119*8542734aSAndroid Build Coastguard Worker std::deque<std::string> IptablesBaseTest::sIptablesRestoreOutput = {};
120*8542734aSAndroid Build Coastguard Worker std::deque<int> IptablesBaseTest::sReturnValues = {};
121