138 lines
4.4 KiB
Go
138 lines
4.4 KiB
Go
//go:build windows
|
|
|
|
package safeio
|
|
|
|
import (
|
|
"errors"
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func createWindowsPrivateTestFile(t *testing.T, path string, contents []byte) {
|
|
t.Helper()
|
|
file, err := CreateCanonicalNewPrivateFile(path)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := file.Write(contents); err != nil {
|
|
_ = file.Close()
|
|
t.Fatal(err)
|
|
}
|
|
if err := file.Close(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
|
|
func TestRemoveCanonicalPrivateClaimRetainsParentDuringDeletion(t *testing.T) {
|
|
parent := filepath.Join(t.TempDir(), "claims")
|
|
if err := os.Mkdir(parent, 0o700); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := ProtectPrivateDirectory(parent); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
source := filepath.Join(parent, "state.json")
|
|
claim := filepath.Join(parent, "state.claim")
|
|
createWindowsPrivateTestFile(t, source, []byte("state"))
|
|
if claimed, err := ClaimCanonicalPrivateRegular(source, claim); err != nil || !claimed {
|
|
t.Fatalf("ClaimCanonicalPrivateRegular() = claimed %v, err %v", claimed, err)
|
|
}
|
|
|
|
outside := filepath.Join(t.TempDir(), "outside")
|
|
if err := os.Mkdir(outside, 0o700); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := ProtectPrivateDirectory(outside); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
sentinel := filepath.Join(outside, "sentinel")
|
|
createWindowsPrivateTestFile(t, sentinel, []byte("outside-safe"))
|
|
attemptedSwap := false
|
|
restoreHook := SetPrivateDirectoryTestHookForTest(func(stage string) {
|
|
if stage != "after-canonical-private-claim-parent-open" || attemptedSwap {
|
|
return
|
|
}
|
|
attemptedSwap = true
|
|
if err := os.Rename(parent, parent+"-moved"); err == nil {
|
|
t.Fatal("claim parent rename succeeded while removal retained its handle")
|
|
}
|
|
})
|
|
defer restoreHook()
|
|
|
|
removed, err := RemoveCanonicalPrivateClaim(source, claim)
|
|
if err != nil || !removed || !attemptedSwap {
|
|
t.Fatalf("RemoveCanonicalPrivateClaim() = removed %v, attempted %v, err %v", removed, attemptedSwap, err)
|
|
}
|
|
for _, path := range []string{source, claim} {
|
|
if _, err := os.Stat(path); !errors.Is(err, os.ErrNotExist) {
|
|
t.Fatalf("removed path %q still exists: %v", filepath.Base(path), err)
|
|
}
|
|
}
|
|
if contents, err := os.ReadFile(sentinel); err != nil || string(contents) != "outside-safe" {
|
|
t.Fatalf("outside sentinel = %q, err %v", contents, err)
|
|
}
|
|
}
|
|
|
|
func TestRemoveCanonicalPrivateClaimPreservesOrphan(t *testing.T) {
|
|
parent := filepath.Join(t.TempDir(), "claims")
|
|
if err := os.Mkdir(parent, 0o700); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := ProtectPrivateDirectory(parent); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
source := filepath.Join(parent, "state.json")
|
|
claim := filepath.Join(parent, "state.claim")
|
|
createWindowsPrivateTestFile(t, claim, []byte("orphan"))
|
|
|
|
removed, err := RemoveCanonicalPrivateClaim(source, claim)
|
|
if removed || err != nil {
|
|
t.Fatalf("RemoveCanonicalPrivateClaim() = removed %v, err %v, want false/nil", removed, err)
|
|
}
|
|
if _, err := os.Stat(source); !errors.Is(err, os.ErrNotExist) {
|
|
t.Fatalf("orphan source unexpectedly exists: %v", err)
|
|
}
|
|
if contents, err := os.ReadFile(claim); err != nil || string(contents) != "orphan" {
|
|
t.Fatalf("orphan claim = %q, err %v", contents, err)
|
|
}
|
|
}
|
|
|
|
func TestRemoveCanonicalPrivateClaimRejectsMismatchedTwoLinkFiles(t *testing.T) {
|
|
parent := filepath.Join(t.TempDir(), "claims")
|
|
if err := os.Mkdir(parent, 0o700); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := ProtectPrivateDirectory(parent); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
source := filepath.Join(parent, "state.json")
|
|
claim := filepath.Join(parent, "state.claim")
|
|
createWindowsPrivateTestFile(t, source, []byte("source"))
|
|
createWindowsPrivateTestFile(t, claim, []byte("claim"))
|
|
sourceAuxiliary := filepath.Join(parent, "state.json.aux")
|
|
if err := os.Link(source, sourceAuxiliary); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
claimAuxiliary := filepath.Join(parent, "state.claim.aux")
|
|
if err := os.Link(claim, claimAuxiliary); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
removed, err := RemoveCanonicalPrivateClaim(source, claim)
|
|
if removed || !errors.Is(err, ErrUnsafeFile) {
|
|
t.Fatalf("RemoveCanonicalPrivateClaim() = removed %v, err %v, want false/ErrUnsafeFile", removed, err)
|
|
}
|
|
for path, want := range map[string]string{
|
|
source: "source",
|
|
claim: "claim",
|
|
sourceAuxiliary: "source",
|
|
claimAuxiliary: "claim",
|
|
} {
|
|
contents, readErr := os.ReadFile(path)
|
|
if readErr != nil || string(contents) != want {
|
|
t.Fatalf("mismatched pair path %q = %q, err %v", filepath.Base(path), contents, readErr)
|
|
}
|
|
}
|
|
}
|