134 lines
6.8 KiB
Python
134 lines
6.8 KiB
Python
import re
|
|
import socket
|
|
from typing import List, Optional
|
|
|
|
import pytest
|
|
|
|
from .env import H1Conf
|
|
|
|
class TestRequestUnsafe:
|
|
|
|
@pytest.fixture(autouse=True, scope='class')
|
|
def _class_scope(self, env):
|
|
conf = H1Conf(env)
|
|
conf.add([
|
|
"HttpProtocolOptions Unsafe",
|
|
])
|
|
conf.install()
|
|
assert env.apache_restart() == 0
|
|
|
|
# unsafe tests from t/apache/http_strict.t
|
|
# possible expected results:
|
|
# 0: any HTTP error
|
|
# 1: any HTTP success
|
|
# 200-500: specific HTTP status code
|
|
# None: HTTPD should drop connection without error message
|
|
@pytest.mark.parametrize(["intext", "status", "lognos"], [
|
|
["GET / HTTP/1.0\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.0\n\n", 1, None],
|
|
["get / HTTP/1.0\r\n\r\n", 501, ["AH00135"]],
|
|
["G ET / HTTP/1.0\r\n\r\n", 400, None],
|
|
["G\0ET / HTTP/1.0\r\n\r\n", 400, None],
|
|
["G/T / HTTP/1.0\r\n\r\n", 501, ["AH00135"]],
|
|
["GET /\0 HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\0\r\n\r\n", 400, None],
|
|
["GET\f/ HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET\r/ HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET\t/ HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET / HTT/1.0\r\n\r\n", 0, None],
|
|
["GET / HTTP/1.0\r\nHost: localhost\r\n\r\n", 1, None],
|
|
["GET / HTTP/2.0\r\nHost: localhost\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.2\r\nHost: localhost\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.11\r\nHost: localhost\r\n\r\n", 400, None],
|
|
["GET / HTTP/10.0\r\nHost: localhost\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0 \r\nHost: localhost\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0 x\r\nHost: localhost\r\n\r\n", 400, None],
|
|
["GET / HTTP/\r\nHost: localhost\r\n\r\n", 0, None],
|
|
["GET / HTTP/0.9\r\n\r\n", 0, None],
|
|
["GET / HTTP/0.8\r\n\r\n", 0, None],
|
|
["GET /\x01 HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nFoo: bar\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nFoo:bar\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nFoo: b\0ar\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nFoo: b\x01ar\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nFoo\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nFoo bar\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\n: bar\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nX: bar\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nFoo bar:bash\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nFoo :bar\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\n Foo:bar\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nF\x01o: bar\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nF\ro: bar\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nF\to: bar\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nFo: b\tar\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nFo: bar\r\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\r", None, None],
|
|
["GET /\r\n", 0, None],
|
|
["GET /#frag HTTP/1.0\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nHost: localhost\r\nHost: localhost\r\n\r\n", 200, None],
|
|
["GET http://017700000001/ HTTP/1.0\r\n\r\n", 200, None],
|
|
["GET http://0x7f.1/ HTTP/1.0\r\n\r\n", 200, None],
|
|
["GET http://127.0.0.1/ HTTP/1.0\r\n\r\n", 200, None],
|
|
["GET http://127.01.0.1/ HTTP/1.0\r\n\r\n", 200, None],
|
|
["GET http://%3127.0.0.1/ HTTP/1.0\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nHost: localhost:80\r\nHost: localhost:80\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nHost: localhost:80 x\r\n\r", 400, None],
|
|
["GET http://localhost:80/ HTTP/1.0\r\n\r\n", 200, None],
|
|
["GET http://localhost:80x/ HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET http://localhost:80:80/ HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET http://localhost::80/ HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET http://foo@localhost:80/ HTTP/1.0\r\n\r\n", 200, None],
|
|
["GET http://[::1]/ HTTP/1.0\r\n\r\n", 1, None],
|
|
["GET http://[::1:2]/ HTTP/1.0\r\n\r\n", 1, None],
|
|
["GET http://[4712::abcd]/ HTTP/1.0\r\n\r\n", 1, None],
|
|
["GET http://[4712::abcd:1]/ HTTP/1.0\r\n\r\n", 1, None],
|
|
["GET http://[4712::abcd::]/ HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET http://[4712:abcd::,]/ HTTP/1.0\r\n\r\n", 1, None],
|
|
["GET http://[4712::abcd]:8000/ HTTP/1.0\r\n\r\n", 1, None],
|
|
["GET http://4713::abcd:8001/ HTTP/1.0\r\n\r\n", 400, None],
|
|
["GET / HTTP/1.0\r\nHost: [::1]\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.0\r\nHost: [::1:2]\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.0\r\nHost: [4711::abcd]\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.0\r\nHost: [4711::abcd:1]\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.0\r\nHost: [4711:abcd::]\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.0\r\nHost: [4711::abcd]:8000\r\n\r\n", 1, None],
|
|
["GET / HTTP/1.0\r\nHost: 4714::abcd:8001\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nHost: abc\xa0\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nHost: abc\\foo\r\n\r\n", 400, None],
|
|
["GET http://foo/ HTTP/1.0\r\nHost: bar\r\n\r\n", 200, None],
|
|
["GET http://foo:81/ HTTP/1.0\r\nHost: bar\r\n\r\n", 200, None],
|
|
["GET http://[::1]:81/ HTTP/1.0\r\nHost: bar\r\n\r\n", 200, None],
|
|
["GET http://10.0.0.1:81/ HTTP/1.0\r\nHost: bar\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nHost: foo-bar.example.com\r\n\r\n", 200, None],
|
|
["GET / HTTP/1.0\r\nHost: foo_bar.example.com\r\n\r\n", 200, None],
|
|
["GET http://foo_bar/ HTTP/1.0\r\n\r\n", 200, None],
|
|
])
|
|
def test_h1_006_01(self, env, intext, status: Optional[int], lognos: Optional[List[str]]):
|
|
with socket.create_connection(('localhost', int(env.http_port))) as sock:
|
|
# on some OS, the server does not see our connection until there is
|
|
# something incoming
|
|
sock.sendall(intext.encode())
|
|
sock.shutdown(socket.SHUT_WR)
|
|
buff = sock.recv(1024)
|
|
msg = buff.decode()
|
|
if status is None:
|
|
assert len(msg) == 0, f"unexpected answer: {msg}"
|
|
else:
|
|
assert len(msg) > 0, "no answer from server"
|
|
rlines = msg.splitlines()
|
|
response = rlines[0]
|
|
m = re.match(r'^HTTP/1.1 (\d+)\s+(\S+)', response)
|
|
assert m or status == 0, f"unrecognized response: {rlines}"
|
|
if status == 1:
|
|
assert int(m.group(1)) >= 200
|
|
elif status == 0:
|
|
# headerless 0.9 response, yuk
|
|
assert len(rlines) >= 1, f"{rlines}"
|
|
elif status > 0:
|
|
assert int(m.group(1)) == status, f"{rlines}"
|
|
else:
|
|
assert int(m.group(1)) >= 400, f"{rlines}"
|
|
#
|
|
if lognos is not None:
|
|
env.httpd_error_log.ignore_recent(lognos = lognos)
|