1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
#include <sys/types.h>
#include <stdio.h>
#include <unistd.h>
#include <string.h>
#include <check.h>
#ifdef HAVE_NETINET_IN_H
#include <netinet/in.h>
#endif
#ifdef HAVE_NETINET_IN_SYSTM_H
#include <netinet/in_systm.h>
#endif
#ifdef HAVE_NETINET_IP_H
#include <netinet/ip.h>
#endif
#include <pulsecore/log.h>
#include <pulsecore/macro.h>
#include <pulsecore/socket.h>
#include <pulsecore/ipacl.h>
#include <pulsecore/arpa-inet.h>
static void do_ip_acl_check(const char *s, int fd, int expected) {
pa_ip_acl *acl;
int result;
acl = pa_ip_acl_new(s);
fail_unless(acl != NULL);
result = pa_ip_acl_check(acl, fd);
pa_ip_acl_free(acl);
pa_log_info("%-20s result=%u (should be %u)", s, result, expected);
fail_unless(result == expected);
}
START_TEST (ipacl_test) {
struct sockaddr_in sa;
#ifdef HAVE_IPV6
struct sockaddr_in6 sa6;
#endif
int fd;
int r;
fd = socket(PF_INET, SOCK_STREAM, 0);
fail_unless(fd >= 0);
sa.sin_family = AF_INET;
sa.sin_port = htons(22);
sa.sin_addr.s_addr = inet_addr("127.0.0.1");
r = connect(fd, (struct sockaddr*) &sa, sizeof(sa));
fail_unless(r >= 0);
do_ip_acl_check("127.0.0.1", fd, 1);
do_ip_acl_check("127.0.0.2/0", fd, 1);
do_ip_acl_check("127.0.0.1/32", fd, 1);
do_ip_acl_check("127.0.0.1/7", fd, 1);
do_ip_acl_check("127.0.0.2", fd, 0);
do_ip_acl_check("127.0.0.0/8;0.0.0.0/32", fd, 1);
do_ip_acl_check("128.0.0.2/9", fd, 0);
do_ip_acl_check("::1/9", fd, 0);
close(fd);
#ifdef HAVE_IPV6
if ( (fd = socket(PF_INET6, SOCK_STREAM, 0)) < 0 ) {
pa_log_error("Unable to open IPv6 socket, IPv6 tests ignored");
return;
}
memset(&sa6, 0, sizeof(sa6));
sa6.sin6_family = AF_INET6;
sa6.sin6_port = htons(22);
fail_unless(inet_pton(AF_INET6, "::1", &sa6.sin6_addr) == 1);
r = connect(fd, (struct sockaddr*) &sa6, sizeof(sa6));
fail_unless(r >= 0);
do_ip_acl_check("::1", fd, 1);
do_ip_acl_check("::1/9", fd, 1);
do_ip_acl_check("::/0", fd, 1);
do_ip_acl_check("::2/128", fd, 0);
do_ip_acl_check("::2/127", fd, 0);
do_ip_acl_check("::2/126", fd, 1);
close(fd);
#endif
}
END_TEST
int main(int argc, char *argv[]) {
int failed = 0;
Suite *s;
TCase *tc;
SRunner *sr;
if (!getenv("MAKE_CHECK"))
pa_log_set_level(PA_LOG_DEBUG);
s = suite_create("IP ACL");
tc = tcase_create("ipacl");
tcase_add_test(tc, ipacl_test);
suite_add_tcase(s, tc);
sr = srunner_create(s);
srunner_run_all(sr, CK_NORMAL);
failed = srunner_ntests_failed(sr);
srunner_free(sr);
return (failed == 0) ? EXIT_SUCCESS : EXIT_FAILURE;
}
|
