branch: master
unit1395.c
5528 bytesRaw
/***************************************************************************
 *                                  _   _ ____  _
 *  Project                     ___| | | |  _ \| |
 *                             / __| | | | |_) | |
 *                            | (__| |_| |  _ <| |___
 *                             \___|\___/|_| \_\_____|
 *
 * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
 *
 * This software is licensed as described in the file COPYING, which
 * you should have received as part of this distribution. The terms
 * are also available at https://curl.se/docs/copyright.html.
 *
 * You may opt to use, copy, modify, merge, publish, distribute and/or sell
 * copies of the Software, and permit persons to whom the Software is
 * furnished to do so, under the terms of the COPYING file.
 *
 * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
 * KIND, either express or implied.
 *
 * SPDX-License-Identifier: curl
 *
 ***************************************************************************/
#include "unitcheck.h"

static CURLcode test_unit1395(const char *arg)
{
  UNITTEST_BEGIN_SIMPLE

  unsigned int i;
  int fails = 0;

  struct dotdot {
    const char *input;
    const char *output;
  };

  const struct dotdot pairs[] = {
    { "/%2f%2e%2e%2f/../a", "/a" },
    { "/%2f%2e%2e%2f/../", "/" },
    { "/%2f%2e%2e%2f/.", "/%2f%2e%2e%2f/" },
    { "/%2f%2e%2e%2f/", "/%2f%2e%2e%2f/" },
    { "/%2f%2e%2e%2f", "/%2f%2e%2e%2f" },
    { "/%2f%2e%2e%2", "/%2f%2e%2e%2" },
    { "/%2f%2e%2e%", "/%2f%2e%2e%" },
    { "/%2f%2e%2e", "/%2f%2e%2e" },
    { "/%2f%2e%2", "/%2f%2e%2" },
    { "/%2f%2e%", "/%2f%2e%" },
    { "/%2f%2e", "/%2f%2e" },
    { "/%2f%2", "/%2f%2" },
    { "/%2f%", "/%2f%" },
    { "/%2f", "/%2f" },
    { "/%2", "/%2" },
    { "%2f%2e%2e%2f/../a", "%2f%2e%2e%2f/a" },
    { "%2f%2e%2e%2f/../", "%2f%2e%2e%2f/" },
    { "%2f%2e%2e%2f/.", "%2f%2e%2e%2f/" },
    { "%2f%2e%2e%2f/", "%2f%2e%2e%2f/" },
    { "%2f%2e%2e%2f", "%2f%2e%2e%2f" },
    { "%2f%2e%2e%2", "%2f%2e%2e%2" },
    { "%2f%2e%2e%", "%2f%2e%2e%" },
    { "%2f%2e%2e", "%2f%2e%2e" },
    { "%2f%2e%2", "%2f%2e%2" },
    { "%2f%2e%", "%2f%2e%" },
    { "%2f%2e", "%2f%2e" },
    { "%2f%2", "%2f%2" },
    { "%2f%", "%2f%" },
    { "%2f", "%2f" },
    { "%2", "%2" },
    { "%", NULL },
    { "2", NULL },
    { "e", NULL },
    { ".", NULL },
    { "./", "" },
    { "..", "" },
    { "../", "" },
    { "../a", "a" },
    { "///moo.", "///moo." },
    { ".///moo.", "//moo." },
    { "./moo..", "moo.." },
    { "./moo../", "moo../" },
    { "./moo../.m", "moo../.m" },
    { "./moo", "moo" },
    { "../moo", "moo" },
    { "../moo?", "moo?" },
    { "../moo?#", "moo?#" },
    { "../moo?#?..", "moo?#?.." },
    { "/../moo/..", "/" },
    { "/a/c/%2e%2E/b", "/a/b" },
    { "/a/%2e/g", "/a/g" },
    { "/a/b/c/./g", "/a/b/c/g" },
    { "/a/c/../b", "/a/b" },
    { "/a/b/c/./../../g", "/a/g" },
    { "/a/b/c/./%2e%2E/../g", "/a/g" },
    { "/a/b/c/./../%2e%2E/g", "/a/g" },
    { "/a/b/c/%2E/%2e%2E/%2e%2E/g", "/a/g" },
    { "mid/content=5/../6", "mid/6" },
    { "/hello/../moo", "/moo" },
    { "/1/../1", "/1" },
    { "/1/./1", "/1/1" },
    { "/1/%2e/1", "/1/1" },
    { "/1/%2E/1", "/1/1" },
    { "/1/..", "/" },
    { "/1/.", "/1/" },
    { "/1/%2e", "/1/" },
    { "/1/%2E", "/1/" },
    { "/1/./..", "/" },
    { "/1/%2e/.%2E", "/" },
    { "/1/./%2e.", "/" },
    { "/1/./../2", "/2" },
    { "/hello/1/./../2", "/hello/2" },
    { "test/this", "test/this" },
    { "test/this/../now", "test/now" },
    { "/1../moo../foo", "/1../moo../foo" },
    { "/../../moo", "/moo" },
    { "/../../moo?", "/moo?" },
    { "/123?", "/123?" },
    { "/", NULL },
    { "", NULL },
    { "/.../", "/.../" },
    { "/.", "/" },
    { "/..", "/" },
    { "/moo/..", "/" },
    { "/..", "/" },
    { "/.", "/" },
    { "////../a", "///a" },
    { "/../../../../../../", "/" },
    { "/..//..//", "//" },
    { "/.config/../ssh", "/ssh" },
    { "/..config/..", "/" },
    { "/.../a", "/.../a" },
    { "/a/%2E%2e/b", "/b" },
    { "/a/%2e./b", "/b" },
    { "/a/.%2e/b", "/b" },
    { "/%2f..%2f", "/%2f..%2f" },
    { "/a/b/.", "/a/b/" },
    { "/a/b/..", "/a/" },
    { "well-known", "well-known" },
    { ".well-known", ".well-known" },
    { "..well-known", "..well-known" },
    { "...well-known", "...well-known" },
    { "....well-known", "....well-known" },
    { "%2ewell-known", "%2ewell-known" },
    { "%2Ewell-known", "%2Ewell-known" },
    { "../.well-known", ".well-known" },
  };

  for(i = 0; i < CURL_ARRAYSIZE(pairs); i++) {
    char *out;
    int err = dedotdotify(pairs[i].input, strlen(pairs[i].input), &out);
    abort_unless(err == 0, "returned error");
    abort_if(err && out, "returned error with output");

    if(out && pairs[i].output && strcmp(out, pairs[i].output)) {
      curl_mfprintf(stderr, "Test %u: '%s' gave '%s' instead of '%s'\n",
                    i, pairs[i].input, out, pairs[i].output);
      fail("Test case output mismatched");
      fails++;
    }
    else if((!out && pairs[i].output) ||
            (out && !pairs[i].output)) {
      curl_mfprintf(stderr, "Test %u: '%s' gave '%s' instead of '%s'\n",
                    i, pairs[i].input, out ? out : "(null)",
                    pairs[i].output ? pairs[i].output : "(null)");
      fail("Test case output mismatched");
      fails++;
    }
    else
      curl_mfprintf(stderr, "Test %u: OK\n", i);
    curlx_free(out);
  }

  fail_if(fails, "output mismatched");

  UNITTEST_END_SIMPLE
}