1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
|
/* SPDX-License-Identifier: GPL-2.0-or-later */
/*
* Copyright (C) 2016 Red Hat, Inc.
*/
#include "libnm-systemd-core/nm-default-systemd-core.h"
#include "libnm-systemd-core/nm-sd.h"
#include "libnm-systemd-shared/nm-sd-utils-shared.h"
#include "libnm-glib-aux/nm-test-utils.h"
/*****************************************************************************/
typedef struct {
GMainLoop *mainloop;
sd_event_source *event_source;
} TestSdEventData;
static int
_test_sd_event_timeout_cb(sd_event_source *s, uint64_t usec, void *userdata)
{
TestSdEventData *user_data = userdata;
g_assert(user_data);
g_assert(user_data->mainloop);
g_assert(user_data->event_source);
user_data->event_source = sd_event_source_unref(user_data->event_source);
g_main_loop_quit(user_data->mainloop);
return 0;
}
static void
test_sd_event(void)
{
int repeat;
for (repeat = 0; repeat < 2; repeat++) {
guint sd_id = 0;
int r;
int i, n;
sd_event *other_events[3] = {NULL}, *event = NULL;
TestSdEventData user_data = {0};
g_assert_cmpint(sd_event_default(NULL), ==, 0);
for (i = 0, n = (nmtst_get_rand_uint32() % (G_N_ELEMENTS(other_events) + 1)); i < n; i++) {
r = sd_event_default(&other_events[i]);
g_assert(r >= 0 && other_events[i]);
}
sd_id = nm_sd_event_attach_default();
r = sd_event_default(&event);
g_assert(r >= 0 && event);
r = sd_event_add_time(event,
&user_data.event_source,
CLOCK_MONOTONIC,
1,
0,
_test_sd_event_timeout_cb,
&user_data);
g_assert(r >= 0 && user_data.event_source);
user_data.mainloop = g_main_loop_new(NULL, FALSE);
g_main_loop_run(user_data.mainloop);
g_main_loop_unref(user_data.mainloop);
g_assert(!user_data.event_source);
event = sd_event_unref(event);
for (i = 0, n = (nmtst_get_rand_uint32() % (G_N_ELEMENTS(other_events) + 1)); i < n; i++)
other_events[i] = sd_event_unref(other_events[i]);
nm_clear_g_source(&sd_id);
for (i = 0, n = G_N_ELEMENTS(other_events); i < n; i++)
other_events[i] = sd_event_unref(other_events[i]);
g_assert_cmpint(sd_event_default(NULL), ==, 0);
}
}
/*****************************************************************************/
static void
test_http_url_is_valid_https(void)
{
/* CVE-2026-10805: connection.mud-url is pasted verbatim into the dhclient
* config inside a quoted string ("send mudurl \"%s\";"). This function
* gates the property at verify() time, so it must reject characters that
* break out of the quotes or inject config syntax. */
#define _assert_valid(url) g_assert(nm_sd_http_url_is_valid_https("" url))
#define _assert_invalid(url) g_assert(!nm_sd_http_url_is_valid_https("" url))
_assert_valid("https://example.com/mud.json");
_assert_valid("https://example.com");
_assert_valid("https://example.com/a?b=c&d=e#frag");
_assert_valid("https://[2001:db8::1]/x");
_assert_valid("https://user@example.com/~p/(a)*,;=+!$'");
_assert_valid("https://user:pass@example.com/p%20q?x=%2F");
_assert_invalid("http://example.com");
_assert_invalid("ftp://example.com");
_assert_invalid("example.com");
_assert_invalid("");
_assert_invalid("https://");
_assert_invalid("https://example.com/\""); /* breaks out of the quoted string */
_assert_invalid("https://example.com/\\"); /* escapes the following char */
_assert_invalid("https://example.com/\n");
_assert_invalid("https://example.com/\t");
_assert_invalid("https://example.com/a\x01b");
_assert_invalid("https://example.com/\xc3\xa4"); /* non-ASCII */
#undef _assert_valid
#undef _assert_invalid
}
/*****************************************************************************/
NMTST_DEFINE();
int
main(int argc, char **argv)
{
nmtst_init(&argc, &argv, TRUE);
g_test_add_func("/systemd/sd-event", test_sd_event);
g_test_add_func("/systemd/http-url-is-valid-https", test_http_url_is_valid_https);
return g_test_run();
}
|
