1// Copyright 2005, Google Inc. 2// All rights reserved. 3// 4// Redistribution and use in source and binary forms, with or without 5// modification, are permitted provided that the following conditions are 6// met: 7// 8// * Redistributions of source code must retain the above copyright 9// notice, this list of conditions and the following disclaimer. 10// * Redistributions in binary form must reproduce the above 11// copyright notice, this list of conditions and the following disclaimer 12// in the documentation and/or other materials provided with the 13// distribution. 14// * Neither the name of Google Inc. nor the names of its 15// contributors may be used to endorse or promote products derived from 16// this software without specific prior written permission. 17// 18// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 19// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 20// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 21// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 22// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 23// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 24// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 25// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 26// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 27// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 28// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 29// 30// Author: wan@google.com (Zhanyong Wan), vladl@google.com (Vlad Losev) 31// 32// This file implements death tests. 33 34#include "gtest/gtest-death-test.h" 35#include "gtest/internal/gtest-port.h" 36 37#if GTEST_HAS_DEATH_TEST 38 39# if GTEST_OS_MAC 40# include <crt_externs.h> 41# endif // GTEST_OS_MAC 42 43# include <errno.h> 44# include <fcntl.h> 45# include <limits.h> 46# include <stdarg.h> 47 48# if GTEST_OS_WINDOWS 49# include <windows.h> 50# else 51# include <sys/mman.h> 52# include <sys/wait.h> 53# endif // GTEST_OS_WINDOWS 54 55#endif // GTEST_HAS_DEATH_TEST 56 57#include "gtest/gtest-message.h" 58#include "gtest/internal/gtest-string.h" 59 60// Indicates that this translation unit is part of Google Test's 61// implementation. It must come before gtest-internal-inl.h is 62// included, or there will be a compiler error. This trick is to 63// prevent a user from accidentally including gtest-internal-inl.h in 64// his code. 65#define GTEST_IMPLEMENTATION_ 1 66#include "gtest/internal/gtest-internal-inl.h" 67#undef GTEST_IMPLEMENTATION_ 68 69namespace testing { 70 71// Constants. 72 73// The default death test style. 74static const char kDefaultDeathTestStyle[] = "fast"; 75 76GTEST_DEFINE_string_( 77 death_test_style, 78 internal::StringFromGTestEnv("death_test_style", kDefaultDeathTestStyle), 79 "Indicates how to run a death test in a forked child process: " 80 "\"threadsafe\" (child process re-executes the test binary " 81 "from the beginning, running only the specific death test) or " 82 "\"fast\" (child process runs the death test immediately " 83 "after forking)."); 84 85GTEST_DEFINE_bool_( 86 death_test_use_fork, 87 internal::BoolFromGTestEnv("death_test_use_fork", false), 88 "Instructs to use fork()/_exit() instead of clone() in death tests. " 89 "Ignored and always uses fork() on POSIX systems where clone() is not " 90 "implemented. Useful when running under valgrind or similar tools if " 91 "those do not support clone(). Valgrind 3.3.1 will just fail if " 92 "it sees an unsupported combination of clone() flags. " 93 "It is not recommended to use this flag w/o valgrind though it will " 94 "work in 99% of the cases. Once valgrind is fixed, this flag will " 95 "most likely be removed."); 96 97namespace internal { 98GTEST_DEFINE_string_( 99 internal_run_death_test, "", 100 "Indicates the file, line number, temporal index of " 101 "the single death test to run, and a file descriptor to " 102 "which a success code may be sent, all separated by " 103 "colons. This flag is specified if and only if the current " 104 "process is a sub-process launched for running a thread-safe " 105 "death test. FOR INTERNAL USE ONLY."); 106} // namespace internal 107 108#if GTEST_HAS_DEATH_TEST 109 110// ExitedWithCode constructor. 111ExitedWithCode::ExitedWithCode(int exit_code) : exit_code_(exit_code) { 112} 113 114// ExitedWithCode function-call operator. 115bool ExitedWithCode::operator()(int exit_status) const { 116# if GTEST_OS_WINDOWS 117 118 return exit_status == exit_code_; 119 120# else 121 122 return WIFEXITED(exit_status) && WEXITSTATUS(exit_status) == exit_code_; 123 124# endif // GTEST_OS_WINDOWS 125} 126 127# if !GTEST_OS_WINDOWS 128// KilledBySignal constructor. 129KilledBySignal::KilledBySignal(int signum) : signum_(signum) { 130} 131 132// KilledBySignal function-call operator. 133bool KilledBySignal::operator()(int exit_status) const { 134 return WIFSIGNALED(exit_status) && WTERMSIG(exit_status) == signum_; 135} 136# endif // !GTEST_OS_WINDOWS 137 138namespace internal { 139 140// Utilities needed for death tests. 141 142// Generates a textual description of a given exit code, in the format 143// specified by wait(2). 144static String ExitSummary(int exit_code) { 145 Message m; 146 147# if GTEST_OS_WINDOWS 148 149 m << "Exited with exit status " << exit_code; 150 151# else 152 153 if (WIFEXITED(exit_code)) { 154 m << "Exited with exit status " << WEXITSTATUS(exit_code); 155 } else if (WIFSIGNALED(exit_code)) { 156 m << "Terminated by signal " << WTERMSIG(exit_code); 157 } 158# ifdef WCOREDUMP 159 if (WCOREDUMP(exit_code)) { 160 m << " (core dumped)"; 161 } 162# endif 163# endif // GTEST_OS_WINDOWS 164 165 return m.GetString(); 166} 167 168// Returns true if exit_status describes a process that was terminated 169// by a signal, or exited normally with a nonzero exit code. 170bool ExitedUnsuccessfully(int exit_status) { 171 return !ExitedWithCode(0)(exit_status); 172} 173 174# if !GTEST_OS_WINDOWS 175// Generates a textual failure message when a death test finds more than 176// one thread running, or cannot determine the number of threads, prior 177// to executing the given statement. It is the responsibility of the 178// caller not to pass a thread_count of 1. 179static String DeathTestThreadWarning(size_t thread_count) { 180 Message msg; 181 msg << "Death tests use fork(), which is unsafe particularly" 182 << " in a threaded context. For this test, " << GTEST_NAME_ << " "; 183 if (thread_count == 0) 184 msg << "couldn't detect the number of threads."; 185 else 186 msg << "detected " << thread_count << " threads."; 187 return msg.GetString(); 188} 189# endif // !GTEST_OS_WINDOWS 190 191// Flag characters for reporting a death test that did not die. 192static const char kDeathTestLived = 'L'; 193static const char kDeathTestReturned = 'R'; 194static const char kDeathTestThrew = 'T'; 195static const char kDeathTestInternalError = 'I'; 196 197// An enumeration describing all of the possible ways that a death test can 198// conclude. DIED means that the process died while executing the test 199// code; LIVED means that process lived beyond the end of the test code; 200// RETURNED means that the test statement attempted to execute a return 201// statement, which is not allowed; THREW means that the test statement 202// returned control by throwing an exception. IN_PROGRESS means the test 203// has not yet concluded. 204// TODO(vladl@google.com): Unify names and possibly values for 205// AbortReason, DeathTestOutcome, and flag characters above. 206enum DeathTestOutcome { IN_PROGRESS, DIED, LIVED, RETURNED, THREW }; 207 208// Routine for aborting the program which is safe to call from an 209// exec-style death test child process, in which case the error 210// message is propagated back to the parent process. Otherwise, the 211// message is simply printed to stderr. In either case, the program 212// then exits with status 1. 213void DeathTestAbort(const String& message) { 214 // On a POSIX system, this function may be called from a threadsafe-style 215 // death test child process, which operates on a very small stack. Use 216 // the heap for any additional non-minuscule memory requirements. 217 const InternalRunDeathTestFlag* const flag = 218 GetUnitTestImpl()->internal_run_death_test_flag(); 219 if (flag != NULL) { 220 FILE* parent = posix::FDOpen(flag->write_fd(), "w"); 221 fputc(kDeathTestInternalError, parent); 222 fprintf(parent, "%s", message.c_str()); 223 fflush(parent); 224 _exit(1); 225 } else { 226 fprintf(stderr, "%s", message.c_str()); 227 fflush(stderr); 228 posix::Abort(); 229 } 230} 231 232// A replacement for CHECK that calls DeathTestAbort if the assertion 233// fails. 234# define GTEST_DEATH_TEST_CHECK_(expression) \ 235 do { \ 236 if (!::testing::internal::IsTrue(expression)) { \ 237 DeathTestAbort(::testing::internal::String::Format( \ 238 "CHECK failed: File %s, line %d: %s", \ 239 __FILE__, __LINE__, #expression)); \ 240 } \ 241 } while (::testing::internal::AlwaysFalse()) 242 243// This macro is similar to GTEST_DEATH_TEST_CHECK_, but it is meant for 244// evaluating any system call that fulfills two conditions: it must return 245// -1 on failure, and set errno to EINTR when it is interrupted and 246// should be tried again. The macro expands to a loop that repeatedly 247// evaluates the expression as long as it evaluates to -1 and sets 248// errno to EINTR. If the expression evaluates to -1 but errno is 249// something other than EINTR, DeathTestAbort is called. 250# define GTEST_DEATH_TEST_CHECK_SYSCALL_(expression) \ 251 do { \ 252 int gtest_retval; \ 253 do { \ 254 gtest_retval = (expression); \ 255 } while (gtest_retval == -1 && errno == EINTR); \ 256 if (gtest_retval == -1) { \ 257 DeathTestAbort(::testing::internal::String::Format( \ 258 "CHECK failed: File %s, line %d: %s != -1", \ 259 __FILE__, __LINE__, #expression)); \ 260 } \ 261 } while (::testing::internal::AlwaysFalse()) 262 263// Returns the message describing the last system error in errno. 264String GetLastErrnoDescription() { 265 return String(errno == 0 ? "" : posix::StrError(errno)); 266} 267 268// This is called from a death test parent process to read a failure 269// message from the death test child process and log it with the FATAL 270// severity. On Windows, the message is read from a pipe handle. On other 271// platforms, it is read from a file descriptor. 272static void FailFromInternalError(int fd) { 273 Message error; 274 char buffer[256]; 275 int num_read; 276 277 do { 278 while ((num_read = posix::Read(fd, buffer, 255)) > 0) { 279 buffer[num_read] = '\0'; 280 error << buffer; 281 } 282 } while (num_read == -1 && errno == EINTR); 283 284 if (num_read == 0) { 285 GTEST_LOG_(FATAL) << error.GetString(); 286 } else { 287 const int last_error = errno; 288 GTEST_LOG_(FATAL) << "Error while reading death test internal: " 289 << GetLastErrnoDescription() << " [" << last_error << "]"; 290 } 291} 292 293// Death test constructor. Increments the running death test count 294// for the current test. 295DeathTest::DeathTest() { 296 TestInfo* const info = GetUnitTestImpl()->current_test_info(); 297 if (info == NULL) { 298 DeathTestAbort("Cannot run a death test outside of a TEST or " 299 "TEST_F construct"); 300 } 301} 302 303// Creates and returns a death test by dispatching to the current 304// death test factory. 305bool DeathTest::Create(const char* statement, const RE* regex, 306 const char* file, int line, DeathTest** test) { 307 return GetUnitTestImpl()->death_test_factory()->Create( 308 statement, regex, file, line, test); 309} 310 311const char* DeathTest::LastMessage() { 312 return last_death_test_message_.c_str(); 313} 314 315void DeathTest::set_last_death_test_message(const String& message) { 316 last_death_test_message_ = message; 317} 318 319String DeathTest::last_death_test_message_; 320 321// Provides cross platform implementation for some death functionality. 322class DeathTestImpl : public DeathTest { 323 protected: 324 DeathTestImpl(const char* a_statement, const RE* a_regex) 325 : statement_(a_statement), 326 regex_(a_regex), 327 spawned_(false), 328 status_(-1), 329 outcome_(IN_PROGRESS), 330 read_fd_(-1), 331 write_fd_(-1) {} 332 333 // read_fd_ is expected to be closed and cleared by a derived class. 334 ~DeathTestImpl() { GTEST_DEATH_TEST_CHECK_(read_fd_ == -1); } 335 336 void Abort(AbortReason reason); 337 virtual bool Passed(bool status_ok); 338 339 const char* statement() const { return statement_; } 340 const RE* regex() const { return regex_; } 341 bool spawned() const { return spawned_; } 342 void set_spawned(bool is_spawned) { spawned_ = is_spawned; } 343 int status() const { return status_; } 344 void set_status(int a_status) { status_ = a_status; } 345 DeathTestOutcome outcome() const { return outcome_; } 346 void set_outcome(DeathTestOutcome an_outcome) { outcome_ = an_outcome; } 347 int read_fd() const { return read_fd_; } 348 void set_read_fd(int fd) { read_fd_ = fd; } 349 int write_fd() const { return write_fd_; } 350 void set_write_fd(int fd) { write_fd_ = fd; } 351 352 // Called in the parent process only. Reads the result code of the death 353 // test child process via a pipe, interprets it to set the outcome_ 354 // member, and closes read_fd_. Outputs diagnostics and terminates in 355 // case of unexpected codes. 356 void ReadAndInterpretStatusByte(); 357 358 private: 359 // The textual content of the code this object is testing. This class 360 // doesn't own this string and should not attempt to delete it. 361 const char* const statement_; 362 // The regular expression which test output must match. DeathTestImpl 363 // doesn't own this object and should not attempt to delete it. 364 const RE* const regex_; 365 // True if the death test child process has been successfully spawned. 366 bool spawned_; 367 // The exit status of the child process. 368 int status_; 369 // How the death test concluded. 370 DeathTestOutcome outcome_; 371 // Descriptor to the read end of the pipe to the child process. It is 372 // always -1 in the child process. The child keeps its write end of the 373 // pipe in write_fd_. 374 int read_fd_; 375 // Descriptor to the child's write end of the pipe to the parent process. 376 // It is always -1 in the parent process. The parent keeps its end of the 377 // pipe in read_fd_. 378 int write_fd_; 379}; 380 381// Called in the parent process only. Reads the result code of the death 382// test child process via a pipe, interprets it to set the outcome_ 383// member, and closes read_fd_. Outputs diagnostics and terminates in 384// case of unexpected codes. 385void DeathTestImpl::ReadAndInterpretStatusByte() { 386 char flag; 387 int bytes_read; 388 389 // The read() here blocks until data is available (signifying the 390 // failure of the death test) or until the pipe is closed (signifying 391 // its success), so it's okay to call this in the parent before 392 // the child process has exited. 393 do { 394 bytes_read = posix::Read(read_fd(), &flag, 1); 395 } while (bytes_read == -1 && errno == EINTR); 396 397 if (bytes_read == 0) { 398 set_outcome(DIED); 399 } else if (bytes_read == 1) { 400 switch (flag) { 401 case kDeathTestReturned: 402 set_outcome(RETURNED); 403 break; 404 case kDeathTestThrew: 405 set_outcome(THREW); 406 break; 407 case kDeathTestLived: 408 set_outcome(LIVED); 409 break; 410 case kDeathTestInternalError: 411 FailFromInternalError(read_fd()); // Does not return. 412 break; 413 default: 414 GTEST_LOG_(FATAL) << "Death test child process reported " 415 << "unexpected status byte (" 416 << static_cast<unsigned int>(flag) << ")"; 417 } 418 } else { 419 GTEST_LOG_(FATAL) << "Read from death test child process failed: " 420 << GetLastErrnoDescription(); 421 } 422 GTEST_DEATH_TEST_CHECK_SYSCALL_(posix::Close(read_fd())); 423 set_read_fd(-1); 424} 425 426// Signals that the death test code which should have exited, didn't. 427// Should be called only in a death test child process. 428// Writes a status byte to the child's status file descriptor, then 429// calls _exit(1). 430void DeathTestImpl::Abort(AbortReason reason) { 431 // The parent process considers the death test to be a failure if 432 // it finds any data in our pipe. So, here we write a single flag byte 433 // to the pipe, then exit. 434 const char status_ch = 435 reason == TEST_DID_NOT_DIE ? kDeathTestLived : 436 reason == TEST_THREW_EXCEPTION ? kDeathTestThrew : kDeathTestReturned; 437 438 GTEST_DEATH_TEST_CHECK_SYSCALL_(posix::Write(write_fd(), &status_ch, 1)); 439 // We are leaking the descriptor here because on some platforms (i.e., 440 // when built as Windows DLL), destructors of global objects will still 441 // run after calling _exit(). On such systems, write_fd_ will be 442 // indirectly closed from the destructor of UnitTestImpl, causing double 443 // close if it is also closed here. On debug configurations, double close 444 // may assert. As there are no in-process buffers to flush here, we are 445 // relying on the OS to close the descriptor after the process terminates 446 // when the destructors are not run. 447 _exit(1); // Exits w/o any normal exit hooks (we were supposed to crash) 448} 449 450// Returns an indented copy of stderr output for a death test. 451// This makes distinguishing death test output lines from regular log lines 452// much easier. 453static ::std::string FormatDeathTestOutput(const ::std::string& output) { 454 ::std::string ret; 455 for (size_t at = 0; ; ) { 456 const size_t line_end = output.find('\n', at); 457 ret += "[ DEATH ] "; 458 if (line_end == ::std::string::npos) { 459 ret += output.substr(at); 460 break; 461 } 462 ret += output.substr(at, line_end + 1 - at); 463 at = line_end + 1; 464 } 465 return ret; 466} 467 468// Assesses the success or failure of a death test, using both private 469// members which have previously been set, and one argument: 470// 471// Private data members: 472// outcome: An enumeration describing how the death test 473// concluded: DIED, LIVED, THREW, or RETURNED. The death test 474// fails in the latter three cases. 475// status: The exit status of the child process. On *nix, it is in the 476// in the format specified by wait(2). On Windows, this is the 477// value supplied to the ExitProcess() API or a numeric code 478// of the exception that terminated the program. 479// regex: A regular expression object to be applied to 480// the test's captured standard error output; the death test 481// fails if it does not match. 482// 483// Argument: 484// status_ok: true if exit_status is acceptable in the context of 485// this particular death test, which fails if it is false 486// 487// Returns true iff all of the above conditions are met. Otherwise, the 488// first failing condition, in the order given above, is the one that is 489// reported. Also sets the last death test message string. 490bool DeathTestImpl::Passed(bool status_ok) { 491 if (!spawned()) 492 return false; 493 494 const String error_message = GetCapturedStderr(); 495 496 bool success = false; 497 Message buffer; 498 499 buffer << "Death test: " << statement() << "\n"; 500 switch (outcome()) { 501 case LIVED: 502 buffer << " Result: failed to die.\n" 503 << " Error msg:\n" << FormatDeathTestOutput(error_message); 504 break; 505 case THREW: 506 buffer << " Result: threw an exception.\n" 507 << " Error msg:\n" << FormatDeathTestOutput(error_message); 508 break; 509 case RETURNED: 510 buffer << " Result: illegal return in test statement.\n" 511 << " Error msg:\n" << FormatDeathTestOutput(error_message); 512 break; 513 case DIED: 514 if (status_ok) { 515 const bool matched = RE::PartialMatch(error_message.c_str(), *regex()); 516 if (matched) { 517 success = true; 518 } else { 519 buffer << " Result: died but not with expected error.\n" 520 << " Expected: " << regex()->pattern() << "\n" 521 << "Actual msg:\n" << FormatDeathTestOutput(error_message); 522 } 523 } else { 524 buffer << " Result: died but not with expected exit code:\n" 525 << " " << ExitSummary(status()) << "\n" 526 << "Actual msg:\n" << FormatDeathTestOutput(error_message); 527 } 528 break; 529 case IN_PROGRESS: 530 GTEST_LOG_(FATAL) 531 << "DeathTest::Passed somehow called before conclusion of test"; 532 } 533 534 DeathTest::set_last_death_test_message(buffer.GetString()); 535 return success; 536} 537 538# if GTEST_OS_WINDOWS 539// WindowsDeathTest implements death tests on Windows. Due to the 540// specifics of starting new processes on Windows, death tests there are 541// always threadsafe, and Google Test considers the 542// --gtest_death_test_style=fast setting to be equivalent to 543// --gtest_death_test_style=threadsafe there. 544// 545// A few implementation notes: Like the Linux version, the Windows 546// implementation uses pipes for child-to-parent communication. But due to 547// the specifics of pipes on Windows, some extra steps are required: 548// 549// 1. The parent creates a communication pipe and stores handles to both 550// ends of it. 551// 2. The parent starts the child and provides it with the information 552// necessary to acquire the handle to the write end of the pipe. 553// 3. The child acquires the write end of the pipe and signals the parent 554// using a Windows event. 555// 4. Now the parent can release the write end of the pipe on its side. If 556// this is done before step 3, the object's reference count goes down to 557// 0 and it is destroyed, preventing the child from acquiring it. The 558// parent now has to release it, or read operations on the read end of 559// the pipe will not return when the child terminates. 560// 5. The parent reads child's output through the pipe (outcome code and 561// any possible error messages) from the pipe, and its stderr and then 562// determines whether to fail the test. 563// 564// Note: to distinguish Win32 API calls from the local method and function 565// calls, the former are explicitly resolved in the global namespace. 566// 567class WindowsDeathTest : public DeathTestImpl { 568 public: 569 WindowsDeathTest(const char* a_statement, 570 const RE* a_regex, 571 const char* file, 572 int line) 573 : DeathTestImpl(a_statement, a_regex), file_(file), line_(line) {} 574 575 // All of these virtual functions are inherited from DeathTest. 576 virtual int Wait(); 577 virtual TestRole AssumeRole(); 578 579 private: 580 // The name of the file in which the death test is located. 581 const char* const file_; 582 // The line number on which the death test is located. 583 const int line_; 584 // Handle to the write end of the pipe to the child process. 585 AutoHandle write_handle_; 586 // Child process handle. 587 AutoHandle child_handle_; 588 // Event the child process uses to signal the parent that it has 589 // acquired the handle to the write end of the pipe. After seeing this 590 // event the parent can release its own handles to make sure its 591 // ReadFile() calls return when the child terminates. 592 AutoHandle event_handle_; 593}; 594 595// Waits for the child in a death test to exit, returning its exit 596// status, or 0 if no child process exists. As a side effect, sets the 597// outcome data member. 598int WindowsDeathTest::Wait() { 599 if (!spawned()) 600 return 0; 601 602 // Wait until the child either signals that it has acquired the write end 603 // of the pipe or it dies. 604 const HANDLE wait_handles[2] = { child_handle_.Get(), event_handle_.Get() }; 605 switch (::WaitForMultipleObjects(2, 606 wait_handles, 607 FALSE, // Waits for any of the handles. 608 INFINITE)) { 609 case WAIT_OBJECT_0: 610 case WAIT_OBJECT_0 + 1: 611 break; 612 default: 613 GTEST_DEATH_TEST_CHECK_(false); // Should not get here. 614 } 615 616 // The child has acquired the write end of the pipe or exited. 617 // We release the handle on our side and continue. 618 write_handle_.Reset(); 619 event_handle_.Reset(); 620 621 ReadAndInterpretStatusByte(); 622 623 // Waits for the child process to exit if it haven't already. This 624 // returns immediately if the child has already exited, regardless of 625 // whether previous calls to WaitForMultipleObjects synchronized on this 626 // handle or not. 627 GTEST_DEATH_TEST_CHECK_( 628 WAIT_OBJECT_0 == ::WaitForSingleObject(child_handle_.Get(), 629 INFINITE)); 630 DWORD status_code; 631 GTEST_DEATH_TEST_CHECK_( 632 ::GetExitCodeProcess(child_handle_.Get(), &status_code) != FALSE); 633 child_handle_.Reset(); 634 set_status(static_cast<int>(status_code)); 635 return status(); 636} 637 638// The AssumeRole process for a Windows death test. It creates a child 639// process with the same executable as the current process to run the 640// death test. The child process is given the --gtest_filter and 641// --gtest_internal_run_death_test flags such that it knows to run the 642// current death test only. 643DeathTest::TestRole WindowsDeathTest::AssumeRole() { 644 const UnitTestImpl* const impl = GetUnitTestImpl(); 645 const InternalRunDeathTestFlag* const flag = 646 impl->internal_run_death_test_flag(); 647 const TestInfo* const info = impl->current_test_info(); 648 const int death_test_index = info->result()->death_test_count(); 649 650 if (flag != NULL) { 651 // ParseInternalRunDeathTestFlag() has performed all the necessary 652 // processing. 653 set_write_fd(flag->write_fd()); 654 return EXECUTE_TEST; 655 } 656 657 // WindowsDeathTest uses an anonymous pipe to communicate results of 658 // a death test. 659 SECURITY_ATTRIBUTES handles_are_inheritable = { 660 sizeof(SECURITY_ATTRIBUTES), NULL, TRUE }; 661 HANDLE read_handle, write_handle; 662 GTEST_DEATH_TEST_CHECK_( 663 ::CreatePipe(&read_handle, &write_handle, &handles_are_inheritable, 664 0) // Default buffer size. 665 != FALSE); 666 set_read_fd(::_open_osfhandle(reinterpret_cast<intptr_t>(read_handle), 667 O_RDONLY)); 668 write_handle_.Reset(write_handle); 669 event_handle_.Reset(::CreateEvent( 670 &handles_are_inheritable, 671 TRUE, // The event will automatically reset to non-signaled state. 672 FALSE, // The initial state is non-signalled. 673 NULL)); // The even is unnamed. 674 GTEST_DEATH_TEST_CHECK_(event_handle_.Get() != NULL); 675 const String filter_flag = String::Format("--%s%s=%s.%s", 676 GTEST_FLAG_PREFIX_, kFilterFlag, 677 info->test_case_name(), 678 info->name()); 679 const String internal_flag = String::Format( 680 "--%s%s=%s|%d|%d|%u|%Iu|%Iu", 681 GTEST_FLAG_PREFIX_, 682 kInternalRunDeathTestFlag, 683 file_, line_, 684 death_test_index, 685 static_cast<unsigned int>(::GetCurrentProcessId()), 686 // size_t has the same with as pointers on both 32-bit and 64-bit 687 // Windows platforms. 688 // See http://msdn.microsoft.com/en-us/library/tcxf1dw6.aspx. 689 reinterpret_cast<size_t>(write_handle), 690 reinterpret_cast<size_t>(event_handle_.Get())); 691 692 char executable_path[_MAX_PATH + 1]; // NOLINT 693 GTEST_DEATH_TEST_CHECK_( 694 _MAX_PATH + 1 != ::GetModuleFileNameA(NULL, 695 executable_path, 696 _MAX_PATH)); 697 698 String command_line = String::Format("%s %s \"%s\"", 699 ::GetCommandLineA(), 700 filter_flag.c_str(), 701 internal_flag.c_str()); 702 703 DeathTest::set_last_death_test_message(""); 704 705 CaptureStderr(); 706 // Flush the log buffers since the log streams are shared with the child. 707 FlushInfoLog(); 708 709 // The child process will share the standard handles with the parent. 710 STARTUPINFOA startup_info; 711 memset(&startup_info, 0, sizeof(STARTUPINFO)); 712 startup_info.dwFlags = STARTF_USESTDHANDLES; 713 startup_info.hStdInput = ::GetStdHandle(STD_INPUT_HANDLE); 714 startup_info.hStdOutput = ::GetStdHandle(STD_OUTPUT_HANDLE); 715 startup_info.hStdError = ::GetStdHandle(STD_ERROR_HANDLE); 716 717 PROCESS_INFORMATION process_info; 718 GTEST_DEATH_TEST_CHECK_(::CreateProcessA( 719 executable_path, 720 const_cast<char*>(command_line.c_str()), 721 NULL, // Retuned process handle is not inheritable. 722 NULL, // Retuned thread handle is not inheritable. 723 TRUE, // Child inherits all inheritable handles (for write_handle_). 724 0x0, // Default creation flags. 725 NULL, // Inherit the parent's environment. 726 UnitTest::GetInstance()->original_working_dir(), 727 &startup_info, 728 &process_info) != FALSE); 729 child_handle_.Reset(process_info.hProcess); 730 ::CloseHandle(process_info.hThread); 731 set_spawned(true); 732 return OVERSEE_TEST; 733} 734# else // We are not on Windows. 735 736// ForkingDeathTest provides implementations for most of the abstract 737// methods of the DeathTest interface. Only the AssumeRole method is 738// left undefined. 739class ForkingDeathTest : public DeathTestImpl { 740 public: 741 ForkingDeathTest(const char* statement, const RE* regex); 742 743 // All of these virtual functions are inherited from DeathTest. 744 virtual int Wait(); 745 746 protected: 747 void set_child_pid(pid_t child_pid) { child_pid_ = child_pid; } 748 749 private: 750 // PID of child process during death test; 0 in the child process itself. 751 pid_t child_pid_; 752}; 753 754// Constructs a ForkingDeathTest. 755ForkingDeathTest::ForkingDeathTest(const char* a_statement, const RE* a_regex) 756 : DeathTestImpl(a_statement, a_regex), 757 child_pid_(-1) {} 758 759// Waits for the child in a death test to exit, returning its exit 760// status, or 0 if no child process exists. As a side effect, sets the 761// outcome data member. 762int ForkingDeathTest::Wait() { 763 if (!spawned()) 764 return 0; 765 766 ReadAndInterpretStatusByte(); 767 768 int status_value; 769 GTEST_DEATH_TEST_CHECK_SYSCALL_(waitpid(child_pid_, &status_value, 0)); 770 set_status(status_value); 771 return status_value; 772} 773 774// A concrete death test class that forks, then immediately runs the test 775// in the child process. 776class NoExecDeathTest : public ForkingDeathTest { 777 public: 778 NoExecDeathTest(const char* a_statement, const RE* a_regex) : 779 ForkingDeathTest(a_statement, a_regex) { } 780 virtual TestRole AssumeRole(); 781}; 782 783// The AssumeRole process for a fork-and-run death test. It implements a 784// straightforward fork, with a simple pipe to transmit the status byte. 785DeathTest::TestRole NoExecDeathTest::AssumeRole() { 786 const size_t thread_count = GetThreadCount(); 787 if (thread_count != 1) { 788 GTEST_LOG_(WARNING) << DeathTestThreadWarning(thread_count); 789 } 790 791 int pipe_fd[2]; 792 GTEST_DEATH_TEST_CHECK_(pipe(pipe_fd) != -1); 793 794 DeathTest::set_last_death_test_message(""); 795 CaptureStderr(); 796 // When we fork the process below, the log file buffers are copied, but the 797 // file descriptors are shared. We flush all log files here so that closing 798 // the file descriptors in the child process doesn't throw off the 799 // synchronization between descriptors and buffers in the parent process. 800 // This is as close to the fork as possible to avoid a race condition in case 801 // there are multiple threads running before the death test, and another 802 // thread writes to the log file. 803 FlushInfoLog(); 804 805 const pid_t child_pid = fork(); 806 GTEST_DEATH_TEST_CHECK_(child_pid != -1); 807 set_child_pid(child_pid); 808 if (child_pid == 0) { 809 GTEST_DEATH_TEST_CHECK_SYSCALL_(close(pipe_fd[0])); 810 set_write_fd(pipe_fd[1]); 811 // Redirects all logging to stderr in the child process to prevent 812 // concurrent writes to the log files. We capture stderr in the parent 813 // process and append the child process' output to a log. 814 LogToStderr(); 815 // Event forwarding to the listeners of event listener API mush be shut 816 // down in death test subprocesses. 817 GetUnitTestImpl()->listeners()->SuppressEventForwarding(); 818 return EXECUTE_TEST; 819 } else { 820 GTEST_DEATH_TEST_CHECK_SYSCALL_(close(pipe_fd[1])); 821 set_read_fd(pipe_fd[0]); 822 set_spawned(true); 823 return OVERSEE_TEST; 824 } 825} 826 827// A concrete death test class that forks and re-executes the main 828// program from the beginning, with command-line flags set that cause 829// only this specific death test to be run. 830class ExecDeathTest : public ForkingDeathTest { 831 public: 832 ExecDeathTest(const char* a_statement, const RE* a_regex, 833 const char* file, int line) : 834 ForkingDeathTest(a_statement, a_regex), file_(file), line_(line) { } 835 virtual TestRole AssumeRole(); 836 private: 837 // The name of the file in which the death test is located. 838 const char* const file_; 839 // The line number on which the death test is located. 840 const int line_; 841}; 842 843// Utility class for accumulating command-line arguments. 844class Arguments { 845 public: 846 Arguments() { 847 args_.push_back(NULL); 848 } 849 850 ~Arguments() { 851 for (std::vector<char*>::iterator i = args_.begin(); i != args_.end(); 852 ++i) { 853 free(*i); 854 } 855 } 856 void AddArgument(const char* argument) { 857 args_.insert(args_.end() - 1, posix::StrDup(argument)); 858 } 859 860 template <typename Str> 861 void AddArguments(const ::std::vector<Str>& arguments) { 862 for (typename ::std::vector<Str>::const_iterator i = arguments.begin(); 863 i != arguments.end(); 864 ++i) { 865 args_.insert(args_.end() - 1, posix::StrDup(i->c_str())); 866 } 867 } 868 char* const* Argv() { 869 return &args_[0]; 870 } 871 private: 872 std::vector<char*> args_; 873}; 874 875// A struct that encompasses the arguments to the child process of a 876// threadsafe-style death test process. 877struct ExecDeathTestArgs { 878 char* const* argv; // Command-line arguments for the child's call to exec 879 int close_fd; // File descriptor to close; the read end of a pipe 880}; 881 882# if GTEST_OS_MAC 883inline char** GetEnviron() { 884 // When Google Test is built as a framework on MacOS X, the environ variable 885 // is unavailable. Apple's documentation (man environ) recommends using 886 // _NSGetEnviron() instead. 887 return *_NSGetEnviron(); 888} 889# else 890// Some POSIX platforms expect you to declare environ. extern "C" makes 891// it reside in the global namespace. 892extern "C" char** environ; 893inline char** GetEnviron() { return environ; } 894# endif // GTEST_OS_MAC 895 896// The main function for a threadsafe-style death test child process. 897// This function is called in a clone()-ed process and thus must avoid 898// any potentially unsafe operations like malloc or libc functions. 899static int ExecDeathTestChildMain(void* child_arg) { 900 ExecDeathTestArgs* const args = static_cast<ExecDeathTestArgs*>(child_arg); 901 GTEST_DEATH_TEST_CHECK_SYSCALL_(close(args->close_fd)); 902 903 // We need to execute the test program in the same environment where 904 // it was originally invoked. Therefore we change to the original 905 // working directory first. 906 const char* const original_dir = 907 UnitTest::GetInstance()->original_working_dir(); 908 // We can safely call chdir() as it's a direct system call. 909 if (chdir(original_dir) != 0) { 910 DeathTestAbort(String::Format("chdir(\"%s\") failed: %s", 911 original_dir, 912 GetLastErrnoDescription().c_str())); 913 return EXIT_FAILURE; 914 } 915 916 // We can safely call execve() as it's a direct system call. We 917 // cannot use execvp() as it's a libc function and thus potentially 918 // unsafe. Since execve() doesn't search the PATH, the user must 919 // invoke the test program via a valid path that contains at least 920 // one path separator. 921 execve(args->argv[0], args->argv, GetEnviron()); 922 DeathTestAbort(String::Format("execve(%s, ...) in %s failed: %s", 923 args->argv[0], 924 original_dir, 925 GetLastErrnoDescription().c_str())); 926 return EXIT_FAILURE; 927} 928 929// Two utility routines that together determine the direction the stack 930// grows. 931// This could be accomplished more elegantly by a single recursive 932// function, but we want to guard against the unlikely possibility of 933// a smart compiler optimizing the recursion away. 934// 935// GTEST_NO_INLINE_ is required to prevent GCC 4.6 from inlining 936// StackLowerThanAddress into StackGrowsDown, which then doesn't give 937// correct answer. 938bool StackLowerThanAddress(const void* ptr) GTEST_NO_INLINE_; 939bool StackLowerThanAddress(const void* ptr) { 940 int dummy; 941 return &dummy < ptr; 942} 943 944bool StackGrowsDown() { 945 int dummy; 946 return StackLowerThanAddress(&dummy); 947} 948 949// A threadsafe implementation of fork(2) for threadsafe-style death tests 950// that uses clone(2). It dies with an error message if anything goes 951// wrong. 952static pid_t ExecDeathTestFork(char* const* argv, int close_fd) { 953 ExecDeathTestArgs args = { argv, close_fd }; 954 pid_t child_pid = -1; 955 956# if GTEST_HAS_CLONE 957 const bool use_fork = GTEST_FLAG(death_test_use_fork); 958 959 if (!use_fork) { 960 static const bool stack_grows_down = StackGrowsDown(); 961 const size_t stack_size = getpagesize(); 962 // MMAP_ANONYMOUS is not defined on Mac, so we use MAP_ANON instead. 963 void* const stack = mmap(NULL, stack_size, PROT_READ | PROT_WRITE, 964 MAP_ANON | MAP_PRIVATE, -1, 0); 965 GTEST_DEATH_TEST_CHECK_(stack != MAP_FAILED); 966 void* const stack_top = 967 static_cast<char*>(stack) + (stack_grows_down ? stack_size : 0); 968 969 child_pid = clone(&ExecDeathTestChildMain, stack_top, SIGCHLD, &args); 970 971 GTEST_DEATH_TEST_CHECK_(munmap(stack, stack_size) != -1); 972 } 973# else 974 const bool use_fork = true; 975# endif // GTEST_HAS_CLONE 976 977 if (use_fork && (child_pid = fork()) == 0) { 978 ExecDeathTestChildMain(&args); 979 _exit(0); 980 } 981 982 GTEST_DEATH_TEST_CHECK_(child_pid != -1); 983 return child_pid; 984} 985 986// The AssumeRole process for a fork-and-exec death test. It re-executes the 987// main program from the beginning, setting the --gtest_filter 988// and --gtest_internal_run_death_test flags to cause only the current 989// death test to be re-run. 990DeathTest::TestRole ExecDeathTest::AssumeRole() { 991 const UnitTestImpl* const impl = GetUnitTestImpl(); 992 const InternalRunDeathTestFlag* const flag = 993 impl->internal_run_death_test_flag(); 994 const TestInfo* const info = impl->current_test_info(); 995 const int death_test_index = info->result()->death_test_count(); 996 997 if (flag != NULL) { 998 set_write_fd(flag->write_fd()); 999 return EXECUTE_TEST; 1000 } 1001 1002 int pipe_fd[2]; 1003 GTEST_DEATH_TEST_CHECK_(pipe(pipe_fd) != -1); 1004 // Clear the close-on-exec flag on the write end of the pipe, lest 1005 // it be closed when the child process does an exec: 1006 GTEST_DEATH_TEST_CHECK_(fcntl(pipe_fd[1], F_SETFD, 0) != -1); 1007 1008 const String filter_flag = 1009 String::Format("--%s%s=%s.%s", 1010 GTEST_FLAG_PREFIX_, kFilterFlag, 1011 info->test_case_name(), info->name()); 1012 const String internal_flag = 1013 String::Format("--%s%s=%s|%d|%d|%d", 1014 GTEST_FLAG_PREFIX_, kInternalRunDeathTestFlag, 1015 file_, line_, death_test_index, pipe_fd[1]); 1016 Arguments args; 1017 args.AddArguments(GetArgvs()); 1018 args.AddArgument(filter_flag.c_str()); 1019 args.AddArgument(internal_flag.c_str()); 1020 1021 DeathTest::set_last_death_test_message(""); 1022 1023 CaptureStderr(); 1024 // See the comment in NoExecDeathTest::AssumeRole for why the next line 1025 // is necessary. 1026 FlushInfoLog(); 1027 1028 const pid_t child_pid = ExecDeathTestFork(args.Argv(), pipe_fd[0]); 1029 GTEST_DEATH_TEST_CHECK_SYSCALL_(close(pipe_fd[1])); 1030 set_child_pid(child_pid); 1031 set_read_fd(pipe_fd[0]); 1032 set_spawned(true); 1033 return OVERSEE_TEST; 1034} 1035 1036# endif // !GTEST_OS_WINDOWS 1037 1038// Creates a concrete DeathTest-derived class that depends on the 1039// --gtest_death_test_style flag, and sets the pointer pointed to 1040// by the "test" argument to its address. If the test should be 1041// skipped, sets that pointer to NULL. Returns true, unless the 1042// flag is set to an invalid value. 1043bool DefaultDeathTestFactory::Create(const char* statement, const RE* regex, 1044 const char* file, int line, 1045 DeathTest** test) { 1046 UnitTestImpl* const impl = GetUnitTestImpl(); 1047 const InternalRunDeathTestFlag* const flag = 1048 impl->internal_run_death_test_flag(); 1049 const int death_test_index = impl->current_test_info() 1050 ->increment_death_test_count(); 1051 1052 if (flag != NULL) { 1053 if (death_test_index > flag->index()) { 1054 DeathTest::set_last_death_test_message(String::Format( 1055 "Death test count (%d) somehow exceeded expected maximum (%d)", 1056 death_test_index, flag->index())); 1057 return false; 1058 } 1059 1060 if (!(flag->file() == file && flag->line() == line && 1061 flag->index() == death_test_index)) { 1062 *test = NULL; 1063 return true; 1064 } 1065 } 1066 1067# if GTEST_OS_WINDOWS 1068 1069 if (GTEST_FLAG(death_test_style) == "threadsafe" || 1070 GTEST_FLAG(death_test_style) == "fast") { 1071 *test = new WindowsDeathTest(statement, regex, file, line); 1072 } 1073 1074# else 1075 1076 if (GTEST_FLAG(death_test_style) == "threadsafe") { 1077 *test = new ExecDeathTest(statement, regex, file, line); 1078 } else if (GTEST_FLAG(death_test_style) == "fast") { 1079 *test = new NoExecDeathTest(statement, regex); 1080 } 1081 1082# endif // GTEST_OS_WINDOWS 1083 1084 else { // NOLINT - this is more readable than unbalanced brackets inside #if. 1085 DeathTest::set_last_death_test_message(String::Format( 1086 "Unknown death test style \"%s\" encountered", 1087 GTEST_FLAG(death_test_style).c_str())); 1088 return false; 1089 } 1090 1091 return true; 1092} 1093 1094// Splits a given string on a given delimiter, populating a given 1095// vector with the fields. GTEST_HAS_DEATH_TEST implies that we have 1096// ::std::string, so we can use it here. 1097static void SplitString(const ::std::string& str, char delimiter, 1098 ::std::vector< ::std::string>* dest) { 1099 ::std::vector< ::std::string> parsed; 1100 ::std::string::size_type pos = 0; 1101 while (::testing::internal::AlwaysTrue()) { 1102 const ::std::string::size_type colon = str.find(delimiter, pos); 1103 if (colon == ::std::string::npos) { 1104 parsed.push_back(str.substr(pos)); 1105 break; 1106 } else { 1107 parsed.push_back(str.substr(pos, colon - pos)); 1108 pos = colon + 1; 1109 } 1110 } 1111 dest->swap(parsed); 1112} 1113 1114# if GTEST_OS_WINDOWS 1115// Recreates the pipe and event handles from the provided parameters, 1116// signals the event, and returns a file descriptor wrapped around the pipe 1117// handle. This function is called in the child process only. 1118int GetStatusFileDescriptor(unsigned int parent_process_id, 1119 size_t write_handle_as_size_t, 1120 size_t event_handle_as_size_t) { 1121 AutoHandle parent_process_handle(::OpenProcess(PROCESS_DUP_HANDLE, 1122 FALSE, // Non-inheritable. 1123 parent_process_id)); 1124 if (parent_process_handle.Get() == INVALID_HANDLE_VALUE) { 1125 DeathTestAbort(String::Format("Unable to open parent process %u", 1126 parent_process_id)); 1127 } 1128 1129 // TODO(vladl@google.com): Replace the following check with a 1130 // compile-time assertion when available. 1131 GTEST_CHECK_(sizeof(HANDLE) <= sizeof(size_t)); 1132 1133 const HANDLE write_handle = 1134 reinterpret_cast<HANDLE>(write_handle_as_size_t); 1135 HANDLE dup_write_handle; 1136 1137 // The newly initialized handle is accessible only in in the parent 1138 // process. To obtain one accessible within the child, we need to use 1139 // DuplicateHandle. 1140 if (!::DuplicateHandle(parent_process_handle.Get(), write_handle, 1141 ::GetCurrentProcess(), &dup_write_handle, 1142 0x0, // Requested privileges ignored since 1143 // DUPLICATE_SAME_ACCESS is used. 1144 FALSE, // Request non-inheritable handler. 1145 DUPLICATE_SAME_ACCESS)) { 1146 DeathTestAbort(String::Format( 1147 "Unable to duplicate the pipe handle %Iu from the parent process %u", 1148 write_handle_as_size_t, parent_process_id)); 1149 } 1150 1151 const HANDLE event_handle = reinterpret_cast<HANDLE>(event_handle_as_size_t); 1152 HANDLE dup_event_handle; 1153 1154 if (!::DuplicateHandle(parent_process_handle.Get(), event_handle, 1155 ::GetCurrentProcess(), &dup_event_handle, 1156 0x0, 1157 FALSE, 1158 DUPLICATE_SAME_ACCESS)) { 1159 DeathTestAbort(String::Format( 1160 "Unable to duplicate the event handle %Iu from the parent process %u", 1161 event_handle_as_size_t, parent_process_id)); 1162 } 1163 1164 const int write_fd = 1165 ::_open_osfhandle(reinterpret_cast<intptr_t>(dup_write_handle), O_APPEND); 1166 if (write_fd == -1) { 1167 DeathTestAbort(String::Format( 1168 "Unable to convert pipe handle %Iu to a file descriptor", 1169 write_handle_as_size_t)); 1170 } 1171 1172 // Signals the parent that the write end of the pipe has been acquired 1173 // so the parent can release its own write end. 1174 ::SetEvent(dup_event_handle); 1175 1176 return write_fd; 1177} 1178# endif // GTEST_OS_WINDOWS 1179 1180// Returns a newly created InternalRunDeathTestFlag object with fields 1181// initialized from the GTEST_FLAG(internal_run_death_test) flag if 1182// the flag is specified; otherwise returns NULL. 1183InternalRunDeathTestFlag* ParseInternalRunDeathTestFlag() { 1184 if (GTEST_FLAG(internal_run_death_test) == "") return NULL; 1185 1186 // GTEST_HAS_DEATH_TEST implies that we have ::std::string, so we 1187 // can use it here. 1188 int line = -1; 1189 int index = -1; 1190 ::std::vector< ::std::string> fields; 1191 SplitString(GTEST_FLAG(internal_run_death_test).c_str(), '|', &fields); 1192 int write_fd = -1; 1193 1194# if GTEST_OS_WINDOWS 1195 1196 unsigned int parent_process_id = 0; 1197 size_t write_handle_as_size_t = 0; 1198 size_t event_handle_as_size_t = 0; 1199 1200 if (fields.size() != 6 1201 || !ParseNaturalNumber(fields[1], &line) 1202 || !ParseNaturalNumber(fields[2], &index) 1203 || !ParseNaturalNumber(fields[3], &parent_process_id) 1204 || !ParseNaturalNumber(fields[4], &write_handle_as_size_t) 1205 || !ParseNaturalNumber(fields[5], &event_handle_as_size_t)) { 1206 DeathTestAbort(String::Format( 1207 "Bad --gtest_internal_run_death_test flag: %s", 1208 GTEST_FLAG(internal_run_death_test).c_str())); 1209 } 1210 write_fd = GetStatusFileDescriptor(parent_process_id, 1211 write_handle_as_size_t, 1212 event_handle_as_size_t); 1213# else 1214 1215 if (fields.size() != 4 1216 || !ParseNaturalNumber(fields[1], &line) 1217 || !ParseNaturalNumber(fields[2], &index) 1218 || !ParseNaturalNumber(fields[3], &write_fd)) { 1219 DeathTestAbort(String::Format( 1220 "Bad --gtest_internal_run_death_test flag: %s", 1221 GTEST_FLAG(internal_run_death_test).c_str())); 1222 } 1223 1224# endif // GTEST_OS_WINDOWS 1225 1226 return new InternalRunDeathTestFlag(fields[0], line, index, write_fd); 1227} 1228 1229} // namespace internal 1230 1231#endif // GTEST_HAS_DEATH_TEST 1232 1233} // namespace testing 1234