1/*
2 * Copyright 2016 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 *
16 * IptablesBaseTest.cpp - utility class for tests that use iptables
17 */
18
19#include <string>
20#include <vector>
21
22#include <gtest/gtest.h>
23
24#include "IptablesBaseTest.h"
25#include "NetdConstants.h"
26
27IptablesBaseTest::IptablesBaseTest() {
28    sCmds.clear();
29    sRestoreCmds.clear();
30}
31
32int IptablesBaseTest::fake_android_fork_exec(int argc, char* argv[], int *status, bool, bool) {
33    std::string cmd = argv[0];
34    for (int i = 1; i < argc; i++) {
35        cmd += " ";
36        cmd += argv[i];
37    }
38    sCmds.push_back(cmd);
39    *status = 0;
40    return 0;
41}
42
43int IptablesBaseTest::fakeExecIptables(IptablesTarget target, ...) {
44    std::string cmd = " -w";
45    va_list args;
46    va_start(args, target);
47    const char *arg;
48    do {
49        arg = va_arg(args, const char *);
50        if (arg != nullptr) {
51            cmd += " ";
52            cmd += arg;
53        }
54    } while (arg);
55
56    if (target == V4 || target == V4V6) {
57        sCmds.push_back(IPTABLES_PATH + cmd);
58    }
59    if (target == V6 || target == V4V6) {
60        sCmds.push_back(IP6TABLES_PATH + cmd);
61    }
62
63    return 0;
64}
65
66int IptablesBaseTest::fakeExecIptablesRestore(IptablesTarget target, const std::string& commands) {
67    sRestoreCmds.push_back({ target, commands });
68    return 0;
69}
70
71int IptablesBaseTest::expectIptablesCommand(IptablesTarget target, int pos,
72                                            const std::string& cmd) {
73
74    if ((unsigned) pos >= sCmds.size()) {
75        ADD_FAILURE() << "Expected too many iptables commands, want command "
76               << pos + 1 << "/" << sCmds.size();
77        return -1;
78    }
79
80    if (target == V4 || target == V4V6) {
81        EXPECT_EQ("/system/bin/iptables -w " + cmd, sCmds[pos++]);
82    }
83    if (target == V6 || target == V4V6) {
84        EXPECT_EQ("/system/bin/ip6tables -w " + cmd, sCmds[pos++]);
85    }
86
87    return target == V4V6 ? 2 : 1;
88}
89
90void IptablesBaseTest::expectIptablesCommands(const std::vector<std::string>& expectedCmds) {
91    ExpectedIptablesCommands expected;
92    for (auto cmd : expectedCmds) {
93        expected.push_back({ V4V6, cmd });
94    }
95    expectIptablesCommands(expected);
96}
97
98void IptablesBaseTest::expectIptablesCommands(const ExpectedIptablesCommands& expectedCmds) {
99    size_t pos = 0;
100    for (size_t i = 0; i < expectedCmds.size(); i ++) {
101        auto target = expectedCmds[i].first;
102        auto cmd = expectedCmds[i].second;
103        int numConsumed = expectIptablesCommand(target, pos, cmd);
104        if (numConsumed < 0) {
105            // Read past the end of the array.
106            break;
107        }
108        pos += numConsumed;
109    }
110
111    EXPECT_EQ(pos, sCmds.size());
112    sCmds.clear();
113}
114
115void IptablesBaseTest::expectIptablesRestoreCommands(const std::vector<std::string>& expectedCmds) {
116    ExpectedIptablesCommands expected;
117    for (auto cmd : expectedCmds) {
118        expected.push_back({ V4V6, cmd });
119    }
120    expectIptablesRestoreCommands(expected);
121}
122
123void IptablesBaseTest::expectIptablesRestoreCommands(const ExpectedIptablesCommands& expectedCmds) {
124    EXPECT_EQ(expectedCmds.size(), sRestoreCmds.size());
125    for (size_t i = 0; i < expectedCmds.size(); i++) {
126        EXPECT_EQ(expectedCmds[i], sRestoreCmds[i]) <<
127            "iptables-restore command " << i << " differs";
128    }
129    sRestoreCmds.clear();
130}
131
132std::vector<std::string> IptablesBaseTest::sCmds = {};
133IptablesBaseTest::ExpectedIptablesCommands IptablesBaseTest::sRestoreCmds = {};
134