IptablesBaseTest.cpp revision e60c0a51957596788995ec57d33531cd103d8dd7
1/* 2 * Copyright 2016 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 * 16 * IptablesBaseTest.cpp - utility class for tests that use iptables 17 */ 18 19#include <string> 20#include <vector> 21 22#include <gtest/gtest.h> 23 24#include "IptablesBaseTest.h" 25#include "NetdConstants.h" 26 27IptablesBaseTest::IptablesBaseTest() { 28 sCmds.clear(); 29 sRestoreCmds.clear(); 30} 31 32int IptablesBaseTest::fake_android_fork_exec(int argc, char* argv[], int *status, bool, bool) { 33 std::string cmd = argv[0]; 34 for (int i = 1; i < argc; i++) { 35 cmd += " "; 36 cmd += argv[i]; 37 } 38 sCmds.push_back(cmd); 39 *status = 0; 40 return 0; 41} 42 43int IptablesBaseTest::fakeExecIptables(IptablesTarget target, ...) { 44 std::string cmd = " -w"; 45 va_list args; 46 va_start(args, target); 47 const char *arg; 48 do { 49 arg = va_arg(args, const char *); 50 if (arg != nullptr) { 51 cmd += " "; 52 cmd += arg; 53 } 54 } while (arg); 55 56 if (target == V4 || target == V4V6) { 57 sCmds.push_back(IPTABLES_PATH + cmd); 58 } 59 if (target == V6 || target == V4V6) { 60 sCmds.push_back(IP6TABLES_PATH + cmd); 61 } 62 63 return 0; 64} 65 66int IptablesBaseTest::fakeExecIptablesRestore(IptablesTarget target, const std::string& commands) { 67 sRestoreCmds.push_back({ target, commands }); 68 return 0; 69} 70 71int IptablesBaseTest::expectIptablesCommand(IptablesTarget target, int pos, 72 const std::string& cmd) { 73 if (target == V4 || target == V4V6) { 74 EXPECT_EQ("/system/bin/iptables -w " + cmd, sCmds[pos++]); 75 } 76 if (target == V6 || target == V4V6) { 77 EXPECT_EQ("/system/bin/ip6tables -w " + cmd, sCmds[pos++]); 78 } 79 return target == V4V6 ? 2 : 1; 80} 81 82void IptablesBaseTest::expectIptablesCommands(const std::vector<std::string>& expectedCmds) { 83 ExpectedIptablesCommands expected; 84 for (auto cmd : expectedCmds) { 85 expected.push_back({ V4V6, cmd }); 86 } 87 expectIptablesCommands(expected); 88} 89 90void IptablesBaseTest::expectIptablesCommands(const ExpectedIptablesCommands& expectedCmds) { 91 size_t pos = 0; 92 for (size_t i = 0; i < expectedCmds.size(); i ++) { 93 auto target = expectedCmds[i].first; 94 auto cmd = expectedCmds[i].second; 95 pos += expectIptablesCommand(target, pos, cmd); 96 } 97 98 EXPECT_EQ(pos, sCmds.size()); 99 sCmds.clear(); 100} 101 102void IptablesBaseTest::expectIptablesRestoreCommands(const std::vector<std::string>& expectedCmds) { 103 ExpectedIptablesCommands expected; 104 for (auto cmd : expectedCmds) { 105 expected.push_back({ V4V6, cmd }); 106 } 107 expectIptablesRestoreCommands(expected); 108} 109 110void IptablesBaseTest::expectIptablesRestoreCommands(const ExpectedIptablesCommands& expectedCmds) { 111 EXPECT_EQ(expectedCmds.size(), sRestoreCmds.size()); 112 for (size_t i = 0; i < expectedCmds.size(); i++) { 113 EXPECT_EQ(expectedCmds[i], sRestoreCmds[i]) << 114 "iptables-restore command " << i << " differs"; 115 } 116 sRestoreCmds.clear(); 117} 118 119std::vector<std::string> IptablesBaseTest::sCmds = {}; 120IptablesBaseTest::ExpectedIptablesCommands IptablesBaseTest::sRestoreCmds = {}; 121