mirror of
https://github.com/sheumann/hush.git
synced 2024-12-23 05:29:58 +00:00
306 lines
7.7 KiB
Bash
Executable File
306 lines
7.7 KiB
Bash
Executable File
#!/bin/sh
|
|
# Copyright 2009 by Denys Vlasenko
|
|
# Licensed under GPLv2, see file LICENSE in this source tree.
|
|
|
|
. ./testing.sh
|
|
|
|
unset LANG
|
|
unset LANGUAGE
|
|
unset LC_COLLATE
|
|
unset LC_ALL
|
|
umask 022
|
|
|
|
rm -rf tar.tempdir 2>/dev/null
|
|
mkdir tar.tempdir && cd tar.tempdir || exit 1
|
|
|
|
# testing "test name" "script" "expected result" "file input" "stdin"
|
|
|
|
testing "Empty file is not a tarball" '\
|
|
tar xvf - 2>&1; echo $?
|
|
' "\
|
|
tar: short read
|
|
1
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
optional FEATURE_SEAMLESS_GZ GUNZIP
|
|
# In NOMMU case, "invalid magic" message comes from gunzip child process.
|
|
# Otherwise, it comes from tar.
|
|
# Need to fix output up to avoid false positive.
|
|
testing "Empty file is not a tarball.tar.gz" '\
|
|
{ tar xvzf - 2>&1; echo $?; } | grep -Fv "invalid magic"
|
|
' "\
|
|
tar: short read
|
|
1
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
testing "Two zeroed blocks is a ('truncated') empty tarball" '\
|
|
dd if=/dev/zero bs=512 count=2 2>/dev/null | tar xvf - 2>&1; echo $?
|
|
' "\
|
|
0
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
testing "Twenty zeroed blocks is an empty tarball" '\
|
|
dd if=/dev/zero bs=512 count=20 2>/dev/null | tar xvf - 2>&1; echo $?
|
|
' "\
|
|
0
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
# "tar cf test.tar input input_dir/ input_hard1 input_hard2 input_hard1 input_dir/ input":
|
|
# GNU tar 1.26 records as hardlinks:
|
|
# input_hard2 -> input_hard1
|
|
# input_hard1 -> input_hard1 (!!!)
|
|
# input_dir/file -> input_dir/file
|
|
# input -> input
|
|
# As of 1.24.0, we don't record last two: for them, nlink==1
|
|
# and we check for "hardlink"ness only files with nlink!=1
|
|
# We also don't use "hrw-r--r--" notation for hardlinks in "tar tv" listing.
|
|
optional FEATURE_TAR_CREATE FEATURE_LS_SORTFILES
|
|
testing "tar hardlinks and repeated files" '\
|
|
rm -rf input_* test.tar 2>/dev/null
|
|
>input_hard1
|
|
ln input_hard1 input_hard2
|
|
mkdir input_dir
|
|
>input_dir/file
|
|
chmod -R 644 *
|
|
chmod 755 input_dir
|
|
tar cf test.tar input input_dir/ input_hard1 input_hard2 input_hard1 input_dir/ input
|
|
tar tvf test.tar | sed "s/.*[0-9] input/input/"
|
|
rm -rf input_dir
|
|
tar xf test.tar 2>&1
|
|
echo Ok: $?
|
|
ls -l . input_dir/* | grep input_ | sed "s/\\(^[^ ]*\\) .* input/\\1 input/"
|
|
' "\
|
|
input
|
|
input_dir/
|
|
input_dir/file
|
|
input_hard1
|
|
input_hard2 -> input_hard1
|
|
input_hard1 -> input_hard1
|
|
input_dir/
|
|
input_dir/file
|
|
input
|
|
Ok: 0
|
|
-rw-r--r-- input_dir/file
|
|
drwxr-xr-x input_dir
|
|
-rw-r--r-- input_hard1
|
|
-rw-r--r-- input_hard2
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
optional FEATURE_TAR_CREATE FEATURE_LS_SORTFILES
|
|
testing "tar hardlinks mode" '\
|
|
rm -rf input_* test.tar 2>/dev/null
|
|
>input_hard1
|
|
chmod 741 input_hard1
|
|
ln input_hard1 input_hard2
|
|
mkdir input_dir
|
|
ln input_hard1 input_dir
|
|
ln input_hard2 input_dir
|
|
chmod 550 input_dir
|
|
# On some filesystems, input_dir/input_hard2 is returned by readdir
|
|
# BEFORE input_dir/input_hard1! Thats why we cant just "tar cf ... input_*":
|
|
tar cf test.tar input_dir/input_hard* input_hard*
|
|
tar tvf test.tar | sed "s/.*[0-9] input/input/"
|
|
chmod 770 input_dir
|
|
rm -rf input_*
|
|
tar xf test.tar 2>&1
|
|
echo Ok: $?
|
|
ls -l . input_dir/* | grep "input.*hard" | sed "s/\\(^[^ ]*\\) .* input/\\1 input/"
|
|
' "\
|
|
input_dir/input_hard1
|
|
input_dir/input_hard2 -> input_dir/input_hard1
|
|
input_hard1 -> input_dir/input_hard1
|
|
input_hard2 -> input_dir/input_hard1
|
|
Ok: 0
|
|
-rwxr----x input_dir/input_hard1
|
|
-rwxr----x input_dir/input_hard2
|
|
-rwxr----x input_hard1
|
|
-rwxr----x input_hard2
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
optional FEATURE_TAR_CREATE FEATURE_LS_SORTFILES
|
|
testing "tar symlinks mode" '\
|
|
rm -rf input_* test.tar 2>/dev/null
|
|
>input_file
|
|
chmod 741 input_file
|
|
ln -s input_file input_soft
|
|
mkdir input_dir
|
|
ln input_file input_dir
|
|
ln input_soft input_dir
|
|
chmod 550 input_dir
|
|
tar cf test.tar input_dir/* input_[fs]*
|
|
tar tvf test.tar | sed "s/.*[0-9] input/input/" | sort
|
|
chmod 770 input_dir
|
|
rm -rf input_*
|
|
tar xf test.tar 2>&1
|
|
echo Ok: $?
|
|
ls -l . input_dir/* | grep "input_[fs]" | sed "s/\\(^[^ ]*\\) .* input/\\1 input/"
|
|
' "\
|
|
input_dir/input_file
|
|
input_dir/input_soft -> input_file
|
|
input_file -> input_dir/input_file
|
|
input_soft -> input_dir/input_soft
|
|
Ok: 0
|
|
-rwxr----x input_dir/input_file
|
|
lrwxrwxrwx input_file
|
|
-rwxr----x input_file
|
|
lrwxrwxrwx input_file
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
optional FEATURE_TAR_CREATE FEATURE_TAR_LONG_OPTIONS
|
|
testing "tar --overwrite" "\
|
|
rm -rf input_* test.tar 2>/dev/null
|
|
ln input input_hard
|
|
tar cf test.tar input_hard
|
|
echo WRONG >input
|
|
# --overwrite opens 'input_hard' without unlinking,
|
|
# thus 'input_hard' still linked to 'input' and we write 'Ok' into it
|
|
tar xf test.tar --overwrite 2>&1 && cat input
|
|
" "\
|
|
Ok
|
|
" \
|
|
"Ok\n" ""
|
|
SKIP=
|
|
|
|
test x"$SKIP_KNOWN_BUGS" = x"" && {
|
|
# Needs to be run under non-root for meaningful test
|
|
optional FEATURE_TAR_CREATE
|
|
testing "tar writing into read-only dir" '\
|
|
rm -rf input_* test.tar 2>/dev/null
|
|
mkdir input_dir
|
|
>input_dir/input_file
|
|
chmod 550 input_dir
|
|
tar cf test.tar input_dir
|
|
tar tvf test.tar | sed "s/.*[0-9] input/input/"
|
|
chmod 770 input_dir
|
|
rm -rf input_*
|
|
tar xf test.tar 2>&1
|
|
echo Ok: $?
|
|
ls -l input_dir/* . | grep input_ | sed "s/\\(^[^ ]*\\) .* input/\\1 input/"
|
|
chmod 770 input_dir
|
|
' "\
|
|
input_dir/
|
|
input_dir/input_file
|
|
Ok: 0
|
|
-rw-r--r-- input_dir/input_file
|
|
dr-xr-x--- input_dir
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
}
|
|
|
|
# Had a bug where on extract autodetect first "switched off" -z
|
|
# and then failed to recognize .tgz extension
|
|
optional FEATURE_TAR_CREATE FEATURE_SEAMLESS_GZ GUNZIP
|
|
testing "tar extract tgz" "\
|
|
dd count=1 bs=1M if=/dev/zero of=F0 2>/dev/null
|
|
tar -czf F0.tgz F0
|
|
rm F0
|
|
tar -xzvf F0.tgz && echo Ok
|
|
rm F0 || echo BAD
|
|
" "\
|
|
F0
|
|
Ok
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
# Do we detect XZ-compressed data (even w/o .tar.xz or txz extension)?
|
|
# (the uuencoded hello_world.txz contains one empty file named "hello_world")
|
|
optional UUDECODE FEATURE_TAR_AUTODETECT FEATURE_SEAMLESS_XZ
|
|
testing "tar extract txz" "\
|
|
uudecode -o input && tar tf input && echo Ok
|
|
" "\
|
|
hello_world
|
|
Ok
|
|
" \
|
|
"" "\
|
|
begin-base64 644 hello_world.txz
|
|
/Td6WFoAAATm1rRGAgAhARYAAAB0L+Wj4AX/AEldADQZSe6ODIZQ3rSQ8kAJ
|
|
SnMPTX+XWGKW3Yu/Rwqg4Ik5wqgQKgVH97J8yA8IvZ4ahaCQogUNHRkXibr2
|
|
Q615wcb2G7fJU49AhWAAAAAAUA8gu9DyXfAAAWWADAAAAB5FXGCxxGf7AgAA
|
|
AAAEWVo=
|
|
====
|
|
"
|
|
SKIP=
|
|
|
|
# On extract, everything up to and including last ".." component is stripped
|
|
optional FEATURE_TAR_CREATE
|
|
testing "tar strips /../ on extract" "\
|
|
rm -rf input_* test.tar 2>/dev/null
|
|
mkdir input_dir
|
|
echo Ok >input_dir/file
|
|
tar cf test.tar ./../tar.tempdir/input_dir/../input_dir 2>&1
|
|
rm -rf input_* 2>/dev/null
|
|
tar -vxf test.tar 2>&1
|
|
cat input_dir/file 2>&1
|
|
" "\
|
|
tar: removing leading './../tar.tempdir/input_dir/../' from member names
|
|
input_dir/
|
|
input_dir/file
|
|
Ok
|
|
" \
|
|
"" ""
|
|
SKIP=
|
|
|
|
# attack.tar.bz2 has symlink pointing to a system file
|
|
# followed by a regular file with the same name
|
|
# containing "root::0:0::/root:/bin/sh":
|
|
# lrwxrwxrwx root/root passwd -> /tmp/passwd
|
|
# -rw-r--r-- root/root passwd
|
|
# naive tar implementation may end up creating the symlink
|
|
# and then writing into it.
|
|
# The correct implementation unlinks target before
|
|
# creating the second file.
|
|
# We test that /tmp/passwd remains empty:
|
|
optional UUDECODE FEATURE_TAR_AUTODETECT FEATURE_SEAMLESS_BZ2
|
|
testing "tar does not extract into symlinks" "\
|
|
>>/tmp/passwd && uudecode -o input && tar xf input 2>&1 && rm passwd; cat /tmp/passwd; echo \$?
|
|
" "\
|
|
0
|
|
" \
|
|
"" "\
|
|
begin-base64 644 attack.tar.bz2
|
|
QlpoOTFBWSZTWRVn/bIAAKt7hMqwAEBAAP2QAhB0Y96AAACACCAAlISgpqe0
|
|
po0DIaDynqAkpDRP1ANAhiYNSPR8VchKhAz0AK59+DA6FcMKBggOARIJdVHL
|
|
DGllrjs20ATUgR1HmccBX3EhoMnpMJaNyggmxgLDMz54lBnBTJO/1L1lbMS4
|
|
l4/V8LDoe90yiWJhOJvIypgEfxdyRThQkBVn/bI=
|
|
====
|
|
"
|
|
SKIP=
|
|
# And same with -k
|
|
optional UUDECODE FEATURE_TAR_AUTODETECT FEATURE_SEAMLESS_BZ2
|
|
testing "tar -k does not extract into symlinks" "\
|
|
>>/tmp/passwd && uudecode -o input && tar xf input -k 2>&1 && rm passwd; cat /tmp/passwd; echo \$?
|
|
" "\
|
|
tar: can't open 'passwd': File exists
|
|
0
|
|
" \
|
|
"" "\
|
|
begin-base64 644 attack.tar.bz2
|
|
QlpoOTFBWSZTWRVn/bIAAKt7hMqwAEBAAP2QAhB0Y96AAACACCAAlISgpqe0
|
|
po0DIaDynqAkpDRP1ANAhiYNSPR8VchKhAz0AK59+DA6FcMKBggOARIJdVHL
|
|
DGllrjs20ATUgR1HmccBX3EhoMnpMJaNyggmxgLDMz54lBnBTJO/1L1lbMS4
|
|
l4/V8LDoe90yiWJhOJvIypgEfxdyRThQkBVn/bI=
|
|
====
|
|
"
|
|
SKIP=
|
|
|
|
|
|
cd .. && rm -rf tar.tempdir || exit 1
|
|
|
|
exit $FAILCOUNT
|