2011-09-23 20:46:33 -07:00
|
|
|
# Copyright (c) 2011 Evan Phoenix
|
2006-06-30 20:42:12 +00:00
|
|
|
# Copyright (c) 2005 Zed A. Shaw
|
2006-05-21 14:46:42 +00:00
|
|
|
|
2007-10-20 23:15:19 +00:00
|
|
|
require 'test/testhelp'
|
2006-01-28 19:03:53 +00:00
|
|
|
|
2011-09-22 19:24:43 -07:00
|
|
|
include Puma
|
2006-01-28 19:03:53 +00:00
|
|
|
|
2011-10-03 14:44:18 -07:00
|
|
|
class Http11ParserTest < Test::Unit::TestCase
|
2011-12-01 15:50:14 -08:00
|
|
|
|
2006-01-30 06:25:20 +00:00
|
|
|
def test_parse_simple
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
http = "GET / HTTP/1.1\r\n\r\n"
|
2006-05-14 23:42:19 +00:00
|
|
|
nread = parser.execute(req, http, 0)
|
2007-10-15 18:00:40 +00:00
|
|
|
|
2006-01-30 06:25:20 +00:00
|
|
|
assert nread == http.length, "Failed to parse the full HTTP request"
|
|
|
|
assert parser.finished?, "Parser didn't finish"
|
|
|
|
assert !parser.error?, "Parser had error"
|
|
|
|
assert nread == parser.nread, "Number read returned from execute does not match"
|
2007-10-15 18:00:40 +00:00
|
|
|
|
|
|
|
assert_equal '/', req['REQUEST_PATH']
|
|
|
|
assert_equal 'HTTP/1.1', req['HTTP_VERSION']
|
|
|
|
assert_equal '/', req['REQUEST_URI']
|
|
|
|
assert_equal 'GET', req['REQUEST_METHOD']
|
|
|
|
assert_nil req['FRAGMENT']
|
|
|
|
assert_nil req['QUERY_STRING']
|
|
|
|
|
2006-01-30 06:25:20 +00:00
|
|
|
parser.reset
|
|
|
|
assert parser.nread == 0, "Number read after reset should be 0"
|
|
|
|
end
|
2006-08-12 22:00:11 +00:00
|
|
|
|
|
|
|
def test_parse_dumbfuck_headers
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
should_be_good = "GET / HTTP/1.1\r\naaaaaaaaaaaaa:++++++++++\r\n\r\n"
|
|
|
|
nread = parser.execute(req, should_be_good, 0)
|
|
|
|
assert_equal should_be_good.length, nread
|
|
|
|
assert parser.finished?
|
|
|
|
assert !parser.error?
|
|
|
|
end
|
2006-01-30 06:25:20 +00:00
|
|
|
|
|
|
|
def test_parse_error
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
bad_http = "GET / SsUTF/1.1"
|
|
|
|
|
|
|
|
error = false
|
|
|
|
begin
|
2011-12-07 14:48:41 -08:00
|
|
|
parser.execute(req, bad_http, 0)
|
|
|
|
rescue
|
2006-01-30 06:25:20 +00:00
|
|
|
error = true
|
2006-01-28 19:03:53 +00:00
|
|
|
end
|
2006-01-30 06:25:20 +00:00
|
|
|
|
|
|
|
assert error, "failed to throw exception"
|
|
|
|
assert !parser.finished?, "Parser shouldn't be finished"
|
|
|
|
assert parser.error?, "Parser SHOULD have error"
|
|
|
|
end
|
2006-03-19 23:31:30 +00:00
|
|
|
|
2007-10-15 18:00:40 +00:00
|
|
|
def test_fragment_in_uri
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
get = "GET /forums/1/topics/2375?page=1#posts-17408 HTTP/1.1\r\n\r\n"
|
|
|
|
assert_nothing_raised do
|
|
|
|
parser.execute(req, get, 0)
|
|
|
|
end
|
|
|
|
assert parser.finished?
|
2007-10-18 20:45:16 +00:00
|
|
|
assert_equal '/forums/1/topics/2375?page=1', req['REQUEST_URI']
|
2007-10-15 18:00:40 +00:00
|
|
|
assert_equal 'posts-17408', req['FRAGMENT']
|
|
|
|
end
|
|
|
|
|
2006-04-03 02:27:59 +00:00
|
|
|
# lame random garbage maker
|
|
|
|
def rand_data(min, max, readable=true)
|
|
|
|
count = min + ((rand(max)+1) *10).to_i
|
|
|
|
res = count.to_s + "/"
|
|
|
|
|
|
|
|
if readable
|
2006-08-16 21:51:38 +00:00
|
|
|
res << Digest::SHA1.hexdigest(rand(count * 100).to_s) * (count / 40)
|
2006-04-03 02:27:59 +00:00
|
|
|
else
|
2006-08-16 21:51:38 +00:00
|
|
|
res << Digest::SHA1.digest(rand(count * 100).to_s) * (count / 20)
|
2006-04-03 02:27:59 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
return res
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
def test_horrible_queries
|
|
|
|
parser = HttpParser.new
|
|
|
|
|
|
|
|
# then that large header names are caught
|
2006-08-16 21:51:38 +00:00
|
|
|
10.times do |c|
|
2006-04-03 02:27:59 +00:00
|
|
|
get = "GET /#{rand_data(10,120)} HTTP/1.1\r\nX-#{rand_data(1024, 1024+(c*1024))}: Test\r\n\r\n"
|
2011-09-22 19:24:43 -07:00
|
|
|
assert_raises Puma::HttpParserError do
|
2006-05-14 23:42:19 +00:00
|
|
|
parser.execute({}, get, 0)
|
2006-04-03 02:27:59 +00:00
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
# then that large mangled field values are caught
|
2006-08-16 21:51:38 +00:00
|
|
|
10.times do |c|
|
2006-04-03 02:27:59 +00:00
|
|
|
get = "GET /#{rand_data(10,120)} HTTP/1.1\r\nX-Test: #{rand_data(1024, 1024+(c*1024), false)}\r\n\r\n"
|
2011-09-22 19:24:43 -07:00
|
|
|
assert_raises Puma::HttpParserError do
|
2006-05-14 23:42:19 +00:00
|
|
|
parser.execute({}, get, 0)
|
2006-04-03 02:27:59 +00:00
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
# then large headers are rejected too
|
|
|
|
get = "GET /#{rand_data(10,120)} HTTP/1.1\r\n"
|
|
|
|
get << "X-Test: test\r\n" * (80 * 1024)
|
2011-09-22 19:24:43 -07:00
|
|
|
assert_raises Puma::HttpParserError do
|
2006-05-14 23:42:19 +00:00
|
|
|
parser.execute({}, get, 0)
|
2006-04-03 02:27:59 +00:00
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
|
|
|
|
# finally just that random garbage gets blocked all the time
|
|
|
|
10.times do |c|
|
|
|
|
get = "GET #{rand_data(1024, 1024+(c*1024), false)} #{rand_data(1024, 1024+(c*1024), false)}\r\n\r\n"
|
2011-09-22 19:24:43 -07:00
|
|
|
assert_raises Puma::HttpParserError do
|
2006-05-14 23:42:19 +00:00
|
|
|
parser.execute({}, get, 0)
|
2006-04-03 02:27:59 +00:00
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
end
|
2006-01-28 19:03:53 +00:00
|
|
|
end
|
|
|
|
|