2011-09-23 23:46:33 -04:00
|
|
|
# Copyright (c) 2011 Evan Phoenix
|
2014-02-17 12:35:40 -05:00
|
|
|
# Copyright (c) 2005 Zed A. Shaw
|
2006-05-21 10:46:42 -04:00
|
|
|
|
2014-02-17 12:35:40 -05:00
|
|
|
require 'testhelp'
|
2006-01-28 14:03:53 -05:00
|
|
|
|
2011-09-22 22:24:43 -04:00
|
|
|
include Puma
|
2006-01-28 14:03:53 -05:00
|
|
|
|
2011-10-03 17:44:18 -04:00
|
|
|
class Http11ParserTest < Test::Unit::TestCase
|
2011-12-01 18:50:14 -05:00
|
|
|
|
2006-01-30 01:25:20 -05:00
|
|
|
def test_parse_simple
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
http = "GET / HTTP/1.1\r\n\r\n"
|
2006-05-14 19:42:19 -04:00
|
|
|
nread = parser.execute(req, http, 0)
|
2007-10-15 14:00:40 -04:00
|
|
|
|
2006-01-30 01:25:20 -05:00
|
|
|
assert nread == http.length, "Failed to parse the full HTTP request"
|
|
|
|
assert parser.finished?, "Parser didn't finish"
|
|
|
|
assert !parser.error?, "Parser had error"
|
|
|
|
assert nread == parser.nread, "Number read returned from execute does not match"
|
2007-10-15 14:00:40 -04:00
|
|
|
|
|
|
|
assert_equal '/', req['REQUEST_PATH']
|
|
|
|
assert_equal 'HTTP/1.1', req['HTTP_VERSION']
|
|
|
|
assert_equal '/', req['REQUEST_URI']
|
2013-11-10 02:48:24 -05:00
|
|
|
assert_equal 'GET', req['REQUEST_METHOD']
|
2007-10-15 14:00:40 -04:00
|
|
|
assert_nil req['FRAGMENT']
|
|
|
|
assert_nil req['QUERY_STRING']
|
2014-02-17 12:35:40 -05:00
|
|
|
|
2006-01-30 01:25:20 -05:00
|
|
|
parser.reset
|
|
|
|
assert parser.nread == 0, "Number read after reset should be 0"
|
|
|
|
end
|
2014-02-17 12:35:40 -05:00
|
|
|
|
2006-08-12 18:00:11 -04:00
|
|
|
def test_parse_dumbfuck_headers
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
should_be_good = "GET / HTTP/1.1\r\naaaaaaaaaaaaa:++++++++++\r\n\r\n"
|
|
|
|
nread = parser.execute(req, should_be_good, 0)
|
|
|
|
assert_equal should_be_good.length, nread
|
|
|
|
assert parser.finished?
|
|
|
|
assert !parser.error?
|
|
|
|
end
|
2014-02-17 12:35:40 -05:00
|
|
|
|
2006-01-30 01:25:20 -05:00
|
|
|
def test_parse_error
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
bad_http = "GET / SsUTF/1.1"
|
|
|
|
|
|
|
|
error = false
|
|
|
|
begin
|
2011-12-07 17:48:41 -05:00
|
|
|
parser.execute(req, bad_http, 0)
|
|
|
|
rescue
|
2006-01-30 01:25:20 -05:00
|
|
|
error = true
|
2006-01-28 14:03:53 -05:00
|
|
|
end
|
2006-01-30 01:25:20 -05:00
|
|
|
|
|
|
|
assert error, "failed to throw exception"
|
|
|
|
assert !parser.finished?, "Parser shouldn't be finished"
|
|
|
|
assert parser.error?, "Parser SHOULD have error"
|
|
|
|
end
|
2006-03-19 18:31:30 -05:00
|
|
|
|
2007-10-15 14:00:40 -04:00
|
|
|
def test_fragment_in_uri
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
get = "GET /forums/1/topics/2375?page=1#posts-17408 HTTP/1.1\r\n\r\n"
|
|
|
|
assert_nothing_raised do
|
|
|
|
parser.execute(req, get, 0)
|
|
|
|
end
|
|
|
|
assert parser.finished?
|
2007-10-18 16:45:16 -04:00
|
|
|
assert_equal '/forums/1/topics/2375?page=1', req['REQUEST_URI']
|
2007-10-15 14:00:40 -04:00
|
|
|
assert_equal 'posts-17408', req['FRAGMENT']
|
|
|
|
end
|
|
|
|
|
2006-04-02 22:27:59 -04:00
|
|
|
# lame random garbage maker
|
|
|
|
def rand_data(min, max, readable=true)
|
|
|
|
count = min + ((rand(max)+1) *10).to_i
|
|
|
|
res = count.to_s + "/"
|
2014-02-17 12:35:40 -05:00
|
|
|
|
2006-04-02 22:27:59 -04:00
|
|
|
if readable
|
2006-08-16 17:51:38 -04:00
|
|
|
res << Digest::SHA1.hexdigest(rand(count * 100).to_s) * (count / 40)
|
2006-04-02 22:27:59 -04:00
|
|
|
else
|
2006-08-16 17:51:38 -04:00
|
|
|
res << Digest::SHA1.digest(rand(count * 100).to_s) * (count / 20)
|
2006-04-02 22:27:59 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
return res
|
|
|
|
end
|
2013-11-10 02:48:24 -05:00
|
|
|
|
|
|
|
def test_max_uri_path_length
|
|
|
|
parser = HttpParser.new
|
|
|
|
req = {}
|
|
|
|
|
|
|
|
# Support URI path length to a max of 2048
|
|
|
|
path = "/" + rand_data(1000, 100)
|
|
|
|
http = "GET #{path} HTTP/1.1\r\n\r\n"
|
|
|
|
parser.execute(req, http, 0)
|
|
|
|
assert_equal path, req['REQUEST_PATH']
|
|
|
|
parser.reset
|
|
|
|
|
|
|
|
# Raise exception if URI path length > 2048
|
2015-06-10 16:13:28 -04:00
|
|
|
path = "/" + rand_data(3000, 100)
|
2013-11-10 02:48:24 -05:00
|
|
|
http = "GET #{path} HTTP/1.1\r\n\r\n"
|
|
|
|
assert_raises Puma::HttpParserError do
|
|
|
|
parser.execute(req, http, 0)
|
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
end
|
2006-04-02 22:27:59 -04:00
|
|
|
|
|
|
|
def test_horrible_queries
|
|
|
|
parser = HttpParser.new
|
|
|
|
|
|
|
|
# then that large header names are caught
|
2006-08-16 17:51:38 -04:00
|
|
|
10.times do |c|
|
2006-04-02 22:27:59 -04:00
|
|
|
get = "GET /#{rand_data(10,120)} HTTP/1.1\r\nX-#{rand_data(1024, 1024+(c*1024))}: Test\r\n\r\n"
|
2011-09-22 22:24:43 -04:00
|
|
|
assert_raises Puma::HttpParserError do
|
2006-05-14 19:42:19 -04:00
|
|
|
parser.execute({}, get, 0)
|
2006-04-02 22:27:59 -04:00
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
# then that large mangled field values are caught
|
2006-08-16 17:51:38 -04:00
|
|
|
10.times do |c|
|
2006-04-02 22:27:59 -04:00
|
|
|
get = "GET /#{rand_data(10,120)} HTTP/1.1\r\nX-Test: #{rand_data(1024, 1024+(c*1024), false)}\r\n\r\n"
|
2011-09-22 22:24:43 -04:00
|
|
|
assert_raises Puma::HttpParserError do
|
2006-05-14 19:42:19 -04:00
|
|
|
parser.execute({}, get, 0)
|
2006-04-02 22:27:59 -04:00
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
# then large headers are rejected too
|
|
|
|
get = "GET /#{rand_data(10,120)} HTTP/1.1\r\n"
|
|
|
|
get << "X-Test: test\r\n" * (80 * 1024)
|
2011-09-22 22:24:43 -04:00
|
|
|
assert_raises Puma::HttpParserError do
|
2006-05-14 19:42:19 -04:00
|
|
|
parser.execute({}, get, 0)
|
2006-04-02 22:27:59 -04:00
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
|
|
|
|
# finally just that random garbage gets blocked all the time
|
|
|
|
10.times do |c|
|
|
|
|
get = "GET #{rand_data(1024, 1024+(c*1024), false)} #{rand_data(1024, 1024+(c*1024), false)}\r\n\r\n"
|
2011-09-22 22:24:43 -04:00
|
|
|
assert_raises Puma::HttpParserError do
|
2006-05-14 19:42:19 -04:00
|
|
|
parser.execute({}, get, 0)
|
2006-04-02 22:27:59 -04:00
|
|
|
parser.reset
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
end
|
2006-01-28 14:03:53 -05:00
|
|
|
end
|