Files
flatpak/tests/test-context.c
Sebastian Wick c38e481fb4 context: Handle x11-fallback by converting to a conditional
This internally converts `x11-fallback` to `if:x11:!has-wayland` at
the earliest place possible, and converts back when serializing to a
file.
2025-10-13 18:31:33 +00:00

1048 lines
45 KiB
C

/* vi:set et sw=2 sts=2 cin cino=t0,f0,(0,{s,>2s,n-s,^-s,e-s:
* Copyright © 2021 Collabora Ltd.
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
*/
#include "config.h"
#include <stdarg.h>
#include <glib.h>
#include "flatpak.h"
#include "flatpak-context-private.h"
#include "flatpak-metadata-private.h"
#include "flatpak-utils-private.h"
#include "tests/testlib.h"
/* g_str_has_prefix as a GEqualFunc */
static gboolean
str_has_prefix (gconstpointer candidate,
gconstpointer pattern)
{
return g_str_has_prefix (candidate, pattern);
}
static void
test_context_env (void)
{
g_autoptr(FlatpakContext) context = flatpak_context_new ();
g_autoptr(GError) error = NULL;
gboolean ok;
const char env[] = "ONE=one\0TWO=two\0THREE=three\0EMPTY=\0X=x";
ok = flatpak_context_parse_env_block (context, env, sizeof (env), &error);
g_assert_no_error (error);
g_assert_true (ok);
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "ONE"), ==, "one");
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "EMPTY"), ==, "");
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "nope"), ==, NULL);
ok = flatpak_context_parse_env_block (context,
"FOO=barnstorming past the end",
strlen ("FOO=bar"),
&error);
g_assert_no_error (error);
g_assert_true (ok);
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "FOO"), ==, "bar");
ok = flatpak_context_parse_env_block (context,
"BAD=barnstorming past the end",
strlen ("BA"),
&error);
g_assert_nonnull (error);
g_test_message ("Got error as expected: %s #%d: %s",
g_quark_to_string (error->domain), error->code,
error->message);
g_assert_false (ok);
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "BA"), ==, NULL);
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "BAD"), ==, NULL);
g_clear_error (&error);
ok = flatpak_context_parse_env_block (context, "=x", strlen ("=x"), &error);
g_assert_nonnull (error);
g_test_message ("Got error as expected: %s #%d: %s",
g_quark_to_string (error->domain), error->code,
error->message);
g_assert_false (ok);
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, ""), ==, NULL);
g_clear_error (&error);
ok = flatpak_context_parse_env_block (context, "\0", 1, &error);
g_assert_nonnull (error);
g_test_message ("Got error as expected: %s #%d: %s",
g_quark_to_string (error->domain), error->code,
error->message);
g_assert_false (ok);
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, ""), ==, NULL);
g_clear_error (&error);
ok = flatpak_context_parse_env_block (context, "", 0, &error);
g_assert_no_error (error);
g_assert_true (ok);
}
static void
test_context_env_fd (void)
{
g_autoptr(FlatpakContext) context = flatpak_context_new ();
g_autoptr(GError) error = NULL;
gboolean ok;
const char env[] = "ONE=one\0TWO=two\0THREE=three\0EMPTY=\0X=x";
glnx_autofd int fd = -1;
g_autofree char *path = NULL;
int bad_fd;
path = g_strdup_printf ("/tmp/flatpak-test.XXXXXX");
fd = g_mkstemp (path);
g_assert_no_errno (glnx_loop_write (fd, env, sizeof (env)));
g_assert_no_errno (lseek (fd, 0, SEEK_SET));
ok = flatpak_context_parse_env_fd (context, fd, &error);
g_assert_no_error (error);
g_assert_true (ok);
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "ONE"), ==, "one");
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "EMPTY"), ==, "");
g_assert_cmpstr (g_hash_table_lookup (context->env_vars, "nope"), ==, NULL);
bad_fd = fd;
glnx_close_fd (&fd);
ok = flatpak_context_parse_env_fd (context, bad_fd, &error);
g_assert_nonnull (error);
g_test_message ("Got error as expected: %s #%d: %s",
g_quark_to_string (error->domain), error->code,
error->message);
g_assert_false (ok);
g_clear_error (&error);
}
static void context_parse_args (FlatpakContext *context,
GError **error,
...) G_GNUC_NULL_TERMINATED;
static void
context_parse_args (FlatpakContext *context,
GError **error,
...)
{
g_autoptr(GOptionContext) oc = NULL;
g_autoptr(GOptionGroup) group = NULL;
g_autoptr(GPtrArray) args = g_ptr_array_new_with_free_func (g_free);
g_auto(GStrv) argv = NULL;
const char *arg;
va_list ap;
g_ptr_array_add (args, g_strdup ("argv[0]"));
va_start (ap, error);
while ((arg = va_arg (ap, const char *)) != NULL)
g_ptr_array_add (args, g_strdup (arg));
va_end (ap);
g_ptr_array_add (args, NULL);
argv = (GStrv) g_ptr_array_free (g_steal_pointer (&args), FALSE);
oc = g_option_context_new ("");
group = flatpak_context_get_options (context);
g_option_context_add_group (oc, g_steal_pointer (&group));
g_option_context_parse_strv (oc, &argv, error);
}
static void
test_context_merge_fs (void)
{
/*
* We want to arrive at the same result regardless of whether we:
* - start from lowest precedence, and successively merge higher
* precedences into it, discarding them when done;
* - successively merge highest precedence into second-highest, and
* then discard highest
*/
enum { LOWEST_FIRST, HIGHEST_FIRST, INVALID } merge_order;
for (merge_order = LOWEST_FIRST; merge_order < INVALID; merge_order++)
{
g_autoptr(FlatpakContext) lowest = flatpak_context_new ();
g_autoptr(FlatpakContext) middle = flatpak_context_new ();
g_autoptr(FlatpakContext) highest = flatpak_context_new ();
g_autoptr(GError) local_error = NULL;
gpointer value;
context_parse_args (lowest,
&local_error,
"--filesystem=/one",
NULL);
g_assert_no_error (local_error);
context_parse_args (middle,
&local_error,
"--nofilesystem=host:reset",
"--filesystem=/two",
NULL);
g_assert_no_error (local_error);
context_parse_args (highest,
&local_error,
"--nofilesystem=host",
"--filesystem=/three",
NULL);
g_assert_no_error (local_error);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "host", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "host-reset", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/one", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/two", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/three", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (middle->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_true (g_hash_table_lookup_extended (middle->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (middle->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (middle->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (middle->filesystems, "/three", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (highest->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (highest->filesystems, "host-reset", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (highest->filesystems, "/one", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (highest->filesystems, "/two", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (highest->filesystems, "/three", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
if (merge_order == LOWEST_FIRST)
{
flatpak_context_merge (lowest, middle);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/three", NULL, NULL));
flatpak_context_merge (lowest, highest);
}
else
{
flatpak_context_merge (middle, highest);
g_assert_true (g_hash_table_lookup_extended (middle->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_true (g_hash_table_lookup_extended (middle->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (middle->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (middle->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (middle->filesystems, "/three", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
flatpak_context_merge (lowest, middle);
}
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/three", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
}
for (merge_order = LOWEST_FIRST; merge_order < INVALID; merge_order++)
{
g_autoptr(FlatpakContext) lowest = flatpak_context_new ();
g_autoptr(FlatpakContext) mid_low = flatpak_context_new ();
g_autoptr(FlatpakContext) mid_high = flatpak_context_new ();
g_autoptr(FlatpakContext) highest = flatpak_context_new ();
g_autoptr(GError) local_error = NULL;
g_autoptr(GKeyFile) metakey = g_key_file_new ();
g_autoptr(GPtrArray) args = g_ptr_array_new_with_free_func (g_free);
g_autofree char *filesystems = NULL;
gpointer value;
context_parse_args (lowest,
&local_error,
"--filesystem=/one",
NULL);
g_assert_no_error (local_error);
context_parse_args (mid_low,
&local_error,
"--nofilesystem=host:reset",
"--filesystem=/two",
NULL);
g_assert_no_error (local_error);
context_parse_args (mid_high,
&local_error,
"--filesystem=host",
"--filesystem=/three",
NULL);
g_assert_no_error (local_error);
context_parse_args (highest,
&local_error,
"--nofilesystem=host",
"--filesystem=/four",
NULL);
g_assert_no_error (local_error);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "host", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "host-reset", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/one", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/two", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/three", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/four", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (mid_low->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_true (g_hash_table_lookup_extended (mid_low->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (mid_low->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (mid_low->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (mid_low->filesystems, "/three", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (mid_low->filesystems, "/four", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (mid_high->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (mid_high->filesystems, "host-reset", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (mid_high->filesystems, "/one", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (mid_high->filesystems, "/two", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (mid_high->filesystems, "/three", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (mid_high->filesystems, "/four", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (highest->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (mid_high->filesystems, "host-reset", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (highest->filesystems, "/one", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (highest->filesystems, "/two", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (highest->filesystems, "/three", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (highest->filesystems, "/four", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
if (merge_order == LOWEST_FIRST)
{
flatpak_context_merge (lowest, mid_low);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/three", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/four", NULL, NULL));
flatpak_context_merge (lowest, mid_high);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/three", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/four", NULL, NULL));
flatpak_context_merge (lowest, highest);
}
else
{
flatpak_context_merge (mid_high, highest);
g_assert_true (g_hash_table_lookup_extended (mid_high->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (mid_high->filesystems, "host-reset", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (mid_high->filesystems, "/one", NULL, NULL));
g_assert_false (g_hash_table_lookup_extended (mid_high->filesystems, "/two", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (mid_high->filesystems, "/three", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (mid_high->filesystems, "/four", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
flatpak_context_merge (mid_low, mid_high);
g_assert_true (g_hash_table_lookup_extended (mid_low->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_true (g_hash_table_lookup_extended (mid_low->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (mid_low->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (mid_low->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (mid_low->filesystems, "/three", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (mid_low->filesystems, "/four", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
flatpak_context_merge (lowest, mid_low);
}
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "host-reset", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_NONE);
g_assert_false (g_hash_table_lookup_extended (lowest->filesystems, "/one", NULL, NULL));
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/two", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/three", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
g_assert_true (g_hash_table_lookup_extended (lowest->filesystems, "/four", NULL, &value));
g_assert_cmpint (GPOINTER_TO_INT (value), ==, FLATPAK_FILESYSTEM_MODE_READ_WRITE);
flatpak_context_save_metadata (lowest, FALSE, metakey);
filesystems = g_key_file_get_value (metakey,
FLATPAK_METADATA_GROUP_CONTEXT,
FLATPAK_METADATA_KEY_FILESYSTEMS,
&local_error);
g_assert_no_error (local_error);
g_test_message ("%s=%s", FLATPAK_METADATA_KEY_FILESYSTEMS, filesystems);
/* !host:reset is serialized first */
g_assert_true (g_str_has_prefix (filesystems, "!host:reset;"));
/* The rest are serialized in arbitrary order */
g_assert_nonnull (strstr (filesystems, ";!host;"));
g_assert_null (strstr (filesystems, "/one"));
g_assert_nonnull (strstr (filesystems, ";/two;"));
g_assert_nonnull (strstr (filesystems, ";/three;"));
g_assert_nonnull (strstr (filesystems, ";/four;"));
flatpak_context_to_args (lowest, args);
/* !host:reset is serialized first */
g_assert_cmpuint (args->len, >, 0);
g_assert_cmpstr (g_ptr_array_index (args, 0), ==,
"--nofilesystem=host:reset");
/* The rest are serialized in arbitrary order */
g_assert_true (g_ptr_array_find_with_equal_func (args, "--nofilesystem=host", g_str_equal, NULL));
g_assert_false (g_ptr_array_find_with_equal_func (args, "--filesystem=/one", str_has_prefix, NULL));
g_assert_false (g_ptr_array_find_with_equal_func (args, "--nofilesystem=/one", str_has_prefix, NULL));
g_assert_true (g_ptr_array_find_with_equal_func (args, "--filesystem=/two", g_str_equal, NULL));
g_assert_true (g_ptr_array_find_with_equal_func (args, "--filesystem=/three", g_str_equal, NULL));
g_assert_true (g_ptr_array_find_with_equal_func (args, "--filesystem=/four", g_str_equal, NULL));
}
}
const char *invalid_path_args[] = {
"--filesystem=/\033[J:ro",
"--filesystem=/\033[J",
"--persist=\033[J",
};
/* CVE-2023-28101 */
static void
test_validate_path_args (void)
{
gsize idx;
for (idx = 0; idx < G_N_ELEMENTS (invalid_path_args); idx++)
{
g_autoptr(FlatpakContext) context = flatpak_context_new ();
g_autoptr(GError) local_error = NULL;
const char *path = invalid_path_args[idx];
context_parse_args (context, &local_error, path, NULL);
g_assert_error (local_error, G_IO_ERROR, G_IO_ERROR_INVALID_DATA);
g_assert (strstr (local_error->message, "Non-graphical character"));
}
}
typedef struct {
const char *key;
const char *value;
} PathValidityData;
PathValidityData invalid_path_meta[] = {
{FLATPAK_METADATA_KEY_FILESYSTEMS, "\033[J"},
{FLATPAK_METADATA_KEY_PERSISTENT, "\033[J"},
};
/* CVE-2023-28101 */
static void
test_validate_path_meta (void)
{
gsize idx;
for (idx = 0; idx < G_N_ELEMENTS (invalid_path_meta); idx++)
{
g_autoptr(FlatpakContext) context = flatpak_context_new ();
g_autoptr(GKeyFile) metakey = g_key_file_new ();
g_autoptr(GError) local_error = NULL;
PathValidityData *data = &invalid_path_meta[idx];
gboolean ret = FALSE;
g_key_file_set_string_list (metakey, FLATPAK_METADATA_GROUP_CONTEXT,
data->key, &data->value, 1);
ret = flatpak_context_load_metadata (context, metakey, &local_error);
g_assert_false (ret);
g_assert_error (local_error, G_IO_ERROR, G_IO_ERROR_INVALID_DATA);
g_assert (strstr (local_error->message, "Non-graphical character"));
}
}
static void
test_usb_list (void)
{
const char *gtest_srcdir = NULL;
g_autofree char *test_file_path = NULL;
g_autofree char *content = NULL;
g_autofree char *list = NULL;
gboolean ret = FALSE;
g_autoptr(GError) error = NULL;
g_autoptr(GHashTable) enumerable = g_hash_table_new_full (g_str_hash, g_str_equal,
g_free, (GDestroyNotify) flatpak_usb_query_free);
g_autoptr(GHashTable) hidden = g_hash_table_new_full (g_str_hash, g_str_equal,
g_free, (GDestroyNotify) flatpak_usb_query_free);
gtest_srcdir = g_getenv ("G_TEST_SRCDIR");
g_assert (gtest_srcdir);
test_file_path = g_build_filename (gtest_srcdir, "gphoto2-list", NULL);
ret = g_file_get_contents (test_file_path, &content, NULL, &error);
g_assert (ret);
ret = flatpak_usb_parse_usb_list (content, enumerable, hidden, &error);
g_assert (ret);
g_assert_no_error (error);
g_assert_cmpint (g_hash_table_size (hidden), ==, 4);
g_assert_cmpint (g_hash_table_size (enumerable), ==, 2344);
list = flatpak_context_devices_to_usb_list (hidden, TRUE);
g_assert_cmpstr (list, ==, "!vnd:0502+dev:33c3;!vnd:4102+dev:1213;!vnd:0502+dev:365e;!vnd:0502+dev:387a;");
g_hash_table_remove_all (enumerable);
g_hash_table_remove_all (hidden);
ret = flatpak_usb_parse_usb_list (list, enumerable, hidden, &error);
g_assert_cmpint (g_hash_table_size (hidden), ==, 4);
g_assert_cmpint (g_hash_table_size (enumerable), ==, 0);
}
static void
test_usb_rules_all (void)
{
g_autoptr(FlatpakUsbRule) usb_rule = NULL;
g_autoptr(GError) local_error = NULL;
gboolean ret = FALSE;
/* Valid USB 'all' rule */
ret = flatpak_usb_parse_usb_rule ("all", &usb_rule, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_ALL);
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_rule_print (usb_rule, string);
g_assert_cmpstr (string->str, ==, "all");
}
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
/* Invalid USB 'all' rule */
ret = flatpak_usb_parse_usb_rule ("all:09", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_error (&local_error);
}
static void
test_usb_rules_cls (void)
{
g_autoptr(FlatpakUsbRule) usb_rule = NULL;
g_autoptr(GError) local_error = NULL;
gboolean ret = FALSE;
/* Valid USB 'cls' rules */
ret = flatpak_usb_parse_usb_rule ("cls:09:03", &usb_rule, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_CLASS);
g_assert_cmpint (usb_rule->d.device_class.type, ==, FLATPAK_USB_RULE_CLASS_TYPE_CLASS_SUBCLASS);
g_assert_cmpuint (usb_rule->d.device_class.class, ==, 0x09);
g_assert_cmpuint (usb_rule->d.device_class.subclass, ==, 0x03);
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_rule_print (usb_rule, string);
g_assert_cmpstr (string->str, ==, "cls:09:03");
}
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
ret = flatpak_usb_parse_usb_rule ("cls:09:*", &usb_rule, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_CLASS);
g_assert_cmpint (usb_rule->d.device_class.type, ==, FLATPAK_USB_RULE_CLASS_TYPE_CLASS_ONLY);
g_assert_cmpuint (usb_rule->d.device_class.class, ==, 0x09);
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_rule_print (usb_rule, string);
g_assert_cmpstr (string->str, ==, "cls:09:*");
}
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
ret = flatpak_usb_parse_usb_rule ("cls:00:00", &usb_rule, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
/* Invalid USB 'cls' rules */
ret = flatpak_usb_parse_usb_rule ("cls:0009:0003", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb_rule ("cls:*:03", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb_rule ("cls:*:*", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb_rule ("cls:*", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb_rule ("cls", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
}
static void
test_usb_rules_dev (void)
{
g_autoptr(FlatpakUsbRule) usb_rule = NULL;
g_autoptr(GError) local_error = NULL;
gboolean ret = FALSE;
/* Valid USB 'dev' rules */
ret = flatpak_usb_parse_usb_rule ("dev:0060", &usb_rule, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_DEVICE);
g_assert_cmpuint (usb_rule->d.product.id, ==, 0x0060);
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_rule_print (usb_rule, string);
g_assert_cmpstr (string->str, ==, "dev:0060");
}
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
ret = flatpak_usb_parse_usb_rule ("dev:0000", &usb_rule, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
/* Invalid USB 'dev' rules */
ret = flatpak_usb_parse_usb_rule ("dev:00", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb_rule ("dev:*", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb_rule ("dev", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
}
static void
test_usb_rules_vnd (void)
{
g_autoptr(FlatpakUsbRule) usb_rule = NULL;
g_autoptr(GError) local_error = NULL;
gboolean ret = FALSE;
/* Valid USB 'vnd' rules */
ret = flatpak_usb_parse_usb_rule ("vnd:0fd9", &usb_rule, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_VENDOR);
g_assert_cmpuint (usb_rule->d.vendor.id, ==, 0x0fd9);
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_rule_print (usb_rule, string);
g_assert_cmpstr (string->str, ==, "vnd:0fd9");
}
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
ret = flatpak_usb_parse_usb_rule ("vnd:0000", &usb_rule, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
/* Invalid USB 'vnd' rules */
ret = flatpak_usb_parse_usb_rule ("vnd:00", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb_rule ("vnd:*", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb_rule ("vnd", &usb_rule, &local_error);
g_assert_false (ret);
g_assert_null (usb_rule);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_rule, flatpak_usb_rule_free);
g_clear_error (&local_error);
}
static void
test_usb_query_simple (void)
{
g_autoptr(FlatpakUsbQuery) usb_query = NULL;
g_autoptr(GError) local_error = NULL;
gboolean ret = FALSE;
ret = flatpak_usb_parse_usb ("all", &usb_query, &local_error);
g_assert_true (ret);
g_assert_nonnull (usb_query);
g_assert_no_error (local_error);
g_assert_cmpuint (usb_query->rules->len, ==, 1);
{
FlatpakUsbRule *usb_rule = g_ptr_array_index (usb_query->rules, 0);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_ALL);
}
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_query_print (usb_query, string);
g_assert_cmpstr (string->str, ==, "all");
}
g_clear_pointer (&usb_query, flatpak_usb_query_free);
ret = flatpak_usb_parse_usb ("cls:03:*", &usb_query, &local_error);
g_assert_true (ret);
g_assert_nonnull (usb_query);
g_assert_no_error (local_error);
g_assert_cmpuint (usb_query->rules->len, ==, 1);
{
FlatpakUsbRule *usb_rule = g_ptr_array_index (usb_query->rules, 0);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_CLASS);
g_assert_cmpint (usb_rule->d.device_class.type, ==, FLATPAK_USB_RULE_CLASS_TYPE_CLASS_ONLY);
g_assert_cmpuint (usb_rule->d.device_class.class, ==, 0x03);
}
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_query_print (usb_query, string);
g_assert_cmpstr (string->str, ==, "cls:03:*");
}
g_clear_pointer (&usb_query, flatpak_usb_query_free);
ret = flatpak_usb_parse_usb ("vnd:0fd9", &usb_query, &local_error);
g_assert_true (ret);
g_assert_nonnull (usb_query);
g_assert_no_error (local_error);
g_assert_cmpuint (usb_query->rules->len, ==, 1);
{
FlatpakUsbRule *usb_rule = g_ptr_array_index (usb_query->rules, 0);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_VENDOR);
g_assert_cmpuint (usb_rule->d.vendor.id, ==, 0x0fd9);
}
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_query_print (usb_query, string);
g_assert_cmpstr (string->str, ==, "vnd:0fd9");
}
g_clear_pointer (&usb_query, flatpak_usb_query_free);
/* Invalid USB query */
ret = flatpak_usb_parse_usb ("all:0123", &usb_query, &local_error);
g_assert_false (ret);
g_assert_null (usb_query);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_query, flatpak_usb_query_free);
g_clear_error (&local_error);
/* Invalid empty USB query */
ret = flatpak_usb_parse_usb ("", &usb_query, &local_error);
g_assert_false (ret);
g_assert_null (usb_query);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_query, flatpak_usb_query_free);
g_clear_error (&local_error);
}
static void
test_usb_query_device_and_vendor (void)
{
g_autoptr(FlatpakUsbQuery) usb_query = NULL;
g_autoptr(GError) local_error = NULL;
gboolean ret = FALSE;
ret = flatpak_usb_parse_usb ("vnd:0fd9+dev:0063", &usb_query, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_assert_cmpuint (usb_query->rules->len, ==, 2);
{
FlatpakUsbRule *usb_rule;
usb_rule = g_ptr_array_index (usb_query->rules, 0);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_VENDOR);
g_assert_cmpuint (usb_rule->d.vendor.id, ==, 0x0fd9);
usb_rule = g_ptr_array_index (usb_query->rules, 1);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_DEVICE);
g_assert_cmpuint (usb_rule->d.product.id, ==, 0x063);
}
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_query_print (usb_query, string);
g_assert_cmpstr (string->str, ==, "vnd:0fd9+dev:0063");
}
g_clear_pointer (&usb_query, flatpak_usb_query_free);
ret = flatpak_usb_parse_usb ("vnd:0fd9+dev:0063+cls:09:*", &usb_query, &local_error);
g_assert_true (ret);
g_assert_no_error (local_error);
g_assert_cmpuint (usb_query->rules->len, ==, 3);
{
FlatpakUsbRule *usb_rule;
usb_rule = g_ptr_array_index (usb_query->rules, 0);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_VENDOR);
g_assert_cmpuint (usb_rule->d.vendor.id, ==, 0x0fd9);
usb_rule = g_ptr_array_index (usb_query->rules, 1);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_DEVICE);
g_assert_cmpuint (usb_rule->d.product.id, ==, 0x063);
usb_rule = g_ptr_array_index (usb_query->rules, 2);
g_assert_cmpint (usb_rule->rule_type, ==, FLATPAK_USB_RULE_TYPE_CLASS);
g_assert_cmpint (usb_rule->d.device_class.type, ==, FLATPAK_USB_RULE_CLASS_TYPE_CLASS_ONLY);
g_assert_cmpuint (usb_rule->d.device_class.class, ==, 0x09);
}
{
g_autoptr(GString) string = g_string_new (NULL);
flatpak_usb_query_print (usb_query, string);
g_assert_cmpstr (string->str, ==, "vnd:0fd9+dev:0063+cls:09:*");
}
g_clear_pointer (&usb_query, flatpak_usb_query_free);
/* Device without vendor is invalid */
ret = flatpak_usb_parse_usb ("dev:0063", &usb_query, &local_error);
g_assert_false (ret);
g_assert_null (usb_query);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_query, flatpak_usb_query_free);
g_clear_error (&local_error);
/* 'all' in the query invalidates further rules */
ret = flatpak_usb_parse_usb ("all+dev:0063", &usb_query, &local_error);
g_assert_false (ret);
g_assert_null (usb_query);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_query, flatpak_usb_query_free);
g_clear_error (&local_error);
ret = flatpak_usb_parse_usb ("all+vnd:0fd+dev:0063", &usb_query, &local_error);
g_assert_false (ret);
g_assert_null (usb_query);
g_assert_error (local_error, G_OPTION_ERROR, G_OPTION_ERROR_BAD_VALUE);
g_clear_pointer (&usb_query, flatpak_usb_query_free);
g_clear_error (&local_error);
}
static void
test_devices (void)
{
FlatpakContextDevices devices;
/* single layer behavior */
g_autoptr(GKeyFile) keyfile = g_key_file_new ();
g_key_file_set_value (keyfile,
FLATPAK_METADATA_GROUP_CONTEXT,
FLATPAK_METADATA_KEY_DEVICES,
"!dri;input;all;if:all:!true");
g_autoptr(FlatpakContext) context1 = flatpak_context_new ();
flatpak_context_load_metadata (context1, keyfile, NULL);
devices = flatpak_context_compute_allowed_devices (context1, NULL);
g_assert_cmpint (devices, ==, FLATPAK_CONTEXT_DEVICE_INPUT);
/* conditional in the next layer gives access to all */
g_autoptr(GKeyFile) keyfile2 = g_key_file_new ();
g_key_file_set_value (keyfile2,
FLATPAK_METADATA_GROUP_CONTEXT,
FLATPAK_METADATA_KEY_DEVICES,
"if:all:true");
g_autoptr(FlatpakContext) context2 = flatpak_context_new ();
flatpak_context_load_metadata (context2, keyfile2, NULL);
flatpak_context_merge (context1, context2);
devices = flatpak_context_compute_allowed_devices (context1, NULL);
g_assert_cmpint (devices, ==, FLATPAK_CONTEXT_DEVICE_INPUT | FLATPAK_CONTEXT_DEVICE_ALL);
/* removing permission in the next layer should result in no permission */
g_autoptr(GKeyFile) keyfile3 = g_key_file_new ();
g_key_file_set_value (keyfile3,
FLATPAK_METADATA_GROUP_CONTEXT,
FLATPAK_METADATA_KEY_DEVICES,
"!all");
g_autoptr(FlatpakContext) context3 = flatpak_context_new ();
flatpak_context_load_metadata (context3, keyfile3, NULL);
flatpak_context_merge (context1, context3);
devices = flatpak_context_compute_allowed_devices (context1, NULL);
g_assert_cmpint (devices, ==, FLATPAK_CONTEXT_DEVICE_INPUT);
/* the previous conditional gets reset by specifying all or !all */
g_autoptr(GKeyFile) keyfile4 = g_key_file_new ();
g_key_file_set_value (keyfile4,
FLATPAK_METADATA_GROUP_CONTEXT,
FLATPAK_METADATA_KEY_DEVICES,
"all;if:all:false");
g_autoptr(FlatpakContext) context4 = flatpak_context_new ();
flatpak_context_load_metadata (context4, keyfile4, NULL);
flatpak_context_merge (context1, context4);
devices = flatpak_context_compute_allowed_devices (context1, NULL);
g_assert_cmpint (devices, ==, FLATPAK_CONTEXT_DEVICE_INPUT);
}
static gboolean
test_sockets_evaluate_conditions_false (FlatpakContextConditions condition)
{
return FALSE;
}
static gboolean
test_sockets_evaluate_conditions_has_wayland (FlatpakContextConditions condition)
{
switch (condition)
{
case FLATPAK_CONTEXT_CONDITION_HAS_WAYLAND:
return TRUE;
default:
return FALSE;
}
}
static void
test_sockets (void)
{
FlatpakContextSockets sockets;
/* test fallback-x11 special handling */
g_autoptr(GKeyFile) keyfile1 = g_key_file_new ();
g_key_file_set_value (keyfile1,
FLATPAK_METADATA_GROUP_CONTEXT,
FLATPAK_METADATA_KEY_SOCKETS,
"fallback-x11;wayland");
g_autoptr(FlatpakContext) context1 = flatpak_context_new ();
flatpak_context_load_metadata (context1, keyfile1, NULL);
g_autoptr(GKeyFile) metakey = g_key_file_new ();
g_autofree char *sockets_str = NULL;
flatpak_context_save_metadata (context1, FALSE, metakey);
sockets_str = g_key_file_get_value (metakey,
FLATPAK_METADATA_GROUP_CONTEXT,
FLATPAK_METADATA_KEY_SOCKETS,
NULL);
g_assert_cmpstr (sockets_str, ==, "fallback-x11;wayland;");
sockets = flatpak_context_compute_allowed_sockets (
context1,
test_sockets_evaluate_conditions_false);
g_assert_cmpint (sockets, ==, FLATPAK_CONTEXT_SOCKET_X11 |
FLATPAK_CONTEXT_SOCKET_WAYLAND);
sockets = flatpak_context_compute_allowed_sockets (
context1,
test_sockets_evaluate_conditions_has_wayland);
g_assert_cmpint (sockets, ==, FLATPAK_CONTEXT_SOCKET_WAYLAND);
g_autoptr(GKeyFile) keyfile2 = g_key_file_new ();
g_key_file_set_value (keyfile2,
FLATPAK_METADATA_GROUP_CONTEXT,
FLATPAK_METADATA_KEY_SOCKETS,
"!x11");
g_autoptr(FlatpakContext) context2 = flatpak_context_new ();
flatpak_context_load_metadata (context2, keyfile2, NULL);
flatpak_context_merge (context1, context2);
sockets = flatpak_context_compute_allowed_sockets (
context1,
test_sockets_evaluate_conditions_false);
g_assert_cmpint (sockets, ==, FLATPAK_CONTEXT_SOCKET_WAYLAND);
sockets = flatpak_context_compute_allowed_sockets (
context1,
test_sockets_evaluate_conditions_has_wayland);
g_assert_cmpint (sockets, ==, FLATPAK_CONTEXT_SOCKET_WAYLAND);
}
int
main (int argc, char *argv[])
{
g_test_init (&argc, &argv, NULL);
g_test_add_func ("/context/env", test_context_env);
g_test_add_func ("/context/env-fd", test_context_env_fd);
g_test_add_func ("/context/merge-fs", test_context_merge_fs);
g_test_add_func ("/context/validate-path-args", test_validate_path_args);
g_test_add_func ("/context/validate-path-meta", test_validate_path_meta);
g_test_add_func ("/context/devices", test_devices);
g_test_add_func ("/context/sockets", test_sockets);
g_test_add_func ("/context/usb-list", test_usb_list);
g_test_add_func ("/context/usb-rules/all", test_usb_rules_all);
g_test_add_func ("/context/usb-rules/cls", test_usb_rules_cls);
g_test_add_func ("/context/usb-rules/dev", test_usb_rules_dev);
g_test_add_func ("/context/usb-rules/vnd", test_usb_rules_vnd);
g_test_add_func ("/context/usb-query/simple", test_usb_query_simple);
g_test_add_func ("/context/usb-query/device-and-vendor", test_usb_query_device_and_vendor);
return g_test_run ();
}