Alexander Larsson db3a785241 Add test coverage for --persist ...

This adds three "positive" tests: the common case --persist=.persist, the
deprecated spelling --persist=/.persist, and the less common special case
--persist=. as used by Steam.

It also adds "negative" tests for CVE-2024-42472: if the --persist
directory is a symbolic link or contains path segment "..", we want that
to be rejected.

Reproduces: CVE-2024-42472, GHSA-7hgv-f2j8-xw87
[smcv: Add "positive" tests]
[smcv: Exercise --persist=..]
[smcv: Assert that --persist with a symlink produces expected message]
Co-authored-by: Simon McVittie <smcv@collabora.com>
Signed-off-by: Simon McVittie <smcv@collabora.com>

2024-08-14 13:43:54 +01:00

..

test-keyring

Add make-test-bundles.sh

2016-02-25 15:27:37 +01:00

test-keyring2

tests: Add a second gpg keyring

2017-05-10 11:54:27 +02:00

can-use-fuse.c

Add a vim modeline and .editorconfig

2022-08-22 19:48:10 -07:00

can-use-fuse.h

tests: Disable revokefs if FUSE doesn't work

2021-02-09 09:33:57 +01:00

expand-test-matrix.sh

tests/update-test-matrix: Move into a standalone script

2022-05-03 13:54:23 +02:00

flatpak.supp

tests: Add valgrind suppression for ostreedev/ostree#2592

2022-08-16 13:27:04 +02:00

glib.supp

tests: Add new glib suppression

2019-12-17 14:55:13 +01:00

hold-lock.c

Add a vim modeline and .editorconfig

2022-08-22 19:48:10 -07:00

http-utils-test-server.py

tests: Use regular HTTPServer, not ThreadingHTTPServer

2019-10-09 14:25:44 +02:00

httpcache.c

http utils: Make a generic FlatpakHttpSession instead of SoupSession

2022-06-16 13:49:45 +02:00

libpreload.c

Add a vim modeline and .editorconfig

2022-08-22 19:48:10 -07:00

libtest.sh

tests: Skip test-history.sh without libsystemd

2022-06-24 15:11:41 -07:00

list-unused.c

transaction: inject eol status to flatpak_dir_list_unused_refs()

2020-10-08 09:14:51 +02:00

make-multi-collection-id-repo.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

make-runtime-repos

tests: Factor out generation of test runtime into a script

2022-05-03 13:54:23 +02:00

make-test-app.sh

tests: Check appdata name parsing via flatpak info

2024-03-12 08:32:30 -05:00

make-test-runtime.sh

tests: Check if program exists before using it

2023-11-14 21:31:34 +00:00

Makefile-test-matrix.am.inc

tests/update-test-matrix: Move into a standalone script

2022-05-03 13:54:23 +02:00

Makefile.am.inc

Move all use of soup APIs into flatpak-utils-http

2022-06-16 13:49:45 +02:00

mock-flatpak.c

Add a vim modeline and .editorconfig

2022-08-22 19:48:10 -07:00

oci-registry-client.py

tests: Convert all tests to python3

2019-10-07 11:38:24 +02:00

oci-registry-server.py

Tests: Support HEAD requests in oci-registry-server

2020-05-04 16:32:22 +02:00

org.flatpak.Authenticator.test.service.in

tests: Add a test authenticator

2019-11-26 16:37:01 +01:00

org.freedesktop.impl.portal.desktop.test.service.in

tests: Add simple testing portal backend and wire it up to the tests

2019-10-02 14:57:11 +02:00

org.test.Hello.png

Add appdata to test apps

2016-02-25 19:03:09 +01:00

session.conf.in

Add some missing files from the tests

2016-05-02 10:46:51 +02:00

test-auth.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-authenticator.c

daemons: Treat g_info() as equivalent to g_debug()

2023-01-30 11:51:00 +00:00

test-basic.sh

test-basic: Don't fail if head -2 exits before flatpak does

2021-04-12 11:07:10 +02:00

test-build-update-repo.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-bundle.sh

tests: Skip more tests when FUSE isn't available

2024-04-24 18:20:07 +01:00

test-completion.sh

run: Add option to share /dev/shm between instances of an app-ID

2021-04-16 08:57:20 +02:00

test-config.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-context.c

tests: Fix a double-free when exercising argument parsing

2024-04-24 18:20:07 +01:00

test-default-remotes.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-exports.c

tests: Call g_test_init() before isolated_test_dir_global_setup()

2023-11-14 21:26:46 +00:00

test-extensions.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-history.sh

tests: Skip test-history.sh without libsystemd

2022-06-24 15:11:41 -07:00

test-http-utils.sh

flatpak-http: Restructure the soup http implementation

2022-06-16 13:49:45 +02:00

test-info.sh

tests: Check appdata name parsing via flatpak info

2024-03-12 08:32:30 -05:00

test-instance.c

tests: Call g_test_init() before isolated_test_dir_global_setup()

2023-11-14 21:26:46 +00:00

test-metadata-validation.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-oci-registry.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-oci.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-override.sh

test-override: Exercise --nofilesystem=host:reset

2022-01-18 15:30:12 +00:00

test-portal-impl.c

tests: Use g_assert_true() not g_assert()

2020-08-17 09:21:30 +02:00

test-portal.c

Add a vim modeline and .editorconfig

2022-08-22 19:48:10 -07:00

test-prune.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-repair.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-repo.sh

tests: Add a test for a leftover eol-rebase symlink

2024-04-24 18:20:07 +01:00

test-run.sh

Add test coverage for --persist

2024-08-14 13:43:54 +01:00

test-seccomp.sh

run: Prevent TIOCLINUX ioctl, the same as TIOCSTI

2023-03-16 09:55:13 +00:00

test-sideload.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-subset.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-summaries.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-unused.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-update-portal.c

test-update-portal: Fix warn_unused_result warning

2021-10-27 10:58:38 +01:00

test-update-portal.sh

tests: Skip more tests when FUSE isn't available

2024-04-24 18:20:07 +01:00

test-update-remote-configuration.sh

tests: Avoid printing arbitrary text to stdout

2022-05-03 13:54:23 +02:00

test-webserver.sh

tests: Redo httpd server setup

2019-10-09 14:25:44 +02:00

test-wrapper.sh

tests: Test stuff with the old (non-indexed) summary format too

2020-10-29 15:30:35 +01:00

test.filter

tests: Add tests for client-side filtering

2019-05-06 13:58:58 +00:00

test.portal.in

tests: Add simple testing portal backend and wire it up to the tests

2019-10-02 14:57:11 +02:00

testcommon.c

Reject paths given to --filesystem/--persist with special characters

2023-03-16 09:55:13 +00:00

testlib.c

Add a vim modeline and .editorconfig

2022-08-22 19:48:10 -07:00

testlib.h

tests: Redirect stdout to stderr for flatpak_installation_launch

2022-05-03 13:54:23 +02:00

testlibrary.c

testlibrary: Initialize autofree variable to silence a compiler warning

2023-11-14 21:27:31 +00:00

try-syscall.c

run: Prevent TIOCLINUX ioctl, the same as TIOCSTI

2023-03-16 09:55:13 +00:00

update-test-matrix

tests/update-test-matrix: Move into a standalone script

2022-05-03 13:54:23 +02:00

web-server.py

tests: web-server: fix an issue with the web server cache

2021-03-11 13:31:17 +01:00