/* Tests in the "miscellaneous" test case for the Expat test suite __ __ _ ___\ \/ /_ __ __ _| |_ / _ \\ /| '_ \ / _` | __| | __// \| |_) | (_| | |_ \___/_/\_\ .__/ \__,_|\__| |_| XML parser Copyright (c) 2001-2006 Fred L. Drake, Jr. Copyright (c) 2003 Greg Stein Copyright (c) 2005-2007 Steven Solie Copyright (c) 2005-2012 Karl Waclawek Copyright (c) 2016-2024 Sebastian Pipping Copyright (c) 2017-2022 Rhodri James Copyright (c) 2017 Joe Orton Copyright (c) 2017 José Gutiérrez de la Concha Copyright (c) 2018 Marco Maggi Copyright (c) 2019 David Loffredo Copyright (c) 2020 Tim Gates Copyright (c) 2021 Donghee Na Copyright (c) 2023 Sony Corporation / Snild Dolkow Licensed under the MIT license: Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */ #if defined(NDEBUG) # undef NDEBUG /* because test suite relies on assert(...) at the moment */ #endif #include #include #include "expat_config.h" #include "expat.h" #include "internal.h" #include "minicheck.h" #include "memcheck.h" #include "common.h" #include "ascii.h" /* for ASCII_xxx */ #include "handlers.h" #include "misc_tests.h" /* Test that a failure to allocate the parser structure fails gracefully */ START_TEST(test_misc_alloc_create_parser) { XML_Memory_Handling_Suite memsuite = {duff_allocator, realloc, free}; unsigned int i; const unsigned int max_alloc_count = 10; /* Something this simple shouldn't need more than 10 allocations */ for (i = 0; i < max_alloc_count; i++) { g_allocation_count = i; g_parser = XML_ParserCreate_MM(NULL, &memsuite, NULL); if (g_parser != NULL) break; } if (i == 0) fail("Parser unexpectedly ignored failing allocator"); else if (i == max_alloc_count) fail("Parser not created with max allocation count"); } END_TEST /* Test memory allocation failures for a parser with an encoding */ START_TEST(test_misc_alloc_create_parser_with_encoding) { XML_Memory_Handling_Suite memsuite = {duff_allocator, realloc, free}; unsigned int i; const unsigned int max_alloc_count = 10; /* Try several levels of allocation */ for (i = 0; i < max_alloc_count; i++) { g_allocation_count = i; g_parser = XML_ParserCreate_MM(XCS("us-ascii"), &memsuite, NULL); if (g_parser != NULL) break; } if (i == 0) fail("Parser ignored failing allocator"); else if (i == max_alloc_count) fail("Parser not created with max allocation count"); } END_TEST /* Test that freeing a NULL parser doesn't cause an explosion. * (Not actually tested anywhere else) */ START_TEST(test_misc_null_parser) { XML_ParserFree(NULL); } END_TEST #if defined(__has_feature) # if __has_feature(undefined_behavior_sanitizer) # define EXPAT_TESTS_UBSAN 1 # else # define EXPAT_TESTS_UBSAN 0 # endif #else # define EXPAT_TESTS_UBSAN 0 #endif /* Test that XML_ErrorString rejects out-of-range codes */ START_TEST(test_misc_error_string) { #if ! EXPAT_TESTS_UBSAN // because this would trigger UBSan union { enum XML_Error xml_error; int integer; } trickery; assert_true(sizeof(enum XML_Error) == sizeof(int)); // self-test trickery.integer = -1; if (XML_ErrorString(trickery.xml_error) != NULL) fail("Negative error code not rejected"); trickery.integer = 100; if (XML_ErrorString(trickery.xml_error) != NULL) fail("Large error code not rejected"); #endif } END_TEST /* Test the version information is consistent */ /* Since we are working in XML_LChars (potentially 16-bits), we * can't use the standard C library functions for character * manipulation and have to roll our own. */ static int parse_version(const XML_LChar *version_text, XML_Expat_Version *version_struct) { if (! version_text) return XML_FALSE; while (*version_text != 0x00) { if (*version_text >= ASCII_0 && *version_text <= ASCII_9) break; version_text++; } if (*version_text == 0x00) return XML_FALSE; /* version_struct->major = strtoul(version_text, 10, &version_text) */ version_struct->major = 0; while (*version_text >= ASCII_0 && *version_text <= ASCII_9) { version_struct->major = 10 * version_struct->major + (*version_text++ - ASCII_0); } if (*version_text++ != ASCII_PERIOD) return XML_FALSE; /* Now for the minor version number */ version_struct->minor = 0; while (*version_text >= ASCII_0 && *version_text <= ASCII_9) { version_struct->minor = 10 * version_struct->minor + (*version_text++ - ASCII_0); } if (*version_text++ != ASCII_PERIOD) return XML_FALSE; /* Finally the micro version number */ version_struct->micro = 0; while (*version_text >= ASCII_0 && *version_text <= ASCII_9) { version_struct->micro = 10 * version_struct->micro + (*version_text++ - ASCII_0); } if (*version_text != 0x00) return XML_FALSE; return XML_TRUE; } static int versions_equal(const XML_Expat_Version *first, const XML_Expat_Version *second) { return (first->major == second->major && first->minor == second->minor && first->micro == second->micro); } START_TEST(test_misc_version) { XML_Expat_Version read_version = XML_ExpatVersionInfo(); /* Silence compiler warning with the following assignment */ XML_Expat_Version parsed_version = {0, 0, 0}; const XML_LChar *version_text = XML_ExpatVersion(); if (version_text == NULL) fail("Could not obtain version text"); assert(version_text != NULL); if (! parse_version(version_text, &parsed_version)) fail("Unable to parse version text"); if (! versions_equal(&read_version, &parsed_version)) fail("Version mismatch"); if (xcstrcmp(version_text, XCS("expat_2.6.4"))) /* needs bump on releases */ fail("XML_*_VERSION in expat.h out of sync?\n"); } END_TEST /* Test feature information */ START_TEST(test_misc_features) { const XML_Feature *features = XML_GetFeatureList(); /* Prevent problems with double-freeing parsers */ g_parser = NULL; if (features == NULL) { fail("Failed to get feature information"); } else { /* Loop through the features checking what we can */ while (features->feature != XML_FEATURE_END) { switch (features->feature) { case XML_FEATURE_SIZEOF_XML_CHAR: if (features->value != sizeof(XML_Char)) fail("Incorrect size of XML_Char"); break; case XML_FEATURE_SIZEOF_XML_LCHAR: if (features->value != sizeof(XML_LChar)) fail("Incorrect size of XML_LChar"); break; default: break; } features++; } } } END_TEST /* Regression test for GitHub Issue #17: memory leak parsing attribute * values with mixed bound and unbound namespaces. */ START_TEST(test_misc_attribute_leak) { const char *text = ""; XML_Memory_Handling_Suite memsuite = {tracking_malloc, tracking_realloc, tracking_free}; g_parser = XML_ParserCreate_MM(XCS("UTF-8"), &memsuite, XCS("\n")); expect_failure(text, XML_ERROR_UNBOUND_PREFIX, "Unbound prefixes not found"); XML_ParserFree(g_parser); /* Prevent the teardown trying to double free */ g_parser = NULL; if (! tracking_report()) fail("Memory leak found"); } END_TEST /* Test parser created for UTF-16LE is successful */ START_TEST(test_misc_utf16le) { const char text[] = /* Hi */ "<\0?\0x\0m\0l\0 \0" "v\0e\0r\0s\0i\0o\0n\0=\0'\0\x31\0.\0\x30\0'\0?\0>\0" "<\0q\0>\0H\0i\0<\0/\0q\0>\0"; const XML_Char *expected = XCS("Hi"); CharData storage; g_parser = XML_ParserCreate(XCS("UTF-16LE")); if (g_parser == NULL) fail("Parser not created"); CharData_Init(&storage); XML_SetUserData(g_parser, &storage); XML_SetCharacterDataHandler(g_parser, accumulate_characters); if (_XML_Parse_SINGLE_BYTES(g_parser, text, (int)sizeof(text) - 1, XML_TRUE) == XML_STATUS_ERROR) xml_failure(g_parser); CharData_CheckXMLChars(&storage, expected); } END_TEST START_TEST(test_misc_stop_during_end_handler_issue_240_1) { XML_Parser parser; DataIssue240 *mydata; enum XML_Status result; const char *const doc1 = ""; parser = XML_ParserCreate(NULL); XML_SetElementHandler(parser, start_element_issue_240, end_element_issue_240); mydata = (DataIssue240 *)malloc(sizeof(DataIssue240)); mydata->parser = parser; mydata->deep = 0; XML_SetUserData(parser, mydata); result = _XML_Parse_SINGLE_BYTES(parser, doc1, (int)strlen(doc1), 1); XML_ParserFree(parser); free(mydata); if (result != XML_STATUS_ERROR) fail("Stopping the parser did not work as expected"); } END_TEST START_TEST(test_misc_stop_during_end_handler_issue_240_2) { XML_Parser parser; DataIssue240 *mydata; enum XML_Status result; const char *const doc2 = ""; parser = XML_ParserCreate(NULL); XML_SetElementHandler(parser, start_element_issue_240, end_element_issue_240); mydata = (DataIssue240 *)malloc(sizeof(DataIssue240)); mydata->parser = parser; mydata->deep = 0; XML_SetUserData(parser, mydata); result = _XML_Parse_SINGLE_BYTES(parser, doc2, (int)strlen(doc2), 1); XML_ParserFree(parser); free(mydata); if (result != XML_STATUS_ERROR) fail("Stopping the parser did not work as expected"); } END_TEST START_TEST(test_misc_deny_internal_entity_closing_doctype_issue_317) { const char *const inputOne = "'>\n" "\n" "%e;"; const char *const inputTwo = "'>\n" "\n" "%e2;"; const char *const inputThree = "\n" "\n" "%e;/>"; const char *const inputIssue317 = "\n" "Hell'>\n" "%foo;\n" "]>\n" "Hello, world"; const char *const inputs[] = {inputOne, inputTwo, inputThree, inputIssue317}; size_t inputIndex = 0; for (; inputIndex < sizeof(inputs) / sizeof(inputs[0]); inputIndex++) { set_subtest("%s", inputs[inputIndex]); XML_Parser parser; enum XML_Status parseResult; int setParamEntityResult; XML_Size lineNumber; XML_Size columnNumber; const char *const input = inputs[inputIndex]; parser = XML_ParserCreate(NULL); setParamEntityResult = XML_SetParamEntityParsing(parser, XML_PARAM_ENTITY_PARSING_ALWAYS); if (setParamEntityResult != 1) fail("Failed to set XML_PARAM_ENTITY_PARSING_ALWAYS."); parseResult = _XML_Parse_SINGLE_BYTES(parser, input, (int)strlen(input), 0); if (parseResult != XML_STATUS_ERROR) { parseResult = _XML_Parse_SINGLE_BYTES(parser, "", 0, 1); if (parseResult != XML_STATUS_ERROR) { fail("Parsing was expected to fail but succeeded."); } } if (XML_GetErrorCode(parser) != XML_ERROR_INVALID_TOKEN) fail("Error code does not match XML_ERROR_INVALID_TOKEN"); lineNumber = XML_GetCurrentLineNumber(parser); if (lineNumber != 4) fail("XML_GetCurrentLineNumber does not work as expected."); columnNumber = XML_GetCurrentColumnNumber(parser); if (columnNumber != 0) fail("XML_GetCurrentColumnNumber does not work as expected."); XML_ParserFree(parser); } } END_TEST START_TEST(test_misc_tag_mismatch_reset_leak) { #ifdef XML_NS const char *const text = ""; XML_Parser parser = XML_ParserCreateNS(NULL, XCS('\n')); if (_XML_Parse_SINGLE_BYTES(parser, text, (int)strlen(text), XML_TRUE) != XML_STATUS_ERROR) fail("Call to parse was expected to fail"); if (XML_GetErrorCode(parser) != XML_ERROR_TAG_MISMATCH) fail("Call to parse was expected to fail from a closing tag mismatch"); XML_ParserReset(parser, NULL); if (_XML_Parse_SINGLE_BYTES(parser, text, (int)strlen(text), XML_TRUE) != XML_STATUS_ERROR) fail("Call to parse was expected to fail"); if (XML_GetErrorCode(parser) != XML_ERROR_TAG_MISMATCH) fail("Call to parse was expected to fail from a closing tag mismatch"); XML_ParserFree(parser); #endif } END_TEST START_TEST(test_misc_create_external_entity_parser_with_null_context) { // With XML_DTD undefined, the only supported case of external entities // is pattern "". A NULL context // was causing a segfault through a null pointer dereference in function // setContext, previously. XML_Parser parser = XML_ParserCreate(NULL); XML_Parser ext_parser = XML_ExternalEntityParserCreate(parser, NULL, NULL); #ifdef XML_DTD assert_true(ext_parser != NULL); XML_ParserFree(ext_parser); #else assert_true(ext_parser == NULL); #endif /* XML_DTD */ XML_ParserFree(parser); } END_TEST START_TEST(test_misc_general_entities_support) { const char *const doc = "\n" "\n" "]>\n" "[&e1;][&e2;][&'><"]"; CharData storage; CharData_Init(&storage); XML_Parser parser = XML_ParserCreate(NULL); XML_SetUserData(parser, &storage); XML_SetStartElementHandler(parser, accumulate_start_element); XML_SetExternalEntityRefHandler(parser, external_entity_failer__if_not_xml_ge); XML_SetEntityDeclHandler(parser, accumulate_entity_decl); XML_SetCharacterDataHandler(parser, accumulate_characters); if (_XML_Parse_SINGLE_BYTES(parser, doc, (int)strlen(doc), XML_TRUE) != XML_STATUS_OK) { xml_failure(parser); } XML_ParserFree(parser); CharData_CheckXMLChars(&storage, /* clang-format off */ #if XML_GE == 1 XCS("e1=v1\n") XCS("e2=(null)\n") XCS("(r(a1=[v1]))\n") XCS("[v1][][&'><\"]") #else XCS("e1=&e1;\n") XCS("e2=(null)\n") XCS("(r(a1=[&e1;]))\n") XCS("[&e1;][&e2;][&'><\"]") #endif ); /* clang-format on */ } END_TEST static void XMLCALL resumable_stopping_character_handler(void *userData, const XML_Char *s, int len) { UNUSED_P(s); UNUSED_P(len); XML_Parser parser = (XML_Parser)userData; XML_StopParser(parser, XML_TRUE); } // NOTE: This test needs active LeakSanitizer to be of actual use START_TEST(test_misc_char_handler_stop_without_leak) { const char *const data = "]>&e2;"; XML_Parser parser = XML_ParserCreate(NULL); assert_true(parser != NULL); XML_SetUserData(parser, parser); XML_SetCharacterDataHandler(parser, resumable_stopping_character_handler); _XML_Parse_SINGLE_BYTES(parser, data, (int)strlen(data), XML_FALSE); XML_ParserFree(parser); } END_TEST START_TEST(test_misc_resumeparser_not_crashing) { XML_Parser parser = XML_ParserCreate(NULL); XML_GetBuffer(parser, 1); XML_StopParser(parser, /*resumable=*/XML_TRUE); XML_ResumeParser(parser); // could crash here, previously XML_ParserFree(parser); } END_TEST START_TEST(test_misc_stopparser_rejects_unstarted_parser) { const XML_Bool cases[] = {XML_TRUE, XML_FALSE}; for (size_t i = 0; i < sizeof(cases) / sizeof(cases[0]); i++) { const XML_Bool resumable = cases[i]; XML_Parser parser = XML_ParserCreate(NULL); assert_true(XML_GetErrorCode(parser) == XML_ERROR_NONE); assert_true(XML_StopParser(parser, resumable) == XML_STATUS_ERROR); assert_true(XML_GetErrorCode(parser) == XML_ERROR_NOT_STARTED); XML_ParserFree(parser); } } END_TEST void make_miscellaneous_test_case(Suite *s) { TCase *tc_misc = tcase_create("miscellaneous tests"); suite_add_tcase(s, tc_misc); tcase_add_checked_fixture(tc_misc, NULL, basic_teardown); tcase_add_test(tc_misc, test_misc_alloc_create_parser); tcase_add_test(tc_misc, test_misc_alloc_create_parser_with_encoding); tcase_add_test(tc_misc, test_misc_null_parser); tcase_add_test(tc_misc, test_misc_error_string); tcase_add_test(tc_misc, test_misc_version); tcase_add_test(tc_misc, test_misc_features); tcase_add_test(tc_misc, test_misc_attribute_leak); tcase_add_test(tc_misc, test_misc_utf16le); tcase_add_test(tc_misc, test_misc_stop_during_end_handler_issue_240_1); tcase_add_test(tc_misc, test_misc_stop_during_end_handler_issue_240_2); tcase_add_test__ifdef_xml_dtd( tc_misc, test_misc_deny_internal_entity_closing_doctype_issue_317); tcase_add_test(tc_misc, test_misc_tag_mismatch_reset_leak); tcase_add_test(tc_misc, test_misc_create_external_entity_parser_with_null_context); tcase_add_test(tc_misc, test_misc_general_entities_support); tcase_add_test(tc_misc, test_misc_char_handler_stop_without_leak); tcase_add_test(tc_misc, test_misc_resumeparser_not_crashing); tcase_add_test(tc_misc, test_misc_stopparser_rejects_unstarted_parser); }