forked from bitcoinafterlife/bal-server
svatantrya
fbe61a5862
- Add multi-stage Dockerfile with tini, non-root user, healthcheck - Fix SQLite WAL mode race between bal-server and bal-pusher (busy_timeout + retry) - Fix tbl_stats missing UNIQUE index for ON CONFLICT clause - Replace unwrap() panics in bal-pusher with graceful error handling - Add docker/entrypoint.sh with BAL_PUSHER_NETWORK support - cargo fmt across all files
94 lines
2.7 KiB
Rust
94 lines
2.7 KiB
Rust
use bal_server::db::open_db;
|
|
use sqlite::State;
|
|
use std::fs;
|
|
use std::path::Path;
|
|
|
|
#[test]
|
|
fn test_open_db_blocks_traversal() {
|
|
let res = open_db("../etc/passwd");
|
|
assert!(res.is_err(), "Path with '..' should be rejected");
|
|
let err = match res {
|
|
Err(e) => e,
|
|
Ok(_) => panic!("Expected error for traversal path"),
|
|
};
|
|
assert!(
|
|
err.contains("'..'"),
|
|
"Error should mention directory traversal: {}",
|
|
err
|
|
);
|
|
}
|
|
|
|
#[test]
|
|
fn test_open_db_blocks_forbidden_absolute() {
|
|
for path in ["/etc/passwd", "/proc/self/mem", "/dev/null", "/usr/bin/ls"] {
|
|
let res = open_db(path);
|
|
assert!(res.is_err(), "Absolute path {} should be rejected", path);
|
|
let err = match res {
|
|
Err(e) => e,
|
|
Ok(_) => panic!("Expected error for forbidden path {}", path),
|
|
};
|
|
assert!(
|
|
err.contains("forbidden"),
|
|
"Error should mention forbidden prefix: {}",
|
|
err
|
|
);
|
|
}
|
|
}
|
|
|
|
#[test]
|
|
fn test_open_db_allows_relative() {
|
|
let test_path = "tmp_test_bal.db";
|
|
let _ = fs::remove_file(test_path);
|
|
let res = open_db(test_path);
|
|
assert!(res.is_ok(), "Valid relative path should be allowed");
|
|
let db = res.unwrap();
|
|
drop(db);
|
|
let _ = fs::remove_file(test_path);
|
|
}
|
|
|
|
#[test]
|
|
fn test_open_db_wal_pragmas_set() {
|
|
let test_path = "tmp_test_wal.db";
|
|
let _ = fs::remove_file(test_path);
|
|
let _ = fs::remove_file(format!("{}-shm", test_path));
|
|
let _ = fs::remove_file(format!("{}-wal", test_path));
|
|
|
|
let db = open_db(test_path).expect("Should open DB");
|
|
let mut stmt = db.prepare("PRAGMA journal_mode;").unwrap();
|
|
if let Ok(State::Row) = stmt.next() {
|
|
let mode: String = stmt.read(0).unwrap();
|
|
assert_eq!(mode, "wal", "SQLite journal mode should be WAL");
|
|
} else {
|
|
panic!("Could not read journal_mode pragma");
|
|
}
|
|
|
|
let _ = fs::remove_file(test_path);
|
|
let _ = fs::remove_file(format!("{}-shm", test_path));
|
|
let _ = fs::remove_file(format!("{}-wal", test_path));
|
|
}
|
|
|
|
#[test]
|
|
fn test_open_db_rejects_symlink() {
|
|
let real = "tmp_test_real.db";
|
|
let link = "tmp_test_link.db";
|
|
let _ = fs::remove_file(real);
|
|
let _ = fs::remove_file(link);
|
|
fs::File::create(real).unwrap();
|
|
fs::soft_link(real, link).unwrap();
|
|
|
|
let res = open_db(link);
|
|
assert!(res.is_err(), "Symlink DB path should be rejected");
|
|
let err = match res {
|
|
Err(e) => e,
|
|
Ok(_) => panic!("Expected error for symlink"),
|
|
};
|
|
assert!(
|
|
err.contains("symlink"),
|
|
"Error should mention symlink: {}",
|
|
err
|
|
);
|
|
|
|
let _ = fs::remove_file(real);
|
|
let _ = fs::remove_file(link);
|
|
}
|