4 my %Expect_File = (); # what we expect for $_
5 my %Expect_Name = (); # what we expect for $File::Find::name/fullname
6 my %Expect_Dir = (); # what we expect for $File::Find::dir
7 my $symlink_exists = eval { symlink("",""); 1 };
13 unshift @INC => '../lib';
15 for (keys %ENV) { # untaint ENV
16 ($ENV{$_}) = $ENV{$_} =~ /(.*)/;
21 if ( $symlink_exists ) { print "1..45\n"; }
22 else { print "1..27\n"; }
28 my $NonTaintedCwd = $^O eq 'MSWin32' || $^O eq 'cygwin';
32 find({wanted => sub { print "ok 1\n" if $_ eq 'commonsense.t'; },
33 untaint => 1, untaint_pattern => qr|^(.+)$|}, File::Spec->curdir);
35 finddepth({wanted => sub { print "ok 2\n" if $_ eq 'commonsense.t'; },
36 untaint => 1, untaint_pattern => qr|^(.+)$|},
40 my $FastFileTests_OK = 0;
43 if (-d dir_path('for_find')) {
44 chdir(dir_path('for_find'));
46 if (-d dir_path('fa')) {
47 unlink file_path('fa', 'fa_ord'),
48 file_path('fa', 'fsl'),
49 file_path('fa', 'faa', 'faa_ord'),
50 file_path('fa', 'fab', 'fab_ord'),
51 file_path('fa', 'fab', 'faba', 'faba_ord'),
52 file_path('fb', 'fb_ord'),
53 file_path('fb', 'fba', 'fba_ord');
54 rmdir dir_path('fa', 'faa');
55 rmdir dir_path('fa', 'fab', 'faba');
56 rmdir dir_path('fa', 'fab');
58 rmdir dir_path('fb', 'fba');
60 chdir File::Spec->updir;
61 rmdir dir_path('for_find');
71 if ($_[0]) { print "ok $case\n"; }
72 else { print "not ok $case\n"; }
78 if ($_[0]) { print "ok $case\n"; }
79 else { print "not ok $case\n"; exit 0; }
84 print "ok $case # skipped: ",$_[0],"\n";
88 CheckDie( open(my $T,'>',$_[0]) );
92 CheckDie( mkdir($_[0],$_[1]) );
96 print "# \$File::Find::dir => '$File::Find::dir'\n";
97 print "# \$_ => '$_'\n";
98 s#\.$## if ($^O eq 'VMS' && $_ ne '.');
99 Check( $Expect_File{$_} );
100 if ( $FastFileTests_OK ) {
101 delete $Expect_File{ $_}
102 unless ( $Expect_Dir{$_} && ! -d _ );
104 delete $Expect_File{$_}
105 unless ( $Expect_Dir{$_} && ! -d $_ );
109 sub wanted_File_Dir_prune {
111 $File::Find::prune=1 if $_ eq 'faba';
116 print "# \$File::Find::dir => '$File::Find::dir'\n";
117 print "# \$_ => '$_'\n";
121 # Use dir_path() to specify a directory path that's expected for
122 # $File::Find::dir (%Expect_Dir). Also use it in file operations like
125 # dir_path() concatenates directory names to form a _relative_
126 # directory path, independant from the platform it's run on, although
127 # there are limitations. Don't try to create an absolute path,
128 # because that may fail on operating systems that have the concept of
129 # volume names (e.g. Mac OS). Be careful when you want to create an
130 # updir path like ../fa (Unix) or ::fa: (Mac OS). Plain directory
131 # names will work best. As a special case, you can pass it a "." as
132 # first argument, to create a directory path like "./fa/dir" on
133 # operating systems other than Mac OS (actually, Mac OS will ignore
134 # the ".", if it's the first argument). If there's no second argument,
135 # this function will return the empty string on Mac OS and the string
139 my $first_item = shift @_;
141 if ($first_item eq '.') {
142 if ($^O eq 'MacOS') {
144 # ignore first argument; return a relative path
145 # with leading ":" and with trailing ":"
146 return File::Spec->catdir("", @_);
148 return './' unless @_;
149 my $path = File::Spec->catdir(@_);
155 } else { # $first_item ne '.'
156 return $first_item unless @_; # return plain filename
157 if ($^O eq 'MacOS') {
158 # relative path with leading ":" and with trailing ":"
159 return File::Spec->catdir("", $first_item, @_);
161 return File::Spec->catdir($first_item, @_);
167 # Use topdir() to specify a directory path that you want to pass to
168 #find/finddepth Basically, topdir() does the same as dir_path() (see
169 #above), except that there's no trailing ":" on Mac OS.
172 my $path = dir_path(@_);
173 $path =~ s/:$// if ($^O eq 'MacOS');
178 # Use file_path() to specify a file path that's expected for $_ (%Expect_File).
179 # Also suitable for file operations like unlink etc.
181 # file_path() concatenates directory names (if any) and a filename to
182 # form a _relative_ file path (the last argument is assumed to be a
183 # file). It's independant from the platform it's run on, although
184 # there are limitations (see the warnings for dir_path() above). As a
185 # special case, you can pass it a "." as first argument, to create a
186 # file path like "./fa/file" on operating systems other than Mac OS
187 # (actually, Mac OS will ignore the ".", if it's the first
188 # argument). If there's no second argument, this function will return
189 # the empty string on Mac OS and the string "./" otherwise.
192 my $first_item = shift @_;
194 if ($first_item eq '.') {
195 if ($^O eq 'MacOS') {
197 # ignore first argument; return a relative path
198 # with leading ":", but without trailing ":"
199 return File::Spec->catfile("", @_);
201 return './' unless @_;
202 my $path = File::Spec->catfile(@_);
208 } else { # $first_item ne '.'
209 return $first_item unless @_; # return plain filename
210 if ($^O eq 'MacOS') {
211 # relative path with leading ":", but without trailing ":"
212 return File::Spec->catfile("", $first_item, @_);
214 return File::Spec->catfile($first_item, @_);
220 # Use file_path_name() to specify a file path that's expected for
221 # $File::Find::Name (%Expect_Name). Note: When the no_chdir => 1
222 # option is in effect, $_ is the same as $File::Find::Name. In that
223 # case, also use this function to specify a file path that's expected
226 # Basically, file_path_name() does the same as file_path() (see
227 # above), except that there's always a leading ":" on Mac OS, even for
228 # plain file/directory names.
231 my $path = file_path(@_);
232 $path = ":$path" if (($^O eq 'MacOS') && ($path !~ /:/));
238 MkDir( dir_path('for_find'), 0770 );
239 CheckDie(chdir( dir_path('for_find')));
241 $cwd = cwd(); # save cwd
242 ( $cwd_untainted ) = $cwd =~ m|^(.+)$|; # untaint it
244 MkDir( dir_path('fa'), 0770 );
245 MkDir( dir_path('fb'), 0770 );
246 touch( file_path('fb', 'fb_ord') );
247 MkDir( dir_path('fb', 'fba'), 0770 );
248 touch( file_path('fb', 'fba', 'fba_ord') );
249 if ($^O eq 'MacOS') {
250 CheckDie( symlink(':fb',':fa:fsl') ) if $symlink_exists;
252 CheckDie( symlink('../fb','fa/fsl') ) if $symlink_exists;
254 touch( file_path('fa', 'fa_ord') );
256 MkDir( dir_path('fa', 'faa'), 0770 );
257 touch( file_path('fa', 'faa', 'faa_ord') );
258 MkDir( dir_path('fa', 'fab'), 0770 );
259 touch( file_path('fa', 'fab', 'fab_ord') );
260 MkDir( dir_path('fa', 'fab', 'faba'), 0770 );
261 touch( file_path('fa', 'fab', 'faba', 'faba_ord') );
263 print "# check untainting (no follow)\n";
265 # untainting here should work correctly
267 %Expect_File = (File::Spec->curdir => 1, file_path('fsl') =>
268 1,file_path('fa_ord') => 1, file_path('fab') => 1,
269 file_path('fab_ord') => 1, file_path('faba') => 1,
270 file_path('faa') => 1, file_path('faa_ord') => 1);
271 delete $Expect_File{ file_path('fsl') } unless $symlink_exists;
274 %Expect_Dir = ( dir_path('fa') => 1, dir_path('faa') => 1,
275 dir_path('fab') => 1, dir_path('faba') => 1,
276 dir_path('fb') => 1, dir_path('fba') => 1);
278 delete @Expect_Dir{ dir_path('fb'), dir_path('fba') } unless $symlink_exists;
280 File::Find::find( {wanted => \&wanted_File_Dir_prune, untaint => 1,
281 untaint_pattern => qr|^(.+)$|}, topdir('fa') );
283 Check( scalar(keys %Expect_File) == 0 );
286 # don't untaint at all, should die
291 eval {File::Find::find( {wanted => \&simple_wanted}, topdir('fa') );};
292 Check( $@ =~ m|Insecure dependency| );
293 chdir($cwd_untainted);
296 # untaint pattern doesn't match, should die
299 eval {File::Find::find( {wanted => \&simple_wanted, untaint => 1,
300 untaint_pattern => qr|^(NO_MATCH)$|},
303 Check( $@ =~ m|is still tainted| );
304 chdir($cwd_untainted);
307 # untaint pattern doesn't match, should die when we chdir to cwd
308 print "# check untaint_skip (No follow)\n";
311 eval {File::Find::find( {wanted => \&simple_wanted, untaint => 1,
312 untaint_skip => 1, untaint_pattern =>
313 qr|^(NO_MATCH)$|}, topdir('fa') );};
317 if ($NonTaintedCwd) {
318 Skip("$^O does not taint cwd");
321 Check( $@ =~ m|insecure cwd| );
323 chdir($cwd_untainted);
326 if ( $symlink_exists ) {
327 print "# --- symbolic link tests --- \n";
328 $FastFileTests_OK= 1;
330 print "# check untainting (follow)\n";
332 # untainting here should work correctly
333 # no_chdir is in effect, hence we use file_path_name to specify the expected paths for %Expect_File
335 %Expect_File = (file_path_name('fa') => 1,
336 file_path_name('fa','fa_ord') => 1,
337 file_path_name('fa', 'fsl') => 1,
338 file_path_name('fa', 'fsl', 'fb_ord') => 1,
339 file_path_name('fa', 'fsl', 'fba') => 1,
340 file_path_name('fa', 'fsl', 'fba', 'fba_ord') => 1,
341 file_path_name('fa', 'fab') => 1,
342 file_path_name('fa', 'fab', 'fab_ord') => 1,
343 file_path_name('fa', 'fab', 'faba') => 1,
344 file_path_name('fa', 'fab', 'faba', 'faba_ord') => 1,
345 file_path_name('fa', 'faa') => 1,
346 file_path_name('fa', 'faa', 'faa_ord') => 1);
350 %Expect_Dir = (dir_path('fa') => 1,
351 dir_path('fa', 'faa') => 1,
352 dir_path('fa', 'fab') => 1,
353 dir_path('fa', 'fab', 'faba') => 1,
355 dir_path('fb', 'fba') => 1);
357 File::Find::find( {wanted => \&wanted_File_Dir, follow_fast => 1,
358 no_chdir => 1, untaint => 1, untaint_pattern =>
359 qr|^(.+)$| }, topdir('fa') );
361 Check( scalar(keys %Expect_File) == 0 );
364 # don't untaint at all, should die
367 eval {File::Find::find( {wanted => \&simple_wanted, follow => 1},
370 Check( $@ =~ m|Insecure dependency| );
371 chdir($cwd_untainted);
373 # untaint pattern doesn't match, should die
376 eval {File::Find::find( {wanted => \&simple_wanted, follow => 1,
377 untaint => 1, untaint_pattern =>
378 qr|^(NO_MATCH)$|}, topdir('fa') );};
380 Check( $@ =~ m|is still tainted| );
381 chdir($cwd_untainted);
383 # untaint pattern doesn't match, should die when we chdir to cwd
384 print "# check untaint_skip (Follow)\n";
387 eval {File::Find::find( {wanted => \&simple_wanted, untaint => 1,
388 untaint_skip => 1, untaint_pattern =>
389 qr|^(NO_MATCH)$|}, topdir('fa') );};
390 if ($NonTaintedCwd) {
391 Skip("$^O does not taint cwd");
394 Check( $@ =~ m|insecure cwd| );
396 chdir($cwd_untainted);