def test_tar(self): with tarfile.TarFile.open('./tests/data/clean.tar', 'w') as zout: zout.add('./tests/data/dirty.flac') zout.add('./tests/data/dirty.docx') zout.add('./tests/data/dirty.jpg') zout.add('./tests/data/embedded_corrupted.docx') tarinfo = tarfile.TarInfo(name='./tests/data/dirty.png') tarinfo.mtime = time.time() tarinfo.uid = 1337 tarinfo.gid = 1338 tarinfo.size = os.stat('./tests/data/dirty.png').st_size with open('./tests/data/dirty.png', 'rb') as f: zout.addfile(tarinfo, f) p, mimetype = parser_factory.get_parser('./tests/data/clean.tar') self.assertEqual(mimetype, 'application/x-tar') meta = p.get_meta() self.assertEqual(meta['./tests/data/dirty.flac']['comments'], 'Thank you for using MAT !') self.assertEqual( meta['./tests/data/dirty.docx']['word/media/image1.png'] ['Comment'], 'This is a comment, be careful!') self.assertFalse(p.remove_all()) os.remove('./tests/data/clean.tar') shutil.copy('./tests/data/dirty.png', './tests/data/clean.tar') with self.assertRaises(ValueError): archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar')
def test_tar(self): with tarfile.TarFile.open('./tests/data/clean.tar', 'w') as zout: zout.add('./tests/data/dirty.flac') zout.add('./tests/data/dirty.docx') zout.add('./tests/data/dirty.jpg') zout.add('./tests/data/embedded_corrupted.docx') tarinfo = tarfile.TarInfo(name='./tests/data/dirty.png') tarinfo.mtime = time.time() tarinfo.uid = 1337 tarinfo.gid = 1338 tarinfo.size = os.stat('./tests/data/dirty.png').st_size with open('./tests/data/dirty.png', 'rb') as f: zout.addfile(tarinfo, f) p, mimetype = parser_factory.get_parser('./tests/data/clean.tar') self.assertEqual(mimetype, 'application/x-tar') with self.assertRaises(ValueError): p.get_meta() with self.assertRaises(ValueError): self.assertFalse(p.remove_all()) os.remove('./tests/data/clean.tar') shutil.copy('./tests/data/dirty.png', './tests/data/clean.tar') with self.assertRaises(ValueError): archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar')
def test_tar_setgid(self): with tarfile.open('./tests/data/clean.tar', 'w') as zout: zout.add('./tests/data/dirty.png') tarinfo = tarfile.TarInfo('./tests/data/dirty.jpg') tarinfo.mode |= stat.S_ISGID with open('./tests/data/dirty.jpg', 'rb') as f: zout.addfile(tarinfo=tarinfo, fileobj=f) with self.assertRaises(ValueError): archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar')
def test_tar_duplicate_file(self): with tarfile.open('./tests/data/clean.tar', 'w') as zout: for _ in range(3): zout.add('./tests/data/dirty.png') tarinfo = tarfile.TarInfo('./tests/data/dirty.jpg') with open('./tests/data/dirty.jpg', 'rb') as f: zout.addfile(tarinfo=tarinfo, fileobj=f) with self.assertRaises(ValueError): archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar')
def test_tar_absolute_path(self): with tarfile.open('./tests/data/clean.tar', 'w') as zout: zout.add('./tests/data/dirty.png') tarinfo = tarfile.TarInfo('./tests/data/dirty.jpg') tarinfo.name = '/etc/passwd' with open('./tests/data/dirty.jpg', 'rb') as f: zout.addfile(tarinfo=tarinfo, fileobj=f) with self.assertRaises(ValueError): archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar')
def test_tar_traversal(self): with tarfile.open('./tests/data/clean.tar', 'w') as zout: zout.add('./tests/data/dirty.png') tarinfo = tarfile.TarInfo('./tests/data/dirty.jpg') tarinfo.name = '../../../../../../../../../../tmp/mat2_test.png' with open('./tests/data/dirty.jpg', 'rb') as f: zout.addfile(tarinfo=tarinfo, fileobj=f) with self.assertRaises(ValueError): archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar')
def test_tar_hardlink(self): shutil.copy('./tests/data/dirty.png', './tests/data/clean.png') os.link('./tests/data/clean.png', './tests/data/hardlink.png') with tarfile.open('./tests/data/cleaner.tar', 'w') as zout: zout.add('tests/data/clean.png') zout.add('tests/data/hardlink.png') with self.assertRaises(ValueError): archive.TarParser('./tests/data/cleaner.tar') os.remove('./tests/data/cleaner.tar') os.remove('./tests/data/clean.png') os.remove('./tests/data/hardlink.png')
def test_tar_symlink_relative(self): os.symlink('../../../etc/passwd', './tests/data/symlink') with tarfile.open('./tests/data/clean.tar', 'w') as zout: zout.add('./tests/data/symlink') tarinfo = tarfile.TarInfo('./tests/data/symlink') with open('./tests/data/dirty.jpg', 'rb') as f: zout.addfile(tarinfo=tarinfo, fileobj=f) with self.assertRaises(ValueError): archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar') os.remove('./tests/data/symlink')
def test_tarbz2(self): with tarfile.TarFile.open('./tests/data/dirty.tar.bz2', 'w:bz2') as zout: zout.add('./tests/data/dirty.flac') zout.add('./tests/data/dirty.docx') zout.add('./tests/data/dirty.jpg') p = archive.TarParser('./tests/data/dirty.tar.bz2') meta = p.get_meta() self.assertEqual( meta['./tests/data/dirty.docx']['word/media/image1.png'] ['Comment'], 'This is a comment, be careful!') ret = p.remove_all() self.assertTrue(ret) p = archive.TarParser('./tests/data/dirty.cleaned.tar.bz2') self.assertEqual(p.get_meta(), {}) self.assertTrue(p.remove_all()) tmp_dir = tempfile.mkdtemp() with tarfile.open('./tests/data/dirty.cleaned.tar.bz2') as zout: zout.extractall(path=tmp_dir) zout.close() number_of_files = 0 for root, _, fnames in os.walk(tmp_dir): for f in fnames: complete_path = os.path.join(root, f) p, _ = parser_factory.get_parser(complete_path) self.assertIsNotNone(p) self.assertEqual(p.get_meta(), {}) number_of_files += 1 self.assertEqual(number_of_files, 3) os.remove('./tests/data/dirty.tar.bz2') os.remove('./tests/data/dirty.cleaned.tar.bz2') os.remove('./tests/data/dirty.cleaned.cleaned.tar.bz2')
def test_tar_symlink_ok(self): shutil.copy('./tests/data/dirty.png', './tests/data/clean.png') with tarfile.open('./tests/data/clean.tar', 'w') as zout: zout.add('./tests/data/dirty.png') t = tarfile.TarInfo('mydir') t.type = tarfile.DIRTYPE zout.addfile(t) zout.add('./tests/data/clean.png') t = tarfile.TarInfo('mylink') t.type = tarfile.SYMTYPE t.linkname = './tests/data/clean.png' zout.addfile(t) zout.add('./tests/data/dirty.jpg') archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar') os.remove('./tests/data/clean.png')
def test_onlymember_tar(self): with tarfile.open('./tests/data/clean.tar', 'w') as zout: zout.add('./tests/data/dirty.png') tarinfo = tarfile.TarInfo('./tests/data/dirty.jpg') tarinfo.mtime = time.time() tarinfo.uid = 1337 tarinfo.gid = 0 tarinfo.mode = 0o000 tarinfo.size = os.stat('./tests/data/dirty.jpg').st_size with open('./tests/data/dirty.jpg', 'rb') as f: zout.addfile(tarinfo=tarinfo, fileobj=f) p, mimetype = parser_factory.get_parser('./tests/data/clean.tar') self.assertEqual(mimetype, 'application/x-tar') meta = p.get_meta() self.assertEqual(meta['./tests/data/dirty.jpg']['uid'], '1337') self.assertTrue(p.remove_all()) p = archive.TarParser('./tests/data/clean.cleaned.tar') self.assertEqual(p.get_meta(), {}) os.remove('./tests/data/clean.tar') os.remove('./tests/data/clean.cleaned.tar')
def test_tar_device_file(self): with tarfile.open('./tests/data/clean.tar', 'w') as zout: zout.add('/dev/null') with self.assertRaises(ValueError): archive.TarParser('./tests/data/clean.tar') os.remove('./tests/data/clean.tar')