mirror of
https://github.com/golang/go
synced 2024-11-19 05:14:50 -07:00
6694a6888b
This change delays IP protocol stack-snooping system calls until the start of connection setup for the better experience with some system call auditing, such as seccomp on Linux. See #16789 for examples. Also updates the documentation on favoriteAddrFamily, which is the owner of stack-snooping system calls. Fixes #16789. Change-Id: I4af27bc1ed06ffb1f657b6f6381c328c1f41c66c Reviewed-on: https://go-review.googlesource.com/40750 Run-TryBot: Mikio Hara <mikioh.mikioh@gmail.com> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Ian Lance Taylor <iant@golang.org>
283 lines
6.8 KiB
Go
283 lines
6.8 KiB
Go
// Copyright 2013 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package net
|
|
|
|
import (
|
|
"reflect"
|
|
"testing"
|
|
)
|
|
|
|
var testInetaddr = func(ip IPAddr) Addr { return &TCPAddr{IP: ip.IP, Port: 5682, Zone: ip.Zone} }
|
|
|
|
var addrListTests = []struct {
|
|
filter func(IPAddr) bool
|
|
ips []IPAddr
|
|
inetaddr func(IPAddr) Addr
|
|
first Addr
|
|
primaries addrList
|
|
fallbacks addrList
|
|
err error
|
|
}{
|
|
{
|
|
nil,
|
|
[]IPAddr{
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
{IP: IPv6loopback},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682}},
|
|
addrList{&TCPAddr{IP: IPv6loopback, Port: 5682}},
|
|
nil,
|
|
},
|
|
{
|
|
nil,
|
|
[]IPAddr{
|
|
{IP: IPv6loopback},
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{&TCPAddr{IP: IPv6loopback, Port: 5682}},
|
|
addrList{&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682}},
|
|
nil,
|
|
},
|
|
{
|
|
nil,
|
|
[]IPAddr{
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
{IP: IPv4(192, 168, 0, 1)},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
&TCPAddr{IP: IPv4(192, 168, 0, 1), Port: 5682},
|
|
},
|
|
nil,
|
|
nil,
|
|
},
|
|
{
|
|
nil,
|
|
[]IPAddr{
|
|
{IP: IPv6loopback},
|
|
{IP: ParseIP("fe80::1"), Zone: "eth0"},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv6loopback, Port: 5682},
|
|
addrList{
|
|
&TCPAddr{IP: IPv6loopback, Port: 5682},
|
|
&TCPAddr{IP: ParseIP("fe80::1"), Port: 5682, Zone: "eth0"},
|
|
},
|
|
nil,
|
|
nil,
|
|
},
|
|
{
|
|
nil,
|
|
[]IPAddr{
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
{IP: IPv4(192, 168, 0, 1)},
|
|
{IP: IPv6loopback},
|
|
{IP: ParseIP("fe80::1"), Zone: "eth0"},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
&TCPAddr{IP: IPv4(192, 168, 0, 1), Port: 5682},
|
|
},
|
|
addrList{
|
|
&TCPAddr{IP: IPv6loopback, Port: 5682},
|
|
&TCPAddr{IP: ParseIP("fe80::1"), Port: 5682, Zone: "eth0"},
|
|
},
|
|
nil,
|
|
},
|
|
{
|
|
nil,
|
|
[]IPAddr{
|
|
{IP: IPv6loopback},
|
|
{IP: ParseIP("fe80::1"), Zone: "eth0"},
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
{IP: IPv4(192, 168, 0, 1)},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{
|
|
&TCPAddr{IP: IPv6loopback, Port: 5682},
|
|
&TCPAddr{IP: ParseIP("fe80::1"), Port: 5682, Zone: "eth0"},
|
|
},
|
|
addrList{
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
&TCPAddr{IP: IPv4(192, 168, 0, 1), Port: 5682},
|
|
},
|
|
nil,
|
|
},
|
|
{
|
|
nil,
|
|
[]IPAddr{
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
{IP: IPv6loopback},
|
|
{IP: IPv4(192, 168, 0, 1)},
|
|
{IP: ParseIP("fe80::1"), Zone: "eth0"},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
&TCPAddr{IP: IPv4(192, 168, 0, 1), Port: 5682},
|
|
},
|
|
addrList{
|
|
&TCPAddr{IP: IPv6loopback, Port: 5682},
|
|
&TCPAddr{IP: ParseIP("fe80::1"), Port: 5682, Zone: "eth0"},
|
|
},
|
|
nil,
|
|
},
|
|
{
|
|
nil,
|
|
[]IPAddr{
|
|
{IP: IPv6loopback},
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
{IP: ParseIP("fe80::1"), Zone: "eth0"},
|
|
{IP: IPv4(192, 168, 0, 1)},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{
|
|
&TCPAddr{IP: IPv6loopback, Port: 5682},
|
|
&TCPAddr{IP: ParseIP("fe80::1"), Port: 5682, Zone: "eth0"},
|
|
},
|
|
addrList{
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
&TCPAddr{IP: IPv4(192, 168, 0, 1), Port: 5682},
|
|
},
|
|
nil,
|
|
},
|
|
|
|
{
|
|
ipv4only,
|
|
[]IPAddr{
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
{IP: IPv6loopback},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682}},
|
|
nil,
|
|
nil,
|
|
},
|
|
{
|
|
ipv4only,
|
|
[]IPAddr{
|
|
{IP: IPv6loopback},
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682},
|
|
addrList{&TCPAddr{IP: IPv4(127, 0, 0, 1), Port: 5682}},
|
|
nil,
|
|
nil,
|
|
},
|
|
|
|
{
|
|
ipv6only,
|
|
[]IPAddr{
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
{IP: IPv6loopback},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv6loopback, Port: 5682},
|
|
addrList{&TCPAddr{IP: IPv6loopback, Port: 5682}},
|
|
nil,
|
|
nil,
|
|
},
|
|
{
|
|
ipv6only,
|
|
[]IPAddr{
|
|
{IP: IPv6loopback},
|
|
{IP: IPv4(127, 0, 0, 1)},
|
|
},
|
|
testInetaddr,
|
|
&TCPAddr{IP: IPv6loopback, Port: 5682},
|
|
addrList{&TCPAddr{IP: IPv6loopback, Port: 5682}},
|
|
nil,
|
|
nil,
|
|
},
|
|
|
|
{nil, nil, testInetaddr, nil, nil, nil, &AddrError{errNoSuitableAddress.Error(), "ADDR"}},
|
|
|
|
{ipv4only, nil, testInetaddr, nil, nil, nil, &AddrError{errNoSuitableAddress.Error(), "ADDR"}},
|
|
{ipv4only, []IPAddr{{IP: IPv6loopback}}, testInetaddr, nil, nil, nil, &AddrError{errNoSuitableAddress.Error(), "ADDR"}},
|
|
|
|
{ipv6only, nil, testInetaddr, nil, nil, nil, &AddrError{errNoSuitableAddress.Error(), "ADDR"}},
|
|
{ipv6only, []IPAddr{{IP: IPv4(127, 0, 0, 1)}}, testInetaddr, nil, nil, nil, &AddrError{errNoSuitableAddress.Error(), "ADDR"}},
|
|
}
|
|
|
|
func TestAddrList(t *testing.T) {
|
|
if !supportsIPv4() || !supportsIPv6() {
|
|
t.Skip("both IPv4 and IPv6 are required")
|
|
}
|
|
|
|
for i, tt := range addrListTests {
|
|
addrs, err := filterAddrList(tt.filter, tt.ips, tt.inetaddr, "ADDR")
|
|
if !reflect.DeepEqual(err, tt.err) {
|
|
t.Errorf("#%v: got %v; want %v", i, err, tt.err)
|
|
}
|
|
if tt.err != nil {
|
|
if len(addrs) != 0 {
|
|
t.Errorf("#%v: got %v; want 0", i, len(addrs))
|
|
}
|
|
continue
|
|
}
|
|
first := addrs.first(isIPv4)
|
|
if !reflect.DeepEqual(first, tt.first) {
|
|
t.Errorf("#%v: got %v; want %v", i, first, tt.first)
|
|
}
|
|
primaries, fallbacks := addrs.partition(isIPv4)
|
|
if !reflect.DeepEqual(primaries, tt.primaries) {
|
|
t.Errorf("#%v: got %v; want %v", i, primaries, tt.primaries)
|
|
}
|
|
if !reflect.DeepEqual(fallbacks, tt.fallbacks) {
|
|
t.Errorf("#%v: got %v; want %v", i, fallbacks, tt.fallbacks)
|
|
}
|
|
expectedLen := len(primaries) + len(fallbacks)
|
|
if len(addrs) != expectedLen {
|
|
t.Errorf("#%v: got %v; want %v", i, len(addrs), expectedLen)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestAddrListPartition(t *testing.T) {
|
|
addrs := addrList{
|
|
&IPAddr{IP: ParseIP("fe80::"), Zone: "eth0"},
|
|
&IPAddr{IP: ParseIP("fe80::1"), Zone: "eth0"},
|
|
&IPAddr{IP: ParseIP("fe80::2"), Zone: "eth0"},
|
|
}
|
|
cases := []struct {
|
|
lastByte byte
|
|
primaries addrList
|
|
fallbacks addrList
|
|
}{
|
|
{0, addrList{addrs[0]}, addrList{addrs[1], addrs[2]}},
|
|
{1, addrList{addrs[0], addrs[2]}, addrList{addrs[1]}},
|
|
{2, addrList{addrs[0], addrs[1]}, addrList{addrs[2]}},
|
|
{3, addrList{addrs[0], addrs[1], addrs[2]}, nil},
|
|
}
|
|
for i, tt := range cases {
|
|
// Inverting the function's output should not affect the outcome.
|
|
for _, invert := range []bool{false, true} {
|
|
primaries, fallbacks := addrs.partition(func(a Addr) bool {
|
|
ip := a.(*IPAddr).IP
|
|
return (ip[len(ip)-1] == tt.lastByte) != invert
|
|
})
|
|
if !reflect.DeepEqual(primaries, tt.primaries) {
|
|
t.Errorf("#%v: got %v; want %v", i, primaries, tt.primaries)
|
|
}
|
|
if !reflect.DeepEqual(fallbacks, tt.fallbacks) {
|
|
t.Errorf("#%v: got %v; want %v", i, fallbacks, tt.fallbacks)
|
|
}
|
|
}
|
|
}
|
|
}
|