Michael Rash
f1c3806dca
[test suite] added tests for duplicate rule detection (issue #162 )
2015-07-14 21:13:46 -04:00
Michael Rash
3de56f8f89
[test suite] add valgrind string to client command line for garbage collection test
2015-07-13 22:41:21 -04:00
Michael Rash
588cba6063
[test suite] validate iptables rule garbage collection (added in ef9498f7)
2015-07-13 21:59:58 -04:00
Michael Rash
41b137611f
[test suite] validate multiple rules removed in a single check_firewall_rules() pass - validates f4f2ada1
2015-07-12 22:50:06 -04:00
Michael Rash
4874dc9c83
[test suite] add --gpg-exe invalid path test
2015-07-05 22:55:23 -04:00
Michael Rash
012d1cf888
[server] interim commit towards a fix for --no-ipt-check rule detection
...
This is a significant commit for issue #162 where fwknopd is not properly
detecting rules (particularly NAT rules) on systems running older versions
of iptables where -C support is not offered. A new capability of searching
the output of an external command and getting the first matching line was
added with the search_extcmd_getline() function.
2015-07-05 20:47:06 -04:00
Michael Rash
5a58390ab4
[test suite] add dupe rule server output check
2015-07-04 17:12:49 -04:00
Michael Rash
86bcf243e6
[test suite] bug fix for iptables vs. firewalld
2015-07-04 17:03:08 -04:00
Michael Rash
814d9e1050
[test suite] minor comment update
2015-06-30 17:47:01 -07:00
Michael Rash
ca54ec7a9b
[test suite] integrate afl-cov with afl-fuzz wrapper scripts
...
Here is an example for the client-rc.sh wrapper script to have it also
generate code coverage results for afl-fuzz (afl-cov is enabled via two
environmental variables AFL_COV and CODE_DIR).
$ cd /tmp/afl-ramdisk/fwknop.git/test/afl/
$ AFL_COV=1 CODE_DIR=/home/mbr/git/fwknop.git ./fuzzing-wrappers/client-rc.sh
2015-06-29 19:06:50 -07:00
Michael Rash
5ba88e7b83
[test suite] support afl-fuzz on Mac OS X which uses afl-clang
2015-06-26 08:39:48 -07:00
Michael Rash
2b5c38dc2b
[test suite] default to not zeroing profile coverage counters
...
The typical work flow when generating gcov coverage results is:
- compile fwknop with coverage support
- run the test suite
- hack on fwknop
- re-run the test suite to see what coverage has been added
This work flow is much more common than collecting coverage results
for a complete test suite run. Therefore, this commit switches the
default behavior in --enable-complete mode (which enables coverage
support) to not zero-out coverage counters. A new argument
--enable-profile-coverage-init zeros the counters in preparation
for a global coverage run.
2015-06-23 16:56:25 -07:00
Michael Rash
bc6118e19f
[test suite] added missing test/asan/Makefile
2015-06-18 06:16:10 -07:00
Michael Rash
5c4f7dac9b
[test suite] add fwknoprc2 file to AFL client rc test cases
2015-06-16 19:16:36 -07:00
Michael Rash
4d3c472116
[test suite] add Rijndael+HMAC test for F-Droid Fwknop2 client written by Jonathan Bennett
2015-06-16 18:32:19 -07:00
Michael Rash
e0778a2d37
[test suite] disable fault injection 'tag' tests with the fko wrapper does not compile against libfiu
2015-06-15 13:53:13 -07:00
Michael Rash
7da6b9e787
[test suite] produce include/exclude stats
2015-06-15 13:48:39 -07:00
Michael Rash
7e6ec092f6
[test suite] consolidate crash detection into a single function
2015-06-15 13:12:59 -07:00
Michael Rash
e20c09d572
[test suite] add ASAN verification if fwknop is compiled with ASAN support
2015-06-14 19:15:34 -07:00
Michael Rash
e8cc2845fa
[test suite] minor formatting update
2015-06-14 05:59:30 -07:00
Michael Rash
9ce5ad47c0
[test suite] disable python tests if Python.h is missing
2015-06-13 06:31:11 -07:00
Michael Rash
c8cdc91974
[test suite] added test for Rijndael-only SPA packet from the Android Fwknop2-v1.0-RC.2 binary
2015-06-12 17:46:22 -07:00
Michael Rash
404c34a0db
[test suite] allow for missing makeinfo binary in recompliation tests
2015-06-12 08:47:56 -07:00
Michael Rash
b11217dc07
[test suite] better integration with Google's Address Sanitizer and AFL
2015-06-11 18:28:41 -07:00
Michael Rash
5616c7ba6d
[test suite] removed deprecated AFL compile script
2015-06-09 17:01:16 -07:00
Michael Rash
e3bf862238
[test suite] removed deprecated AFL compile script
2015-06-09 16:59:20 -07:00
Michael Rash
1fb9747b2b
[test suite] added Rijndael+HMAC test for Fwknop2 Beta1
2015-06-07 13:44:00 -04:00
Michael Rash
cff4dcc1e7
[test suite] Added Rijndael+HMAC test for Jonathan Bennett's Fwknop2 Android app
2015-06-04 23:02:21 -04:00
Michael Rash
7c23cb72f1
[test suite] differentiate firewalld vs. iptables for fwknopd.conf file fuzzing
2015-06-01 19:36:46 -07:00
Michael Rash
eed3dc8ad2
[test suite] minor comment update to mention afl-cov
2015-05-30 18:35:10 -07:00
Michael Rash
0388baa665
replaced raw lcov results with a link
2015-05-28 18:50:33 -07:00
Michael Rash
73f22bab16
added cumulative afl-cov web coverage report for 136d017
2015-05-28 16:03:54 -04:00
Michael Rash
98f852b5af
added server-conf fuzzing results
2015-05-24 11:00:52 -07:00
Michael Rash
833dc7e4f6
added client-rc results
2015-05-24 10:16:20 -07:00
Michael Rash
81cdb0506f
added spa-pkts fuzzing cycle
2015-05-20 16:57:43 -07:00
Michael Rash
ceb1713976
add --key-gen option to fwknopd (suggested by Jonathan Bennett)
2015-05-20 08:55:17 -07:00
Michael Rash
3e2e73ff99
moved 136d017 AFL results to 2.6.7 directory
2015-05-19 19:07:52 -07:00
Michael Rash
f659fe849f
added server digest and access AFL runs
2015-05-19 19:06:16 -07:00
Michael Rash
7817d28a2d
[test suite] minor check for AFL compile configure success
2015-05-14 17:49:55 -07:00
Michael Rash
28dc60f9bd
added server-conf AFL fuzzing cycle results
2015-05-10 21:20:10 -07:00
Michael Rash
bcfc313e36
[test suite] minor bug fix for rm previous coverage script path
2015-04-24 17:55:43 -07:00
Michael Rash
17d1071aa8
[server / test suite] cleaner SNAT MASQUERADE support
2015-04-22 01:00:57 -07:00
Michael Rash
6bdfa95067
[server / test suite] cleaner SNAT MASQUERADE support
2015-04-22 00:58:35 -07:00
Michael Rash
6467b922d5
[test suite] additional FORWARD_ALL tests
2015-04-21 03:30:32 -07:00
Michael Rash
f18827b002
[test suite] make valgrind results requirements stronger for test passage
2015-04-20 08:45:09 -07:00
Michael Rash
85733ded3c
[test suite] additional iptables exclusions for non-iptables systems
2015-04-20 10:09:23 -04:00
Michael Rash
a606a9c565
[test suite] fw prefixes aren't used on non-Linux systems yet
2015-04-19 18:52:08 -07:00
Michael Rash
48acac160a
[test suite] pick up pf and ipfw firewalls for prefix designation
2015-04-19 18:49:28 -07:00
Michael Rash
93a3798cc1
[test suite] exclude server restart cycle from valgrind results parsing
2015-04-19 13:25:11 -07:00
Michael Rash
cc765a23db
[test suite] minor FORCE_NAT config tweak
2015-04-19 12:22:55 -07:00
