github.com/DataDog/datadog-agent/pkg/security/secl@v0.55.0-devel.0.20240517055856-10c4965fea94/compiler/eval/glob_test.go

// Unless explicitly stated otherwise all files in this repository are licensed
// under the Apache License Version 2.0.
// This product includes software developed at Datadog (https://www.datadoghq.com/).
// Copyright 2016-present Datadog, Inc.

// Package eval holds eval related files
package eval

import (
	"testing"
)

func TestGlobPattern(t *testing.T) {
	if _, err := NewGlob("**/conf.d", false, false); err == nil {
		t.Error("should return an error")
	}

	if _, err := NewGlob("/etc/conf.d/**", false, false); err != nil {
		t.Error("shouldn't return an error")
	}

	if _, err := NewGlob("/etc/**/*.conf", false, false); err == nil {
		t.Error("should return an error")
	}

	if _, err := NewGlob("/etc/**.conf", false, false); err == nil {
		t.Error("should return an error")
	}
}

func TestGlobContains(t *testing.T) {
	if glob, _ := NewGlob("/", false, false); !glob.Contains("/var/log") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/log/*", false, false); !glob.Contains("/var/log") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/log/*", false, false); !glob.Contains("/var/log/httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("*/log/httpd", false, false); !glob.Contains("/var/log/httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("*/log", false, false); !glob.Contains("/var/log/httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("*/http*", false, false); glob.Contains("/var/log/httpd") {
		t.Error("shouldn't contain the filename")
	}

	if glob, _ := NewGlob("*/*/http*", false, false); !glob.Contains("/var/log/httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/*/httpd", false, false); !glob.Contains("/var/log/httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/*/httpd", false, false); glob.Contains("/var/log/nginx") {
		t.Error("shouldn't contain the filename")
	}

	if glob, _ := NewGlob("/var/**", false, false); !glob.Contains("/var/log/nginx") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/*", false, false); !glob.Contains("/var/log/nginx") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/log/ng*", false, false); !glob.Contains("/var/log/nginx") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/*o*/nginx", false, false); !glob.Contains("/var/log/nginx") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/**", false, false); !glob.Contains("/var/log/nginx") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/log/**", false, false); !glob.Contains("/var/log/nginx") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/etc/conf.d/ab*", false, false); !glob.Contains("/etc/conf.d/") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/*", false, false); !glob.Contains("/var/log/nginx") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/var/log", false, false); !glob.Contains("/var/log") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/etc/conf.d/*", false, false); glob.Contains("/etc/sys.d/nginx.conf") {
		t.Error("shouldn't contain the filename")
	}

	if glob, _ := NewGlob("/var/log", false, false); !glob.Contains("/var/log/httpd") {
		t.Error("should contain the filename")
	}
}

func TestGlobMatches(t *testing.T) {
	if glob, _ := NewGlob("/tmp/test/test789", false, false); !glob.Matches("/tmp/test/test789") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("*/abc/*", false, false); !glob.Matches("/1/abc/2") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/tmp/test/test789*", false, false); !glob.Matches("/tmp/test/test7890") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/tmp/test/test789*", false, false); glob.Matches("/tmp/test") {
		t.Error("shouldn't contain the filename")
	}

	if glob, _ := NewGlob("/tmp/test/*st*", false, false); glob.Matches("/tmp/test") {
		t.Error("shouldn't contain the filename")
	}

	if glob, _ := NewGlob("/tmp/test/*st*", false, false); !glob.Matches("/tmp/test/ast") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/tmp/*/test789", false, false); !glob.Matches("/tmp/test/test789") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/tmp/*/test789", false, false); glob.Matches("/tmp/test/test") {
		t.Error("shouldn't contain the filename")
	}

	if glob, _ := NewGlob("/tmp/**", false, false); !glob.Matches("/tmp/test/ast") {
		t.Error("should the filename")
	}

	if glob, _ := NewGlob("/tmp/*", false, false); glob.Matches("/tmp/test/ast") {
		t.Error("shouldn't the filename")
	}

	if glob, _ := NewGlob("*", false, false); glob.Matches("/tmp/test/ast") {
		t.Error("shouldn't the filename")
	}

	if glob, _ := NewGlob("**", false, false); !glob.Matches("/tmp/test/ast") {
		t.Error("should the filename")
	}

	if glob, _ := NewGlob("/var/log/*", false, false); !glob.Matches("/var/log/httpd") {
		t.Error("should match the filename")
	}

	if glob, _ := NewGlob("/var/**", false, false); !glob.Matches("/var/log/nginx") {
		t.Error("should match the filename")
	}

	if glob, _ := NewGlob("/var/*", false, false); glob.Matches("/var/log/nginx") {
		t.Error("shouldn't match the filename")
	}

	if glob, _ := NewGlob("/var/log", false, false); !glob.Matches("/var/log") {
		t.Error("should match the filename")
	}

	if glob, _ := NewGlob("/var/run", false, false); glob.Matches("/var/log") {
		t.Error("shouldn't match the filename")
	}

	if glob, _ := NewGlob("/var/run", false, false); glob.Matches("/var/run/httpd") {
		t.Error("shouldn't match the filename")
	}

	if glob, _ := NewGlob("/var/run/*", false, false); glob.Matches("abc") {
		t.Error("shouldn't match the filename")
	}

	if glob, _ := NewGlob("ab*", false, false); !glob.Matches("abc") {
		t.Error("should match the filename")
	}

	if glob, _ := NewGlob("*b*", false, false); !glob.Matches("abc") {
		t.Error("should match the filename")
	}

	if glob, _ := NewGlob("*d*", false, false); glob.Matches("abc") {
		t.Error("shouldn't match the filename")
	}

	if glob, _ := NewGlob("*/*/httpd", false, false); !glob.Matches("/var/log/httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("*/*/http*", false, false); !glob.Matches("/var/log/httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("httpd", false, false); !glob.Matches("httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("mysqld", false, false); glob.Matches("httpd") {
		t.Error("shouldn't contain the filename")
	}

	if glob, _ := NewGlob("/", false, false); glob.Matches("/httpd") {
		t.Error("shouldn't contain the filename")
	}

	if glob, _ := NewGlob("/*", false, false); !glob.Matches("/httpd") {
		t.Error("should contain the filename")
	}

	if glob, _ := NewGlob("/sys/fs/cgroup/*", false, false); !glob.Matches("/sys/fs/cgroup/") {
		t.Error("should contain the filename")
	}
}

func BenchmarkGlob(b *testing.B) {
	glob, err := NewGlob("*/*/http*/*b*/test/**", false, false)
	if err != nil {
		b.Fatal(err)
	}
	b.ResetTimer()

	for i := 0; i < b.N; i++ {
		if matches := glob.Matches("/var/log/httpd/abc/test/123"); !matches {
			b.Fatalf("glob should match")
		}
	}
}