harald
1cdb30147b
Sanctum Release / Build & Release (Windows x86_64) (push) Waiting to run
- R-01: Bereinigung verbliebener Restbehauptungen in Doku und Code (LEGAL.md, README.md, QUICKSTART.md, main.rs, crypto/storage/recovery/verify.rs) - R-02: Lückenloser Carrier-Schutz in SanctumFs::copy (Quelle & Ziel) und sync (Pull-Skip & Push-Schutz) - R-03: Shared Dateinamen-Validierung (validate_node_name) in pathutil.rs, durchgesetzt in storage.rs und vfs.rs - R-04: Fail-closed Release-Packaging & obligatorische Minisign-Signatur in CI (.gitea/workflows/release.yaml) und Scripts - R-05: Session-Token Beseitigung im argv: In-Process Win32 WNetAddConnection2W/WNetCancelConnection2W, kein gio argv-Token, Multi-Auth HTTP Middleware (Basic Auth, X-Sanctum-Token, Path-Fallback) mit 401 WWW-Authenticate - R-06: Sofortiges Löschen von SANCTUM_RECOVERY_KEY aus der Prozessumgebung
100 lines
3.5 KiB
Rust
100 lines
3.5 KiB
Rust
use sanctum::sync::validate_node_name;
|
|
|
|
#[test]
|
|
fn test_validate_node_name_rejections() {
|
|
// 1. Leere Namen
|
|
assert!(validate_node_name("").is_err());
|
|
|
|
// 2. Relative Verzeichnisreferenzen
|
|
assert!(validate_node_name(".").is_err());
|
|
assert!(validate_node_name("..").is_err());
|
|
|
|
// 3. Pfadtrenner
|
|
assert!(validate_node_name("foo/bar").is_err());
|
|
assert!(validate_node_name("foo\\bar").is_err());
|
|
assert!(validate_node_name("../evil.exe").is_err());
|
|
assert!(validate_node_name("..\\evil.exe").is_err());
|
|
assert!(validate_node_name("/root_file").is_err());
|
|
|
|
// 4. Null-Bytes
|
|
assert!(validate_node_name("test\0file.txt").is_err());
|
|
|
|
// 5. Steuerzeichen (< 0x20)
|
|
assert!(validate_node_name("line\nbreak.txt").is_err());
|
|
assert!(validate_node_name("carriage\rreturn.txt").is_err());
|
|
assert!(validate_node_name("tab\tseparated.txt").is_err());
|
|
assert!(validate_node_name("control\x01char.txt").is_err());
|
|
|
|
// 6. Windows reservierte Gerätenamen
|
|
let reserved_names = [
|
|
"CON", "con", "prn", "PRN", "aux", "AUX", "nul", "NUL",
|
|
"COM1", "com2", "COM9", "lpt1", "LPT2", "LPT9",
|
|
"con.txt", "aux.dat", "NUL.tar.gz", "com1.log", "prn.pdf",
|
|
];
|
|
for res in reserved_names {
|
|
assert!(
|
|
validate_node_name(res).is_err(),
|
|
"Reservierter Name '{}' muss abgewiesen werden",
|
|
res
|
|
);
|
|
}
|
|
}
|
|
|
|
#[test]
|
|
fn test_validate_node_name_accepted() {
|
|
let valid_names = [
|
|
"document.pdf",
|
|
"my_notes_2026.txt",
|
|
"archive.tar.gz",
|
|
"spaces are allowed.docx",
|
|
"unicode_äöü_ß_test.rs",
|
|
"hyphens-and_underscores.json",
|
|
"file (1).jpg",
|
|
"normal_file",
|
|
];
|
|
for valid in valid_names {
|
|
assert!(
|
|
validate_node_name(valid).is_ok(),
|
|
"Gültiger Name '{}' sollte akzeptiert werden",
|
|
valid
|
|
);
|
|
}
|
|
}
|
|
|
|
#[test]
|
|
fn test_storage_create_and_rename_reject_invalid_names() {
|
|
let mut path = std::env::temp_dir();
|
|
path.push(format!("sanctum_test_pathutil_{}.sanctum", std::process::id()));
|
|
if path.exists() {
|
|
let _ = std::fs::remove_file(&path);
|
|
}
|
|
|
|
let salt = sanctum::crypto::generate_salt();
|
|
let kdf_params = sanctum::crypto::KdfParams {
|
|
memory_cost: sanctum::crypto::MIN_MEMORY_COST_KIB,
|
|
time_cost: sanctum::crypto::MIN_TIME_COST,
|
|
parallelism: 1,
|
|
};
|
|
let kek = sanctum::crypto::derive_kek("Pass1234!", &salt, &kdf_params).unwrap();
|
|
let dek = sanctum::crypto::generate_dek();
|
|
let (wrapped, nonce, tag) = sanctum::crypto::wrap_dek(&kek, &dek).unwrap();
|
|
|
|
let db = sanctum::storage::Database::open(&path).unwrap();
|
|
db.init_schema(&salt, &kdf_params, &wrapped, &nonce, &tag).unwrap();
|
|
|
|
// create_node_in_vault mit ungültigem Namen muss scheitern
|
|
assert!(db.create_node_in_vault(0, 1, "..", false, &dek).is_err());
|
|
assert!(db.create_node_in_vault(0, 1, "CON", false, &dek).is_err());
|
|
assert!(db.create_node_in_vault(0, 1, "sub/dir", false, &dek).is_err());
|
|
|
|
// Gültige Datei erstellen
|
|
let valid_node = db.create_node_in_vault(0, 1, "valid.txt", false, &dek).unwrap();
|
|
|
|
// rename_node_in_vault mit ungültigem Namen muss scheitern
|
|
assert!(db.rename_node_in_vault(valid_node.id, 1, "..", 0, &dek).is_err());
|
|
assert!(db.rename_node_in_vault(valid_node.id, 1, "AUX", 0, &dek).is_err());
|
|
assert!(db.rename_node_in_vault(valid_node.id, 1, "bad\\name", 0, &dek).is_err());
|
|
|
|
let _ = std::fs::remove_file(&path);
|
|
}
|