29 lines
604 B
Go
29 lines
604 B
Go
package debug
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func TestFilesystemRecorderWritesWithinTraceRoot(t *testing.T) {
|
|
root := t.TempDir()
|
|
recorder, err := NewFilesystemRecorder(root)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := recorder.WriteBytes("attempt/data", []byte("payload")); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
info, err := os.Stat(filepath.Join(root, "attempt", "data"))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if info.Mode().Perm() != 0o600 {
|
|
t.Fatalf("mode=%#o", info.Mode().Perm())
|
|
}
|
|
if err := recorder.WriteBytes("../outside", nil); err == nil {
|
|
t.Fatal("accepted traversal")
|
|
}
|
|
}
|