abstract class MTimeProtectedFileStorageBase in Zircon Profile 8

Base test class for MTime protected storage.

Hierarchy

• class \Drupal\Tests\UnitTestCase extends \Drupal\Tests\PHPUnit_Framework_TestCase
  • class \Drupal\Tests\Component\PhpStorage\PhpStorageTestBase
    • class \Drupal\Tests\Component\PhpStorage\MTimeProtectedFileStorageBase

File

core/tests/Drupal/Tests/Component/PhpStorage/MTimeProtectedFileStorageBase.php, line 13

Contains \Drupal\Tests\Component\PhpStorage\MTimeProtectedFileStorageBase.

Namespace

Drupal\Tests\Component\PhpStorage

abstract class MTimeProtectedFileStorageBase extends PhpStorageTestBase {

  /**
   * The PHP storage class to test.
   *
   * This should be overridden by extending classes.
   */
  protected $storageClass;

  /**
   * The secret string to use for file creation.
   *
   * @var string
   */
  protected $secret;

  /**
   * Test settings to pass to storage instances.
   *
   * @var array
   */
  protected $settings;

  /**
   * {@inheritdoc}
   */
  protected function setUp() {
    parent::setUp();
    $this->secret = $this
      ->randomMachineName();
    $this->settings = array(
      'directory' => $this->directory,
      'bin' => 'test',
      'secret' => $this->secret,
    );
  }

  /**
   * Tests basic load/save/delete operations.
   *
   * @covers ::load
   * @covers ::save
   * @covers ::delete
   * @covers ::exists
   */
  public function testCRUD() {
    $php = new $this->storageClass($this->settings);
    $this
      ->assertCRUD($php);
  }

  /**
   * Tests the security of the MTimeProtectedFileStorage implementation.
   *
   * We test two attacks: first changes the file mtime, then the directory
   * mtime too.
   *
   * We need to delay over 1 second for mtime test.
   * @medium
   */
  public function testSecurity() {
    $php = new $this->storageClass($this->settings);
    $name = 'simpletest.php';
    $php
      ->save($name, '<?php');
    $expected_root_directory = $this->directory . '/test';
    if (substr($name, -4) === '.php') {
      $expected_directory = $expected_root_directory . '/' . substr($name, 0, -4);
    }
    else {
      $expected_directory = $expected_root_directory . '/' . $name;
    }
    $directory_mtime = filemtime($expected_directory);
    $expected_filename = $expected_directory . '/' . hash_hmac('sha256', $name, $this->secret . $directory_mtime) . '.php';

    // Ensure the file exists and that it and the containing directory have
    // minimal permissions. fileperms() can return high bits unrelated to
    // permissions, so mask with 0777.
    $this
      ->assertTrue(file_exists($expected_filename));
    $this
      ->assertSame(fileperms($expected_filename) & 0777, 0444);
    $this
      ->assertSame(fileperms($expected_directory) & 0777, 0777);

    // Ensure the root directory for the bin has a .htaccess file denying web
    // access.
    $this
      ->assertSame(file_get_contents($expected_root_directory . '/.htaccess'), call_user_func(array(
      $this->storageClass,
      'htaccessLines',
    )));

    // Ensure that if the file is replaced with an untrusted one (due to another
    // script's file upload vulnerability), it does not get loaded. Since mtime
    // granularity is 1 second, we cannot prevent an attack that happens within
    // a second of the initial save().
    sleep(1);
    for ($i = 0; $i < 2; $i++) {
      $php = new $this->storageClass($this->settings);
      $GLOBALS['hacked'] = FALSE;
      $untrusted_code = "<?php\n" . '$GLOBALS["hacked"] = TRUE;';
      chmod($expected_directory, 0700);
      chmod($expected_filename, 0700);
      if ($i) {

        // Now try to write the file in such a way that the directory mtime
        // changes and invalidates the hash.
        file_put_contents($expected_filename . '.tmp', $untrusted_code);
        rename($expected_filename . '.tmp', $expected_filename);
      }
      else {

        // On the first try do not change the directory mtime but the filemtime
        // is now larger than the directory mtime.
        file_put_contents($expected_filename, $untrusted_code);
      }
      chmod($expected_filename, 0400);
      chmod($expected_directory, 0100);
      $this
        ->assertSame(file_get_contents($expected_filename), $untrusted_code);
      $this
        ->assertSame($php
        ->exists($name), $this->expected[$i]);
      $this
        ->assertSame($php
        ->load($name), $this->expected[$i]);
      $this
        ->assertSame($GLOBALS['hacked'], $this->expected[$i]);
    }
    unset($GLOBALS['hacked']);
  }

}

Members

Name	Modifiers	Type	Description	Overrides
MTimeProtectedFileStorageBase::$secret	protected	property	The secret string to use for file creation.
MTimeProtectedFileStorageBase::$settings	protected	property	Test settings to pass to storage instances.
MTimeProtectedFileStorageBase::$storageClass	protected	property	The PHP storage class to test.	2
MTimeProtectedFileStorageBase::setUp	protected	function	Overrides PhpStorageTestBase::setUp
MTimeProtectedFileStorageBase::testCRUD	public	function	Tests basic load/save/delete operations.
MTimeProtectedFileStorageBase::testSecurity	public	function	Tests the security of the MTimeProtectedFileStorage implementation.
PhpStorageTestBase::$directory	protected	property	A unique per test class directory path to test php storage.
PhpStorageTestBase::additionalAssertCRUD	protected	function	Additional asserts to be run.
PhpStorageTestBase::assertCRUD	public	function	Assert that a PHP storage's load/save/delete operations work.
UnitTestCase::$randomGenerator	protected	property	The random generator.
UnitTestCase::$root	protected	property	The app root.
UnitTestCase::assertArrayEquals	protected	function	Asserts if two arrays are equal by sorting them first.
UnitTestCase::getBlockMockWithMachineName	protected	function	Mocks a block with a block plugin.
UnitTestCase::getClassResolverStub	protected	function	Returns a stub class resolver.
UnitTestCase::getConfigFactoryStub	public	function	Returns a stub config factory that behaves according to the passed in array.
UnitTestCase::getConfigStorageStub	public	function	Returns a stub config storage that returns the supplied configuration.
UnitTestCase::getContainerWithCacheTagsInvalidator	protected	function	Sets up a container with a cache tags invalidator.
UnitTestCase::getRandomGenerator	protected	function	Gets the random generator for the utility methods.
UnitTestCase::getStringTranslationStub	public	function	Returns a stub translation manager that just returns the passed string.
UnitTestCase::randomMachineName	public	function	Generates a unique random string containing letters and numbers.