| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
This will allow the same script to be used to generate
Makefile-test-matrix.am.inc and its Meson equivalent.
Signed-off-by: Simon McVittie <smcv@collabora.com>
|
|
|
|
|
|
| |
This tests for invalid metadata, missing xa.metadata and mismatched
values in xa.metadata and the real metadata, including the embedded
null leading to the hidden permissions of CVE-2021-43860.
|
|
|
|
|
| |
This should ensure that https://github.com/flatpak/flatpak/issues/4618
stays fixed.
|
| |
|
|
|
|
|
|
|
| |
In particular, this checks that CVE-2017-5226, CVE-2019-10063 and
CVE-2021-41133 are still prevented.
Signed-off-by: Simon McVittie <smcv@collabora.com>
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
This is currently failing, but I believe that is caused by actual
bugs.
|
|
|
|
|
| |
The "flatpak mask" command needs to work for system installations, and
currently doesn't.
|
| |
|
|
|
|
|
| |
We no longer support unsigned summaries since we dropped the use
of the ostree-metadata branch for p2p.
|
|
|
|
|
|
|
|
|
| |
This removes the most basic codepaths for p2p installation, as well
as the tests for it. There still remains various codepaths that
looks as the collection id, these will be removed later.
This is the first step in dropping the p2p code and replacing it with
a simpler approach that focuses on the sideloading case only.
|
|
|
|
| |
We only do labels now, so no need to test both.
|
|
|
|
|
|
|
| |
Unfortunately we lose some error information when we pull multiple
refs, ending with a generic "something failed" error rather than the
401 error so in the p2p case we can't verify that we get the right
errors.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This test was intended to verify that updates from remote B can't
interfere with updates from remote A even if remote B maliciously sets
the same collection ID as remote A. However, the commits intended to
protect against this turned out to have nasty side effects and need to
be reverted.[1] A subsequent commit will revert the use of
OSTREE_REPO_PULL_FLAGS_MIRROR which means this attack is not exploitable
(since refs will be resolved using a refspec which includes the remote
name), at the cost of not supporting more than one remote having the
same collection ID configured. Since we don't support that, it doesn't
make sense to keep this unit test.
Also, the test seems to be failing.
[1] https://github.com/flatpak/flatpak/issues/3215
|
|
|
|
|
|
|
|
| |
We add socat to the test runtime, and then we use that to run a
test app outside the sandbox as if it was inside.
The testcase connects creates a monitor and ensure we properly get signals
for updates.
|
|
|
|
|
| |
Closes: #2978
Approved by: alexlarsson
|
|
|
|
|
|
|
|
| |
This test is meant to test the issue described in the message for the
commit "dir: Use the right keyring to verify P2P pulls".
Closes: #2705
Approved by: alexlarsson
|
|
|
|
|
|
|
|
|
|
|
| |
A *.flatpakrepo file in this directory will be automatically
added as a system remote with the basename (sans extension) as the
name unless that name already exist. Also, once this is done we
record the name in the repo config so that it is not applied again if
the remote is removed.
Closes: #2884
Approved by: alexlarsson
|
|
|
|
|
| |
Closes: #2657
Approved by: alexlarsson
|
|
|
|
|
| |
Closes: #2534
Approved by: alexlarsson
|
|
|
|
|
| |
Closes: #2534
Approved by: alexlarsson
|
|
|
|
|
|
|
|
| |
Also test that the overrides have the expected
effect in the sandbox, for some of them.
Closes: #2252
Approved by: matthiasclasen
|
|
|
|
|
|
|
| |
This exercises the various commandline options.
Closes: #2252
Approved by: matthiasclasen
|
| |
|
|
Several tests have alternative wrappers that just set some feature
flags. For instance to switch between user and system and with or
without deltas. This change makes those wrappers automatically
generated from a simple description of the features.
For example the test-run.sh test goes from:
- tests/test-run.sh \
- tests/test-run-system.sh \
- tests/test-run-deltas.sh \
- tests/test-run-system-deltas.sh \
to
+ tests/test-run.sh{{user+system},{nodeltas+deltas}} \
There is some complexity here because the TESTS variable in automake
can't be runtime generated, so we rewrite it during "make
update-test-matrix" and commit the result to git.
The way it works is that make update-test-matrix takes the
TEST_MATRIX_SOURCE list, passes it to tests/expand-test-matrix.sh
which generates all the combinations in tests/Makefile-test-matrix.am.inc
where a test like tests/test-foo.sh{user+system} will get
converted to tests/test-foo.sh@user.wrap and tests/test-foo.sh@system.wrap.
We then have a pattern rule matchin tests/*.wrap which will generate
a wrapper that sets the right environment flags based on $0 and then
spawns the wrapper.
Closes: #2170
Approved by: alexlarsson
|