|
| 1 | +{-# LANGUAGE QuasiQuotes #-} |
| 2 | +{-# LANGUAGE TemplateHaskell #-} |
| 3 | + |
| 4 | +module Reachability.UploadSpec (spec) where |
| 5 | + |
| 6 | +import Analysis.FixtureUtils (FixtureEnvironment (..), TestC, testRunnerWithLogger, withResult) |
| 7 | +import App.Fossa.Analyze.Project (ProjectResult (..)) |
| 8 | +import App.Fossa.Analyze.Types ( |
| 9 | + AnalysisScanResult (..), |
| 10 | + DiscoveredProjectIdentifier (..), |
| 11 | + DiscoveredProjectScan (..), |
| 12 | + ) |
| 13 | +import App.Fossa.Reachability.Jar (callGraphFromJar) |
| 14 | +import App.Fossa.Reachability.Types ( |
| 15 | + CallGraphAnalysis (..), |
| 16 | + ContentRef (..), |
| 17 | + ParsedJar (..), |
| 18 | + SourceUnitReachability (..), |
| 19 | + ) |
| 20 | +import App.Fossa.Reachability.Upload ( |
| 21 | + analyzeForReachability, |
| 22 | + callGraphOf, |
| 23 | + ) |
| 24 | +import Data.ByteString.Lazy qualified as LB |
| 25 | +import Data.Foldable (for_) |
| 26 | +import Data.String.Conversion (toText) |
| 27 | +import Data.Text (Text) |
| 28 | +import Data.Text.Encoding qualified as TL |
| 29 | +import Diag.Result (Result (..)) |
| 30 | +import Graphing (empty) |
| 31 | +import Path ( |
| 32 | + Abs, |
| 33 | + Dir, |
| 34 | + File, |
| 35 | + Path, |
| 36 | + Rel, |
| 37 | + mkRelDir, |
| 38 | + mkRelFile, |
| 39 | + (</>), |
| 40 | + ) |
| 41 | +import Path.IO qualified as PIO |
| 42 | +import Test.Hspec (Spec, describe, it, runIO, shouldBe) |
| 43 | +import Text.RawString.QQ (r) |
| 44 | +import Types ( |
| 45 | + DiscoveredProjectType (MavenProjectType), |
| 46 | + GraphBreadth (..), |
| 47 | + ) |
| 48 | + |
| 49 | +java8 :: FixtureEnvironment |
| 50 | +java8 = NixEnv ["jdk8"] |
| 51 | + |
| 52 | +java11 :: FixtureEnvironment |
| 53 | +java11 = NixEnv ["jdk11"] |
| 54 | + |
| 55 | +java17 :: FixtureEnvironment |
| 56 | +java17 = NixEnv ["jdk17"] |
| 57 | + |
| 58 | +java21 :: FixtureEnvironment |
| 59 | +java21 = NixEnv ["jdk21"] |
| 60 | + |
| 61 | +run :: FixtureEnvironment -> TestC IO a -> IO (Result a) |
| 62 | +run env act = testRunnerWithLogger act env |
| 63 | + |
| 64 | +spec :: Spec |
| 65 | +spec = describe "Reachability" $ do |
| 66 | + describe "callGraphFromJar" $ do |
| 67 | + jarFile <- runIO sampleJarFile |
| 68 | + for_ |
| 69 | + [ java8 |
| 70 | + , java11 |
| 71 | + , java17 |
| 72 | + , java21 |
| 73 | + ] |
| 74 | + $ \env -> do |
| 75 | + it ("should compute in java: " <> show env) $ do |
| 76 | + let expected = Just (sampleJarParsed jarFile) |
| 77 | + res <- run env $ callGraphFromJar jarFile |
| 78 | + |
| 79 | + withResult res $ \_ res' -> res' `shouldBe` expected |
| 80 | + |
| 81 | + describe "callGraphOf" $ do |
| 82 | + projDir <- (</> sampleMavenProjectDir) <$> runIO PIO.getCurrentDir |
| 83 | + jarFile <- (</> sampleMavenProjectJar) <$> runIO PIO.getCurrentDir |
| 84 | + |
| 85 | + it "should retrieve call graph" $ do |
| 86 | + let expected = Just (mavenCompleteScanUnit projDir jarFile) |
| 87 | + resp <- run java8 $ callGraphOf (mavenCompleteScan projDir) |
| 88 | + withResult resp $ \_ res -> res `shouldBe` expected |
| 89 | + |
| 90 | + describe "analyzeForReachability" $ do |
| 91 | + projDir <- (</> sampleMavenProjectDir) <$> runIO PIO.getCurrentDir |
| 92 | + jarFile <- (</> sampleMavenProjectJar) <$> runIO PIO.getCurrentDir |
| 93 | + |
| 94 | + it "should return analyzed reachability unit" $ do |
| 95 | + let expected = [mavenCompleteScanUnit projDir jarFile] |
| 96 | + let analysisResult = |
| 97 | + AnalysisScanResult |
| 98 | + [mavenCompleteScan projDir] |
| 99 | + successNothing |
| 100 | + successNothing |
| 101 | + successNothing |
| 102 | + successNothing |
| 103 | + successNothing |
| 104 | + |
| 105 | + analyzed <- run java8 $ analyzeForReachability analysisResult |
| 106 | + withResult analyzed $ \_ analyzed' -> analyzed' `shouldBe` expected |
| 107 | + |
| 108 | +sampleMavenProjectDir :: Path Rel Dir |
| 109 | +sampleMavenProjectDir = $(mkRelDir "test/Reachability/testdata/maven-default/") |
| 110 | + |
| 111 | +sampleMavenProjectJar :: Path Rel File |
| 112 | +sampleMavenProjectJar = $(mkRelFile "test/Reachability/testdata/maven-default/target/project-1.0.0.jar") |
| 113 | + |
| 114 | +mavenCompleteScan :: Path Abs Dir -> DiscoveredProjectScan |
| 115 | +mavenCompleteScan dir = mkDiscoveredProjectScan MavenProjectType dir Complete |
| 116 | + |
| 117 | +mavenCompleteScanUnit :: Path Abs Dir -> Path Abs File -> SourceUnitReachability |
| 118 | +mavenCompleteScanUnit projDir jarFile = |
| 119 | + mkReachabilityUnit |
| 120 | + projDir |
| 121 | + [ ParsedJar |
| 122 | + jarFile |
| 123 | + (ContentRaw sampleJarParsedContent') |
| 124 | + ] |
| 125 | + |
| 126 | +mkDiscoveredProjectScan :: DiscoveredProjectType -> Path Abs Dir -> GraphBreadth -> DiscoveredProjectScan |
| 127 | +mkDiscoveredProjectScan projectType dir breadth = |
| 128 | + Scanned |
| 129 | + (DiscoveredProjectIdentifier dir projectType) |
| 130 | + ( Success |
| 131 | + [] |
| 132 | + (ProjectResult projectType dir empty breadth mempty) |
| 133 | + ) |
| 134 | + |
| 135 | +sampleJarFile :: IO (Path Abs File) |
| 136 | +sampleJarFile = do |
| 137 | + cwd <- PIO.getCurrentDir |
| 138 | + pure (cwd </> $(mkRelFile "test/Reachability/testdata/sample.jar")) |
| 139 | + |
| 140 | +successNothing :: Result (Maybe a) |
| 141 | +successNothing = Success [] Nothing |
| 142 | + |
| 143 | +mkReachabilityUnit :: Path Abs Dir -> [ParsedJar] -> SourceUnitReachability |
| 144 | +mkReachabilityUnit dir jars = |
| 145 | + SourceUnitReachability |
| 146 | + "maven" |
| 147 | + (toText dir) |
| 148 | + (toText dir) |
| 149 | + [] |
| 150 | + [] |
| 151 | + (JarAnalysis jars) |
| 152 | + |
| 153 | +sampleJarParsed :: Path Abs File -> ParsedJar |
| 154 | +sampleJarParsed path = |
| 155 | + ParsedJar |
| 156 | + { parsedJarPath = path |
| 157 | + , parsedJarContent = ContentRaw sampleJarParsedContent' |
| 158 | + } |
| 159 | + |
| 160 | +sampleJarParsedContent :: Text |
| 161 | +sampleJarParsedContent = |
| 162 | + [r|C:vuln.project.sample.App java.lang.Object |
| 163 | +C:vuln.project.sample.App java.net.URI |
| 164 | +C:vuln.project.sample.App java.lang.System |
| 165 | +C:vuln.project.sample.App vuln.project.sample.App |
| 166 | +C:vuln.project.sample.App java.io.PrintStream |
| 167 | +C:vuln.project.sample.App org.dom4j.io.SAXReader |
| 168 | +C:vuln.project.sample.App java.lang.Exception |
| 169 | +C:vuln.project.sample.App org.dom4j.DocumentException |
| 170 | +M:vuln.project.sample.App:<init>() (O)java.lang.Object:<init>() |
| 171 | +M:vuln.project.sample.App:main(java.lang.String[]) (O)java.net.URI:<init>(java.lang.String) |
| 172 | +M:vuln.project.sample.App:main(java.lang.String[]) (M)java.net.URI:toURL() |
| 173 | +M:vuln.project.sample.App:main(java.lang.String[]) (S)vuln.project.sample.App:parse(java.net.URL) |
| 174 | +M:vuln.project.sample.App:main(java.lang.String[]) (M)java.io.PrintStream:println(java.lang.Object) |
| 175 | +M:vuln.project.sample.App:parse(java.net.URL) (O)org.dom4j.io.SAXReader:<init>() |
| 176 | +M:vuln.project.sample.App:parse(java.net.URL) (M)org.dom4j.io.SAXReader:read(java.net.URL)|] |
| 177 | + |
| 178 | +sampleJarParsedContent' :: LB.ByteString |
| 179 | +sampleJarParsedContent' = LB.fromStrict . TL.encodeUtf8 $ sampleJarParsedContent |
0 commit comments