Permissions, RateControl and Auditing

2026-07-30 17:30:40 +00:00 · 2026-07-16 14:01:08 +03:00
parent 3a1b95dbc5
commit ba64a0c95a
62 changed files with 6095 additions and 2366 deletions
@@ -1,5 +1,6 @@
 using Esiur.Data;
 using Esiur.Net.Packets;
+using Esiur.Protocol;
 using Esiur.Resource;

 namespace Esiur.Tests.Unit;
@@ -52,4 +53,74 @@ public class ParserSecurityTests

        Assert.Throws<ParserLimitException>(() => Codec.ParseSync(data, 0, warehouse));
    }
+
+    [Fact]
+    public void TruMetadataParser_EnforcesConfiguredDepthInSyncParsing()
+    {
+        var warehouse = new Warehouse();
+        warehouse.Configuration.Parser.MaximumTypeMetadataDepth = 3;
+
+        var accepted = ParsedTdu.ParseSync(
+            ComposeTypedTdu(ComposeNestedTypeMetadata(3)),
+            0,
+            5,
+            warehouse);
+
+        Assert.Equal(TduClass.Typed, accepted.Class);
+        Assert.Throws<ParserLimitException>(() => ParsedTdu.ParseSync(
+            ComposeTypedTdu(ComposeNestedTypeMetadata(4)),
+            0,
+            6,
+            warehouse));
+    }
+
+    [Fact]
+    public async Task TruMetadataParser_EnforcesConnectionWarehouseDepthInAsyncParsing()
+    {
+        var warehouse = new Warehouse();
+        warehouse.Configuration.Parser.MaximumTypeMetadataDepth = 2;
+        var connection = new EpConnection();
+        await connection.Handle(
+            ResourceOperation.Configure,
+            new EpServerConnectionContext
+            {
+                Server = new EpServer(),
+                Warehouse = warehouse,
+            });
+
+        try
+        {
+            var data = ComposeTypedTdu(ComposeNestedTypeMetadata(3));
+
+            await Assert.ThrowsAsync<ParserLimitException>(async () =>
+                await ParsedTdu.ParseAsync(data, connection));
+        }
+        finally
+        {
+            connection.Destroy();
+        }
+    }
+
+    private static byte[] ComposeNestedTypeMetadata(int depth)
+    {
+        if (depth < 1)
+            throw new ArgumentOutOfRangeException(nameof(depth));
+
+        var metadata = new byte[depth];
+        Array.Fill(metadata, (byte)TruIdentifier.TypedList, 0, depth - 1);
+        metadata[^1] = (byte)TruIdentifier.Bool;
+        return metadata;
+    }
+
+    private static byte[] ComposeTypedTdu(byte[] metadata)
+    {
+        if (metadata.Length > byte.MaxValue)
+            throw new ArgumentOutOfRangeException(nameof(metadata));
+
+        var data = new byte[metadata.Length + 2];
+        data[0] = 0x88; // Typed TDU with a one-byte payload-length prefix.
+        data[1] = (byte)metadata.Length;
+        Buffer.BlockCopy(metadata, 0, data, 2, metadata.Length);
+        return data;
+    }
 }