Publish Vulpes Preview 15 sources for desktop, Android and Tundra

Share Gaia assets and adapters, keep private profiles and development documents local, and update both public READMEs.

tundra/tests/test_persistent_state.py

@@ -0,0 +1,52 @@
+# SPDX-License-Identifier: MPL-2.0
+import json
+from pathlib import Path
+import sys
+import tempfile
+import unittest
+from unittest.mock import patch
+sys.path.insert(0,str(Path(__file__).resolve().parents[1]/'tools'))
+import persistent_state as state
+
+
+class PersistentStateTests(unittest.TestCase):
+    def setUp(self):
+        self.temp=tempfile.TemporaryDirectory();self.addCleanup(self.temp.cleanup)
+        self.root=Path(self.temp.name)
+        self.identifier='2a29bca9-5fcb-48a1-a287-dc975f56b353'
+        self.image=self.root/(self.identifier+'.ext4')
+        with self.image.open('wb') as output:output.truncate(512*1024**2)
+        self.value={'schema':1,'device':'sargo','uuid':self.identifier,
+                    'image':self.image.name,'bytes':512*1024**2,
+                    'imageSha256':'a'*64,'systemImageSha256':'b'*64,
+                    'filesystemCheckPassed':True}
+        self.path=self.root/'state.json'
+
+    def validate(self):
+        self.path.write_text(json.dumps(self.value))
+        with patch.object(state,'digest',return_value='a'*64):
+            return state.validate_manifest(self.path)
+
+    def test_valid_prepared_state(self):
+        self.assertEqual(self.validate()['uuid'],self.identifier)
+
+    def test_path_escape_and_shell_input_rejected(self):
+        for key,value in [('image','../../root.img'),('uuid','$(command)'),('systemImageSha256','; reboot')]:
+            old=self.value[key];self.value[key]=value
+            with self.assertRaises(ValueError):self.validate()
+            self.value[key]=old
+
+    def test_size_change_rejected(self):
+        self.image.write_bytes(b'changed')
+        with self.assertRaisesRegex(ValueError,'changed'):self.validate()
+
+    def test_symlink_rejected(self):
+        target=self.root/'other';self.image.rename(target);self.image.symlink_to(target)
+        with self.assertRaisesRegex(ValueError,'changed'):self.validate()
+
+    def test_missing_fs_check_rejected(self):
+        self.value['filesystemCheckPassed']=False
+        with self.assertRaisesRegex(ValueError,'verification'):self.validate()
+
+
+if __name__=='__main__':unittest.main()