66 lines
17 KiB
Plaintext
66 lines
17 KiB
Plaintext
 
|
§
|
|||
|
|
F gjÂ$ ã óÞ — d Z ddlmZ ddlZddlZddlZddlZddlZddl Z ddl
|
|||
|
|
Z
|
|||
|
|
ej ej
|
|||
|
|
e¦ « ¦ « Zej dej ed¦ « ¦ « Zej e¦ « Zeej d< ej e¦ « ej d¦ « Ze ej ¦ « ¦ « e ej ¦ « e
|
|||
|
|
j e e!d¦ « ¦ « ¬¦ « j Z" e
|
|||
|
|
j e e!dd ¦ « ¦ « ¬¦ « j Z# G d
|
|||
|
|
„ d ¦ « Z$d+d,d„Z%d+d-d„Z&d.d/d „Z'd0d „Z(d1d!„Z) G d"„ d#e j* ¦ « Z+ G d$„ d%e j* ¦ « Z, G d&„ d'e j* ¦ « Z- G d(„ d)e j* ¦ « Z.e/d*k r e j0 ¦ « dS dS )2ut Unit tests for the RemSound relay's address-proof, per-IP cap, and eviction logic.
|
|||
|
|
|
|||
|
|
The relay ships to the Pi and auto-updates every user, but its branch logic (cookie verify,
|
|||
|
|
watch-only vs enforce, per-IP cap across v1+v2, NAT-rebind reset, forged-BYE rejection) had no
|
|||
|
|
automated coverage — a one-line regression there would sail past the C# gate and re-open the
|
|||
|
|
reflection / occupation / takeover surface the 2026-07-27 address-proof was built to close. These
|
|||
|
|
tests exercise that logic directly with a fake socket, no network, no real Python needed on the Pi.
|
|||
|
|
|
|||
|
|
Run: py -m unittest test_relay (from the server/ folder)
|
|||
|
|
é )Ú annotationsNÚremsound_relayzremsound-relay.pyzremsound-relay-testé ©Úbytesé c ó — e Zd ZdZd„ Zd„ ZdS )Ú
|
|||
|
|
FakeSocketzVRecords every sendto so a test can inspect what the relay emitted (cookies, forwards).c ó — g | _ d S ©N)Úsent)Úselfs ú%D:\proj\RemSound\server\test_relay.pyÚ__init__zFakeSocket.__init__) s
|
|||
|
|
€ Ø9;ˆŒ ˆ ˆ ó c ór — | j t |¦ « |f¦ « t |¦ « S r )r
|
|||
|
|
Úappendr Úlen)r ÚdataÚaddrs r ÚsendtozFakeSocket.sendto, s/ € Ø Œ ×Ò�% ™+œ+ tÐ,Ñ-Ô-Ð-Ý�4‰yŒyÐr N)Ú__name__Ú
|
|||
|
|
__module__Ú __qualname__Ú__doc__r r © r r r
|
|||
|
|
r
|
|||
|
|
& s8 € € € € € Ø`Ð`ð<ð <ð <ðð ð ð ð r r
|
|||
|
|
r é Úpkt_typeÚintÚpayloadr Ú stream_idÚseqÚreturnc ó° — t j t t j | g¦ « z t j d|¦ « z t j d|¦ « z |z S ©Nz<Hz<I)ÚrelayÚMAGICr Ú
|
|||
|
|
V1_VERSIONÚstructÚpack)r r r! r" s r Ú v1_packetr+ 1 sL € Ý Œ;�¥Ô 0°(Ð ;Ñ<Ô<Ñ <½v¼{È4ÐQZÑ?[Ô?[Ñ [Õ^dÔ^iÐjnÐpsÑ^tÔ^tÑ tÐw~Ñ ~Ð~r Ú client_idc ó¶ — t j t t j | g¦ « z t j d|¦ « z t j d|¦ « z |z |z S r% )r& r' r Ú
|
|||
|
|
V2_VERSIONr) r* )r r, r r! r" s r Ú v2_packetr/ 5 sW € Ý ŒK�%¥Ô!1°8Ð <Ñ=Ô=Ñ =ÅÄ ÈDÐR[Ñ@\Ô@\Ñ \ÝŒk˜$ Ñ$Ô$ñ
|
|||
|
|
%Ø'0ñ
|
|||
|
|
1Ø3:ñ
|
|||
|
|
;ð <r Fé
|
|||
|
|
Úrequire_addr_checkÚboolÚ max_clientsc ó` — t t ¦ « t || ¬¦ « S )N©r1 )r& ÚRelayr
|
|||
|
|
Ú_LOG)r1 r3 s r Ú
|
|||
|
|
make_relayr8 : s! € Ý �;Š;•z‘|”|¥T¨;ÐK]ˆ;Ñ ^Ô ^Ð^r Úsockú bytes | Nonec ó — t | j ¦ « D ]x\ }}||k rmt |¦ « t j t j z k rC|d t j k r-|t j t j t j z … c S ŒydS )z_The most recent address-proof cookie the relay sent to addr (the 16 bytes after the v1 header).é N)Úreversedr
|
|||
|
|
r r& Ú
|
|||
|
|
V1_HEADER_LENÚADDR_CHECK_COOKIE_LENÚTYPE_ADDR_CHECK)r9 r r Útos r Úcookie_sent_torB > s„ € å ˜TœYÑ'Ô'ð _ð _‰ˆˆbØ
|
|||
|
|
�Š:ˆ:�#˜d™)œ)¥uÔ':½UÔ=XÑ'XÒXÐXÐ]aÐbcÔ]dÕhmÔh}Ò]}Ð]}Ø�Ô+EÔ,?Å%ÔB]Ñ,]Ð]Ô^Ð ^Ð ^Ð ^øØ ˆ4r c óH ‡‡— t ˆˆfd„| j D ¦ « ¦ « S )zXTrue if a packet carrying payload was forwarded to addr (ignores the cookie challenges).c 3 ó^ •K — | ]'\ }}|‰k o‰|v o|d t j k V — Œ(dS )r< N)r& r@ )Ú.0r rA r r s €€r ú <genexpr>z forwarded_to.<locals>.<genexpr>H sH øè è € ÐmÐmÑW_ÐW[Ð]_ˆr�TŠzÐR˜g¨˜oÐR°$°q´'½UÔ=RÒ2RÐmÐmÐmÐmÐmÐmr )Úanyr
|
|||
|
|
)r9 r r s ``r Ú forwarded_torH F s. øø€ å ÐmÐmÐmÐmÐmÐcgÔclÐmÑmÔmÑ mÔ mÐmr c ó$ — e Zd ZdZd„ Zd„ Zd„ ZdS )Ú AddrCheckV1zWThe shipping RemSound client is v1-framed (pairwise); these are the load-bearing cases.c óÒ — t ¦ « }d\ }}| t t j d¦ « |¦ « | t t j d¦ « |¦ « t |j |¦ « }| |d¦ « | t t j d¦ « |¦ « | |j
|
|||
|
|
j dd¦ « | t t j |¦ « |¦ « | t t j |¦ « |¦ « | |j
|
|||
|
|
j dd ¦ « d S )
|
|||
|
|
N©)ú10.0.0.1i‰ )ú10.0.0.2iŠ s aud-as aud-bz;the relay must challenge a newly seen address with a cookies r z)a wrong cookie must not verify an addressr z6echoing the right cookie verifies once, not repeatedly) r8 Ú
|
|||
|
|
handle_packetr+ r& Ú
|
|||
|
|
TYPE_AUDIOrB r9 ÚassertIsNotNoner@ Ú assertEqualÚstatsÚaddr_checks_verified©r ÚrÚaÚbÚcookie_as r Ú/test_cookie_issued_on_join_and_verifies_on_echoz;AddrCheckV1.test_cookie_issued_on_join_and_verifies_on_echoN s# € Ý ‰LŒLˆØ5‰ˆˆ1Ø �Š� ¥%Ô"2°HÑ=Ô=¸qÑAÔAÐAØ �Š� ¥%Ô"2°HÑ=Ô=¸qÑAÔAÐAÝ! !¤&¨!Ñ,Ô,ˆØ × Ò ˜XÐ'dÑeÔeÐeà �Š� ¥%Ô"7¸ ÑFÔFÈÑJÔJÐJØ ×Ò˜œÔ5°qÐ:eÑfÔfÐfà �Š� ¥%Ô"7¸ÑBÔBÀAÑFÔFÐFØ �Š� ¥%Ô"7¸ÑBÔBÀAÑFÔFÐFØ ×Ò˜œÔ5°qÐ:rÑsÔsÐsÐsÐsr c ó´ — t d¬¦ « }d\ }}| t t j d¦ « |¦ « | t t j d¦ « |¦ « t |j |¦ « }| |d¦ « |j j ¦ « | t t j d¦ « |¦ « |
|
|||
|
|
t |j |d¦ « d¦ « | |j
|
|||
|
|
j d d
|
|||
|
|
¦ « | t t j |¦ « |¦ « |j j ¦ « | t t j d ¦ « |¦ « | t |j |d ¦ « d ¦ « d S )
|
|||
|
|
NTr5 rL ó join-aó join-bz1A must have been challenged with a cookie on joins SECRET-AUDIOz?unverified A must NOT receive forwarded audio under enforcementr z$the withheld forward must be counteds
|
|||
|
|
NOW-DELIVEREDz/a verified address must receive forwarded audio)r8 rO r+ r& rP rB r9 rQ r
|
|||
|
|
ÚclearÚ assertFalserH Ú
|
|||
|
|
assertGreaterrS Úblocked_unverifiedr@ Ú
|
|||
|
|
assertTruerU s r Ú9test_enforce_blocks_unverified_then_forwards_after_verifyzEAddrCheckV1.test_enforce_blocks_unverified_then_forwards_after_verify] s� € Ý ¨$Ð /Ñ /Ô /ˆØ5‰ˆˆ1Ø �Š� ¥%Ô"2°IÑ>Ô>ÀÑBÔBÐBØ �Š� ¥%Ô"2°IÑ>Ô>ÀÑBÔBÐBÝ! !¤&¨!Ñ,Ô,ˆØ × Ò ˜XÐ'ZÑ[Ô[Ð[Ø ŒŒ ×ÒÑÔÐà �Š� ¥%Ô"2°OÑDÔDÀaÑHÔHÐHØ ×Ò� a¤f¨a° ÑAÔAð DEñ Fô Fð FØ ×Ò˜1œ7Ô5°qÐ:`ÑaÔaÐaà �Š� ¥%Ô"7¸ÑBÔBÀAÑFÔFÐFØ ŒŒ ×ÒÑÔÐØ �Š� ¥%Ô"2Ð4DÑEÔEÀqÑIÔIÐIØ �Š� Q¤V¨QÐ0@ÑAÔAÐCtÑuÔuÐuÐuÐur c óX — t d¬¦ « }d\ }}| t t j d¦ « |¦ « | t t j d¦ « |¦ « |j j ¦ « | t t j d¦ « |¦ « | t |j |d¦ « d¦ « |
|
|||
|
|
|j j dd ¦ « |
|
|||
|
|
|j j dd
|
|||
|
|
¦ « d S ) NFr5 rL r\ r] s WATCHEDz@watch-only mode must still forward (never break pre-5.6 clients)r z2watch-only must record who WOULD have been blockedz"watch-only must not actually block)r8 rO r+ r& rP r9 r
|
|||
|
|
r^ rb rH r` rS Úwould_block_unverifiedrR ra )r rV rW rX s r Ú0test_watch_only_forwards_but_records_would_blockz<AddrCheckV1.test_watch_only_forwards_but_records_would_blocko s € Ý ¨%Ð 0Ñ 0Ô 0ˆØ5‰ˆˆ1Ø �Š� ¥%Ô"2°IÑ>Ô>ÀÑBÔBÐBØ �Š� ¥%Ô"2°IÑ>Ô>ÀÑBÔBÐBØ ŒŒ ×ÒÑÔÐØ �Š� ¥%Ô"2°JÑ?Ô?ÀÑCÔCÐCØ �Š� Q¤V¨Q°
|
|||
|
|
Ñ;Ô;Ð=ñ Aô Að AØ ×Ò˜1œ7Ô9¸1Ð>rÑsÔsÐsØ ×Ò˜œÔ3°QÐ8\Ñ]Ô]Ð]Ð]Ð]r N)r r r r rZ rc rf r r r rJ rJ K sR € € € € € ØaÐað
|
|||
|
|
tð
|
|||
|
|
tð
|
|||
|
|
tð vð vð vð$ ^ð ^ð ^ð ^ð ^r rJ c ó — e Zd Zd„ Zd„ ZdS )Ú AddrCheckV2c ó¤ — t ¦ « }d\ }}| t t j t
|
|||
|
|
d¦ « |¦ « t
|
|||
|
|
|j |¦ « }| |¦ « | t t j
|
|||
|
|
|¦ « |¦ « | |j t j t
|
|||
|
|
¬¦ « j d¦ « | t t j t
|
|||
|
|
d¦ « |¦ « | |j t j t
|
|||
|
|
¬¦ « j d¦ « d S )N))ú10.0.0.9iq )rj ir ó ar z(a correct echo must verify the v2 clientz&an endpoint rebind must clear verified)r8 rO r/ r& rP ÚCIDrB r9 rQ r+ r@ rb Ú
|
|||
|
|
v2_clientsÚuuidÚUUIDÚverifiedr_ )r rV Úaddr1Úaddr2Úcookies r Ú test_rebind_resets_verificationz+AddrCheckV2.test_rebind_resets_verification| s € Ý ‰LŒLˆØ=‰ ˆˆuØ �Š� ¥%Ô"2µC¸Ñ>Ô>ÀÑFÔFÐFÝ ¤¨Ñ.Ô.ˆØ × Ò ˜VÑ$Ô$Ð$Ø �Š� ¥%Ô"7¸Ñ@Ô@À%ÑHÔHÐHØ �Š˜œ ¥T¤YµSÐ%9Ñ%9Ô%9Ô:ÔCÐEoÑpÔpÐpà �Š� ¥%Ô"2µC¸Ñ>Ô>ÀÑFÔFÐFØ ×Ò˜œ ¥d¤iµcÐ&:Ñ&:Ô&:Ô;ÔDÐFnÑoÔoÐoÐoÐor c óÊ — t ¦ « }d\ }}| t t j t
|
|||
|
|
d¦ « |¦ « | t t j t d¦ « |¦ « | t t j t
|
|||
|
|
¦ « |¦ « | t j
|