use std::fs; use std::path::PathBuf; fn values(input: &str) -> std::collections::BTreeMap { input .split(';') .filter_map(|item| item.split_once('=')) .map(|(key, value)| (key.to_owned(), value.to_owned())) .collect() } fn evaluate(kind: &str, input: &str) -> &'static str { let values = values(input); match kind { "version" if matches!(input, "1" | "0" | "-1") => "valid", "version" => "invalid:unsupported_version", "page" => match values.get("limit").and_then(|value| value.parse::().ok()) { Some(limit) if (1..=100).contains(&limit) => "valid", _ => "invalid:invalid_limit", }, "manifest" if ["provider_url", "vm_address", "password", "private_key"] .iter() .any(|key| values.contains_key(*key)) => "invalid:forbidden_field", "manifest" if values.get("version").map(String::as_str) == Some("1") && values.contains_key("gateway_id") && values.get("grant").map_or(false, |value| value.len() >= 43) && values.get("purpose").map(String::as_str) == Some("launch") => "valid", "manifest" => "invalid:invalid_manifest", "clipboard" if values.get("encoding").map(String::as_str) == Some("utf-8") && !values.contains_key("file") => "valid", "clipboard" => "invalid:unsupported_clipboard", "event" if values.get("version").map(String::as_str) != Some("1") => { "invalid:unsupported_version" } "event" if values.get("after").and_then(|value| value.parse::().ok()).is_some() && values.get("earliest").and_then(|value| value.parse::().ok()).is_some() && values["after"].parse::().unwrap() > 0 && values["earliest"].parse::().unwrap() > 0 && values["after"].parse::().unwrap() < values["earliest"].parse::().unwrap() - 1 => { "invalid:gap" } "event" if values.get("payload_bytes").and_then(|value| value.parse::().ok()).map_or(true, |size| size > 16384) => { "invalid:payload_limit" } "event" if values.get("sequence").and_then(|value| value.parse::().ok()).map_or(true, |sequence| sequence < 1) || !values.contains_key("correlation_id") => "invalid:required", "event" => "valid", "tunnel" if matches!(values.get("offered").map(String::as_str), Some("1") | Some("0") | Some("-1")) && values.get("feature").map(String::as_str) == Some("control.v1") => "valid", "tunnel" if values.get("feature").map(String::as_str) != Some("control.v1") => { "invalid:unsupported_feature" } "tunnel" => "invalid:unsupported_version", "datagram" => classify_datagram(values.get("hex").map(String::as_str).unwrap_or_default()), "gateway_input" => classify_gateway_input(values.get("hex").map(String::as_str).unwrap_or_default()), "gateway_feedback" => classify_gateway_feedback(values.get("hex").map(String::as_str).unwrap_or_default()), "gateway_clipboard" if values.contains_key("file") => "invalid:forbidden", "gateway_clipboard" if matches!(values.get("direction").map(String::as_str), Some("client_to_provider") | Some("provider_to_client")) && values.get("encoding").map(String::as_str) == Some("utf-8") && values.get("loop_token").map_or(false, |value| (16..=128).contains(&value.len())) && values.get("text").map_or(false, |value| value.len() <= 65536) => "valid", "gateway_clipboard" => "invalid:clipboard", "gateway_clipboard_audit" if values.contains_key("text") => "invalid:forbidden", "gateway_clipboard_audit" if matches!(values.get("direction").map(String::as_str), Some("client_to_provider") | Some("provider_to_client")) && matches!(values.get("outcome").map(String::as_str), Some("forwarded") | Some("suppressed") | Some("rejected")) && matches!(values.get("reason").map(String::as_str), Some("forwarded") | Some("loop") | Some("policy") | Some("rate") | Some("provider") | Some("malformed")) && values.get("text_bytes").and_then(|value| value.parse::().ok()).map_or(false, |size| size <= 65536) => "valid", "gateway_clipboard_audit" => "invalid:clipboard_audit", _ => "invalid:unknown_kind", } } fn classify_gateway_input(encoded: &str) -> &'static str { let raw = match decode_hex(encoded) { Some(raw) => raw, None => return "invalid:hex", }; if raw.len() < 6 { return "invalid:truncated"; } if raw[0..4] != *b"VGI1" { return "invalid:magic"; } let kind = raw[4]; let body = &raw[6..]; if body.len() != raw[5] as usize { return "invalid:length"; } match kind { 1 if body.len() == 4 && body[0] <= 1 && (body[2] != 0 || body[3] != 0) => "valid", 1 => "invalid:field", 2 if body.len() != 3 => "invalid:length", 2 if body[0] > 1 || !(1..=5).contains(&body[1]) => "invalid:field", 2 if body[2] != 0 => "invalid:reserved", 2 => "valid", 3 if body.len() == 4 => "valid", 3 => "invalid:length", 4 if (1..=4).contains(&body.len()) && std::str::from_utf8(body).ok().map_or(false, |value| value.chars().count() == 1) => "valid", 4 => "invalid:utf8", 5 if body.len() != 17 => "invalid:length", 5 if body[0] > 15 => "invalid:field", 5 if body[1] == 0 && body[2] == 0 && body[3..].iter().any(|value| *value != 0) => "invalid:field", 5 => "valid", _ => "invalid:kind", } } fn classify_gateway_feedback(encoded: &str) -> &'static str { let raw = match decode_hex(encoded) { Some(raw) => raw, None => return "invalid:hex", }; if raw.len() < 8 { return "invalid:truncated"; } if raw[0..4] != *b"VGF1" { return "invalid:magic"; } let direction = raw[4]; let kind = raw[5]; let body = &raw[8..]; if body.len() != ((raw[6] as usize) << 8 | raw[7] as usize) { return "invalid:length"; } if direction > 1 { return "invalid:direction"; } if direction == 0 { if (0x10..=0x12).contains(&kind) { return "invalid:direction"; } return match kind { 1 if body.is_empty() => "valid", 1 => "invalid:length", 2 if valid_fec_status(body) => "valid", 2 => "invalid:field", _ => "invalid:type", }; } if kind == 1 || kind == 2 { return "invalid:direction"; } match kind { 0x10 if body.len() == 4 => "valid", 0x10 => "invalid:length", 0x11 if body.len() != 5 => "invalid:length", 0x11 if body[0] <= 15 => "valid", 0x11 => "invalid:field", 0x12 if body.len() != 1 => "invalid:length", 0x12 if body[0] <= 1 => "valid", 0x12 => "invalid:field", _ => "invalid:type", } } fn valid_fec_status(body: &[u8]) -> bool { body.len() == 21 && ((body[10] as u16) << 8 | body[11] as u16) > 0 && ((body[14] as u16) << 8 | body[15] as u16) <= ((body[10] as u16) << 8 | body[11] as u16) && ((body[16] as u16) << 8 | body[17] as u16) <= ((body[12] as u16) << 8 | body[13] as u16) && body[18] <= 100 && body[20] > 0 && body[19] < body[20] } fn decode_hex(input: &str) -> Option> { if input.len() % 2 != 0 { return None; } (0..input.len()) .step_by(2) .map(|index| u8::from_str_radix(&input[index..index + 2], 16).ok()) .collect() } fn classify_datagram(encoded: &str) -> &'static str { let raw = match decode_hex(encoded) { Some(raw) => raw, None => return "invalid:hex", }; if raw.len() < 21 { return "invalid:truncated"; } if raw[0..2] != *b"VD" { return "invalid:magic"; } if raw[2] != 1 { return "invalid:unsupported_version"; } let limit = match raw[3] { 1 => 1024, 2 => 2048, 3 => 65515, 10 | 11 | 12 => 1179, _ => return "invalid:unknown_channel", }; if raw[4] != 0 { return "invalid:flags"; } if raw[18] == 0 || raw[17] >= raw[18] { return "invalid:fragment"; } let payload_length = ((raw[19] as usize) << 8) | raw[20] as usize; if payload_length > limit { return "invalid:payload_limit"; } if raw.len() != 21 + payload_length { return "invalid:length_mismatch"; } if raw.len() > 65536 { return "invalid:frame_limit"; } "valid" } fn normalized_digest(results: &[String]) -> String { let mut value: u64 = 14695981039346656037; for result in results { for byte in format!("{result}\n").bytes() { value ^= u64::from(byte); value = value.wrapping_mul(1099511628211); } } format!("{value:016x}") } fn fixture_hash() -> String { let text = fs::read_to_string("fixtures/manifest.json").expect("fixture manifest"); text.split("\"corpus_sha256\": \"") .nth(1) .and_then(|value| value.split('"').next()) .expect("fixture hash") .to_owned() } fn main() { let mut paths: Vec = fs::read_dir("fixtures/conformance") .expect("fixture corpus") .map(|entry| entry.expect("fixture entry").path()) .filter(|path| path.extension().and_then(|value| value.to_str()) == Some("tsv")) .collect(); paths.sort(); let mut results = Vec::new(); for path in paths { let text = fs::read_to_string(path).expect("fixture file"); let mut lines = text.lines(); assert_eq!(lines.next(), Some("id\tversion\tkind\tinput\texpected")); for line in lines { let fields: Vec<&str> = line.split('\t').collect(); assert_eq!(fields.len(), 5); let actual = evaluate(fields[2], fields[3]); assert_eq!(actual, fields[4], "{}", fields[0]); results.push(format!("{}\t{}", fields[0], actual)); } } println!( "Rust conformance passed normalized={} fixtures={}", normalized_digest(&results), fixture_hash() ); }