You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
810 lines
33 KiB
810 lines
33 KiB
// Copyright (C) 2017 The Android Open Source Project
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
#include <gtest/gtest.h>
|
|
#include <stdio.h>
|
|
|
|
#include "annotations.h"
|
|
#include "src/statsd_config.pb.h"
|
|
#include "matchers/matcher_util.h"
|
|
#include "stats_event.h"
|
|
#include "stats_log_util.h"
|
|
#include "stats_util.h"
|
|
#include "statsd_test_util.h"
|
|
|
|
using namespace android::os::statsd;
|
|
using std::unordered_map;
|
|
using std::vector;
|
|
|
|
const int32_t TAG_ID = 123;
|
|
const int32_t TAG_ID_2 = 28; // hardcoded tag of atom with uid field
|
|
const int FIELD_ID_1 = 1;
|
|
const int FIELD_ID_2 = 2;
|
|
const int FIELD_ID_3 = 2;
|
|
|
|
const int ATTRIBUTION_UID_FIELD_ID = 1;
|
|
const int ATTRIBUTION_TAG_FIELD_ID = 2;
|
|
|
|
|
|
#ifdef __ANDROID__
|
|
|
|
namespace {
|
|
|
|
void makeIntLogEvent(LogEvent* logEvent, const int32_t atomId, const int64_t timestamp,
|
|
const int32_t value) {
|
|
AStatsEvent* statsEvent = AStatsEvent_obtain();
|
|
AStatsEvent_setAtomId(statsEvent, atomId);
|
|
AStatsEvent_overwriteTimestamp(statsEvent, timestamp);
|
|
AStatsEvent_writeInt32(statsEvent, value);
|
|
|
|
parseStatsEventToLogEvent(statsEvent, logEvent);
|
|
}
|
|
|
|
void makeFloatLogEvent(LogEvent* logEvent, const int32_t atomId, const int64_t timestamp,
|
|
const float floatValue) {
|
|
AStatsEvent* statsEvent = AStatsEvent_obtain();
|
|
AStatsEvent_setAtomId(statsEvent, atomId);
|
|
AStatsEvent_overwriteTimestamp(statsEvent, timestamp);
|
|
AStatsEvent_writeFloat(statsEvent, floatValue);
|
|
|
|
parseStatsEventToLogEvent(statsEvent, logEvent);
|
|
}
|
|
|
|
void makeStringLogEvent(LogEvent* logEvent, const int32_t atomId, const int64_t timestamp,
|
|
const string& name) {
|
|
AStatsEvent* statsEvent = AStatsEvent_obtain();
|
|
AStatsEvent_setAtomId(statsEvent, atomId);
|
|
AStatsEvent_overwriteTimestamp(statsEvent, timestamp);
|
|
AStatsEvent_writeString(statsEvent, name.c_str());
|
|
|
|
parseStatsEventToLogEvent(statsEvent, logEvent);
|
|
}
|
|
|
|
void makeIntWithBoolAnnotationLogEvent(LogEvent* logEvent, const int32_t atomId,
|
|
const int32_t field, const uint8_t annotationId,
|
|
const bool annotationValue) {
|
|
AStatsEvent* statsEvent = AStatsEvent_obtain();
|
|
AStatsEvent_setAtomId(statsEvent, atomId);
|
|
AStatsEvent_writeInt32(statsEvent, field);
|
|
AStatsEvent_addBoolAnnotation(statsEvent, annotationId, annotationValue);
|
|
|
|
parseStatsEventToLogEvent(statsEvent, logEvent);
|
|
}
|
|
|
|
void makeAttributionLogEvent(LogEvent* logEvent, const int32_t atomId, const int64_t timestamp,
|
|
const vector<int>& attributionUids,
|
|
const vector<string>& attributionTags, const string& name) {
|
|
AStatsEvent* statsEvent = AStatsEvent_obtain();
|
|
AStatsEvent_setAtomId(statsEvent, atomId);
|
|
AStatsEvent_overwriteTimestamp(statsEvent, timestamp);
|
|
|
|
writeAttribution(statsEvent, attributionUids, attributionTags);
|
|
AStatsEvent_writeString(statsEvent, name.c_str());
|
|
|
|
parseStatsEventToLogEvent(statsEvent, logEvent);
|
|
}
|
|
|
|
void makeBoolLogEvent(LogEvent* logEvent, const int32_t atomId, const int64_t timestamp,
|
|
const bool bool1, const bool bool2) {
|
|
AStatsEvent* statsEvent = AStatsEvent_obtain();
|
|
AStatsEvent_setAtomId(statsEvent, atomId);
|
|
AStatsEvent_overwriteTimestamp(statsEvent, timestamp);
|
|
|
|
AStatsEvent_writeBool(statsEvent, bool1);
|
|
AStatsEvent_writeBool(statsEvent, bool2);
|
|
|
|
parseStatsEventToLogEvent(statsEvent, logEvent);
|
|
}
|
|
|
|
} // anonymous namespace
|
|
|
|
TEST(AtomMatcherTest, TestSimpleMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
|
|
LogEvent event(/*uid=*/0, /*pid=*/0);
|
|
makeIntLogEvent(&event, TAG_ID, 0, 11);
|
|
|
|
// Test
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// Wrong tag id.
|
|
simpleMatcher->set_atom_id(TAG_ID + 1);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestAttributionMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
std::vector<int> attributionUids = {1111, 2222, 3333};
|
|
std::vector<string> attributionTags = {"location1", "location2", "location3"};
|
|
|
|
// Set up the log event.
|
|
LogEvent event(/*uid=*/0, /*pid=*/0);
|
|
makeAttributionLogEvent(&event, TAG_ID, 0, attributionUids, attributionTags, "some value");
|
|
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
|
|
// Match first node.
|
|
auto attributionMatcher = simpleMatcher->add_field_value_matcher();
|
|
attributionMatcher->set_field(FIELD_ID_1);
|
|
attributionMatcher->set_position(Position::FIRST);
|
|
attributionMatcher->mutable_matches_tuple()->add_field_value_matcher()->set_field(
|
|
ATTRIBUTION_TAG_FIELD_ID);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"tag");
|
|
|
|
auto fieldMatcher = simpleMatcher->add_field_value_matcher();
|
|
fieldMatcher->set_field(FIELD_ID_2);
|
|
fieldMatcher->set_eq_string("some value");
|
|
|
|
// Tag not matched.
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"location3");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"location1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// Match last node.
|
|
attributionMatcher->set_position(Position::LAST);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"location3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// Match any node.
|
|
attributionMatcher->set_position(Position::ANY);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"location1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"location2");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"location3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"location4");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// Attribution match but primitive field not match.
|
|
attributionMatcher->set_position(Position::ANY);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"location2");
|
|
fieldMatcher->set_eq_string("wrong value");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
fieldMatcher->set_eq_string("some value");
|
|
|
|
// Uid match.
|
|
attributionMatcher->set_position(Position::ANY);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_field(
|
|
ATTRIBUTION_UID_FIELD_ID);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg0");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
uidMap->updateMap(
|
|
1, {1111, 1111, 2222, 3333, 3333} /* uid list */, {1, 1, 2, 1, 2} /* version list */,
|
|
{android::String16("v1"), android::String16("v1"), android::String16("v2"),
|
|
android::String16("v1"), android::String16("v2")},
|
|
{android::String16("pkg0"), android::String16("pkg1"), android::String16("pkg1"),
|
|
android::String16("Pkg2"), android::String16("PkG3")} /* package name list */,
|
|
{android::String16(""), android::String16(""), android::String16(""),
|
|
android::String16(""), android::String16("")});
|
|
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg2");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg0");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
attributionMatcher->set_position(Position::FIRST);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg0");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg2");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
attributionMatcher->set_position(Position::LAST);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg0");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg2");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// Uid + tag.
|
|
attributionMatcher->set_position(Position::ANY);
|
|
attributionMatcher->mutable_matches_tuple()->add_field_value_matcher()->set_field(
|
|
ATTRIBUTION_TAG_FIELD_ID);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg0");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location2");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg2");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
attributionMatcher->set_position(Position::FIRST);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg0");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location2");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg2");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location3");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location3");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
attributionMatcher->set_position(Position::LAST);
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg0");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg1");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location2");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg2");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(0)->set_eq_string(
|
|
"pkg3");
|
|
attributionMatcher->mutable_matches_tuple()->mutable_field_value_matcher(1)->set_eq_string(
|
|
"location1");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestUidFieldMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
uidMap->updateMap(
|
|
1, {1111, 1111, 2222, 3333, 3333} /* uid list */, {1, 1, 2, 1, 2} /* version list */,
|
|
{android::String16("v1"), android::String16("v1"), android::String16("v2"),
|
|
android::String16("v1"), android::String16("v2")},
|
|
{android::String16("pkg0"), android::String16("pkg1"), android::String16("pkg1"),
|
|
android::String16("Pkg2"), android::String16("PkG3")} /* package name list */,
|
|
{android::String16(""), android::String16(""), android::String16(""),
|
|
android::String16(""), android::String16("")});
|
|
|
|
// Set up matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
simpleMatcher->add_field_value_matcher()->set_field(1);
|
|
simpleMatcher->mutable_field_value_matcher(0)->set_eq_string("pkg0");
|
|
|
|
// Make event without is_uid annotation.
|
|
LogEvent event1(/*uid=*/0, /*pid=*/0);
|
|
makeIntLogEvent(&event1, TAG_ID, 0, 1111);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event1));
|
|
|
|
// Make event with is_uid annotation.
|
|
LogEvent event2(/*uid=*/0, /*pid=*/0);
|
|
makeIntWithBoolAnnotationLogEvent(&event2, TAG_ID_2, 1111, ANNOTATION_ID_IS_UID, true);
|
|
|
|
// Event has is_uid annotation, so mapping from uid to package name occurs.
|
|
simpleMatcher->set_atom_id(TAG_ID_2);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event2));
|
|
|
|
// Event has is_uid annotation, but uid maps to different package name.
|
|
simpleMatcher->mutable_field_value_matcher(0)->set_eq_string("Pkg2");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event2));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestNeqAnyStringMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
uidMap->updateMap(
|
|
1, {1111, 1111, 2222, 3333, 3333} /* uid list */, {1, 1, 2, 1, 2} /* version list */,
|
|
{android::String16("v1"), android::String16("v1"), android::String16("v2"),
|
|
android::String16("v1"), android::String16("v2")},
|
|
{android::String16("pkg0"), android::String16("pkg1"), android::String16("pkg1"),
|
|
android::String16("Pkg2"), android::String16("PkG3")} /* package name list */,
|
|
{android::String16(""), android::String16(""), android::String16(""),
|
|
android::String16(""), android::String16("")});
|
|
|
|
std::vector<int> attributionUids = {1111, 2222, 3333, 1066};
|
|
std::vector<string> attributionTags = {"location1", "location2", "location3", "location3"};
|
|
|
|
// Set up the event
|
|
LogEvent event(/*uid=*/0, /*pid=*/0);
|
|
makeAttributionLogEvent(&event, TAG_ID, 0, attributionUids, attributionTags, "some value");
|
|
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
|
|
// Match first node.
|
|
auto attributionMatcher = simpleMatcher->add_field_value_matcher();
|
|
attributionMatcher->set_field(FIELD_ID_1);
|
|
attributionMatcher->set_position(Position::FIRST);
|
|
attributionMatcher->mutable_matches_tuple()->add_field_value_matcher()->set_field(
|
|
ATTRIBUTION_UID_FIELD_ID);
|
|
auto neqStringList = attributionMatcher->mutable_matches_tuple()
|
|
->mutable_field_value_matcher(0)
|
|
->mutable_neq_any_string();
|
|
neqStringList->add_str_value("pkg2");
|
|
neqStringList->add_str_value("pkg3");
|
|
|
|
auto fieldMatcher = simpleMatcher->add_field_value_matcher();
|
|
fieldMatcher->set_field(FIELD_ID_2);
|
|
fieldMatcher->set_eq_string("some value");
|
|
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
neqStringList->Clear();
|
|
neqStringList->add_str_value("pkg1");
|
|
neqStringList->add_str_value("pkg3");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
attributionMatcher->set_position(Position::ANY);
|
|
neqStringList->Clear();
|
|
neqStringList->add_str_value("maps.com");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
neqStringList->Clear();
|
|
neqStringList->add_str_value("PkG3");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
attributionMatcher->set_position(Position::LAST);
|
|
neqStringList->Clear();
|
|
neqStringList->add_str_value("AID_STATSD");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestEqAnyStringMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
uidMap->updateMap(
|
|
1, {1111, 1111, 2222, 3333, 3333} /* uid list */, {1, 1, 2, 1, 2} /* version list */,
|
|
{android::String16("v1"), android::String16("v1"), android::String16("v2"),
|
|
android::String16("v1"), android::String16("v2")},
|
|
{android::String16("pkg0"), android::String16("pkg1"), android::String16("pkg1"),
|
|
android::String16("Pkg2"), android::String16("PkG3")} /* package name list */,
|
|
{android::String16(""), android::String16(""), android::String16(""),
|
|
android::String16(""), android::String16("")});
|
|
|
|
std::vector<int> attributionUids = {1067, 2222, 3333, 1066};
|
|
std::vector<string> attributionTags = {"location1", "location2", "location3", "location3"};
|
|
|
|
// Set up the event
|
|
LogEvent event(/*uid=*/0, /*pid=*/0);
|
|
makeAttributionLogEvent(&event, TAG_ID, 0, attributionUids, attributionTags, "some value");
|
|
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
|
|
// Match first node.
|
|
auto attributionMatcher = simpleMatcher->add_field_value_matcher();
|
|
attributionMatcher->set_field(FIELD_ID_1);
|
|
attributionMatcher->set_position(Position::FIRST);
|
|
attributionMatcher->mutable_matches_tuple()->add_field_value_matcher()->set_field(
|
|
ATTRIBUTION_UID_FIELD_ID);
|
|
auto eqStringList = attributionMatcher->mutable_matches_tuple()
|
|
->mutable_field_value_matcher(0)
|
|
->mutable_eq_any_string();
|
|
eqStringList->add_str_value("AID_ROOT");
|
|
eqStringList->add_str_value("AID_INCIDENTD");
|
|
|
|
auto fieldMatcher = simpleMatcher->add_field_value_matcher();
|
|
fieldMatcher->set_field(FIELD_ID_2);
|
|
fieldMatcher->set_eq_string("some value");
|
|
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
attributionMatcher->set_position(Position::ANY);
|
|
eqStringList->Clear();
|
|
eqStringList->add_str_value("AID_STATSD");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
eqStringList->Clear();
|
|
eqStringList->add_str_value("pkg1");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
auto normalStringField = fieldMatcher->mutable_eq_any_string();
|
|
normalStringField->add_str_value("some value123");
|
|
normalStringField->add_str_value("some value");
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
normalStringField->Clear();
|
|
normalStringField->add_str_value("AID_STATSD");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
eqStringList->Clear();
|
|
eqStringList->add_str_value("maps.com");
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestBoolMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
auto keyValue1 = simpleMatcher->add_field_value_matcher();
|
|
keyValue1->set_field(FIELD_ID_1);
|
|
auto keyValue2 = simpleMatcher->add_field_value_matcher();
|
|
keyValue2->set_field(FIELD_ID_2);
|
|
|
|
// Set up the event
|
|
LogEvent event(/*uid=*/0, /*pid=*/0);
|
|
makeBoolLogEvent(&event, TAG_ID, 0, true, false);
|
|
|
|
// Test
|
|
keyValue1->set_eq_bool(true);
|
|
keyValue2->set_eq_bool(false);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
keyValue1->set_eq_bool(false);
|
|
keyValue2->set_eq_bool(false);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
keyValue1->set_eq_bool(false);
|
|
keyValue2->set_eq_bool(true);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
keyValue1->set_eq_bool(true);
|
|
keyValue2->set_eq_bool(true);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestStringMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
auto keyValue = simpleMatcher->add_field_value_matcher();
|
|
keyValue->set_field(FIELD_ID_1);
|
|
keyValue->set_eq_string("some value");
|
|
|
|
// Set up the event
|
|
LogEvent event(/*uid=*/0, /*pid=*/0);
|
|
makeStringLogEvent(&event, TAG_ID, 0, "some value");
|
|
|
|
// Test
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestMultiFieldsMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
auto keyValue1 = simpleMatcher->add_field_value_matcher();
|
|
keyValue1->set_field(FIELD_ID_1);
|
|
auto keyValue2 = simpleMatcher->add_field_value_matcher();
|
|
keyValue2->set_field(FIELD_ID_2);
|
|
|
|
// Set up the event
|
|
LogEvent event(/*uid=*/0, /*pid=*/0);
|
|
CreateTwoValueLogEvent(&event, TAG_ID, 0, 2, 3);
|
|
|
|
// Test
|
|
keyValue1->set_eq_int(2);
|
|
keyValue2->set_eq_int(3);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
keyValue1->set_eq_int(2);
|
|
keyValue2->set_eq_int(4);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
keyValue1->set_eq_int(4);
|
|
keyValue2->set_eq_int(3);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestIntComparisonMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
auto keyValue = simpleMatcher->add_field_value_matcher();
|
|
keyValue->set_field(FIELD_ID_1);
|
|
|
|
// Set up the event
|
|
LogEvent event(/*uid=*/0, /*pid=*/0);
|
|
makeIntLogEvent(&event, TAG_ID, 0, 11);
|
|
|
|
// Test
|
|
|
|
// eq_int
|
|
keyValue->set_eq_int(10);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_eq_int(11);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_eq_int(12);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// lt_int
|
|
keyValue->set_lt_int(10);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_lt_int(11);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_lt_int(12);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// lte_int
|
|
keyValue->set_lte_int(10);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_lte_int(11);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_lte_int(12);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// gt_int
|
|
keyValue->set_gt_int(10);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_gt_int(11);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_gt_int(12);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
|
|
// gte_int
|
|
keyValue->set_gte_int(10);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_gte_int(11);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
keyValue->set_gte_int(12);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestFloatComparisonMatcher) {
|
|
sp<UidMap> uidMap = new UidMap();
|
|
// Set up the matcher
|
|
AtomMatcher matcher;
|
|
auto simpleMatcher = matcher.mutable_simple_atom_matcher();
|
|
simpleMatcher->set_atom_id(TAG_ID);
|
|
|
|
auto keyValue = simpleMatcher->add_field_value_matcher();
|
|
keyValue->set_field(FIELD_ID_1);
|
|
|
|
LogEvent event1(/*uid=*/0, /*pid=*/0);
|
|
makeFloatLogEvent(&event1, TAG_ID, 0, 10.1f);
|
|
keyValue->set_lt_float(10.0);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event1));
|
|
|
|
LogEvent event2(/*uid=*/0, /*pid=*/0);
|
|
makeFloatLogEvent(&event2, TAG_ID, 0, 9.9f);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event2));
|
|
|
|
LogEvent event3(/*uid=*/0, /*pid=*/0);
|
|
makeFloatLogEvent(&event3, TAG_ID, 0, 10.1f);
|
|
keyValue->set_gt_float(10.0);
|
|
EXPECT_TRUE(matchesSimple(uidMap, *simpleMatcher, event3));
|
|
|
|
LogEvent event4(/*uid=*/0, /*pid=*/0);
|
|
makeFloatLogEvent(&event4, TAG_ID, 0, 9.9f);
|
|
EXPECT_FALSE(matchesSimple(uidMap, *simpleMatcher, event4));
|
|
}
|
|
|
|
// Helper for the composite matchers.
|
|
void addSimpleMatcher(SimpleAtomMatcher* simpleMatcher, int tag, int key, int val) {
|
|
simpleMatcher->set_atom_id(tag);
|
|
auto keyValue = simpleMatcher->add_field_value_matcher();
|
|
keyValue->set_field(key);
|
|
keyValue->set_eq_int(val);
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestAndMatcher) {
|
|
// Set up the matcher
|
|
LogicalOperation operation = LogicalOperation::AND;
|
|
|
|
vector<int> children;
|
|
children.push_back(0);
|
|
children.push_back(1);
|
|
children.push_back(2);
|
|
|
|
vector<MatchingState> matcherResults;
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
|
|
EXPECT_FALSE(combinationMatch(children, operation, matcherResults));
|
|
|
|
matcherResults.clear();
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
|
|
EXPECT_TRUE(combinationMatch(children, operation, matcherResults));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestOrMatcher) {
|
|
// Set up the matcher
|
|
LogicalOperation operation = LogicalOperation::OR;
|
|
|
|
vector<int> children;
|
|
children.push_back(0);
|
|
children.push_back(1);
|
|
children.push_back(2);
|
|
|
|
vector<MatchingState> matcherResults;
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
|
|
EXPECT_TRUE(combinationMatch(children, operation, matcherResults));
|
|
|
|
matcherResults.clear();
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
|
|
EXPECT_FALSE(combinationMatch(children, operation, matcherResults));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestNotMatcher) {
|
|
// Set up the matcher
|
|
LogicalOperation operation = LogicalOperation::NOT;
|
|
|
|
vector<int> children;
|
|
children.push_back(0);
|
|
|
|
vector<MatchingState> matcherResults;
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
|
|
EXPECT_FALSE(combinationMatch(children, operation, matcherResults));
|
|
|
|
matcherResults.clear();
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
EXPECT_TRUE(combinationMatch(children, operation, matcherResults));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestNandMatcher) {
|
|
// Set up the matcher
|
|
LogicalOperation operation = LogicalOperation::NAND;
|
|
|
|
vector<int> children;
|
|
children.push_back(0);
|
|
children.push_back(1);
|
|
|
|
vector<MatchingState> matcherResults;
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
|
|
EXPECT_TRUE(combinationMatch(children, operation, matcherResults));
|
|
|
|
matcherResults.clear();
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
EXPECT_TRUE(combinationMatch(children, operation, matcherResults));
|
|
|
|
matcherResults.clear();
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
EXPECT_FALSE(combinationMatch(children, operation, matcherResults));
|
|
}
|
|
|
|
TEST(AtomMatcherTest, TestNorMatcher) {
|
|
// Set up the matcher
|
|
LogicalOperation operation = LogicalOperation::NOR;
|
|
|
|
vector<int> children;
|
|
children.push_back(0);
|
|
children.push_back(1);
|
|
|
|
vector<MatchingState> matcherResults;
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
|
|
EXPECT_FALSE(combinationMatch(children, operation, matcherResults));
|
|
|
|
matcherResults.clear();
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
matcherResults.push_back(MatchingState::kNotMatched);
|
|
EXPECT_TRUE(combinationMatch(children, operation, matcherResults));
|
|
|
|
matcherResults.clear();
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
matcherResults.push_back(MatchingState::kMatched);
|
|
EXPECT_FALSE(combinationMatch(children, operation, matcherResults));
|
|
}
|
|
#else
|
|
GTEST_LOG_(INFO) << "This test does nothing.\n";
|
|
#endif
|