1
0
mirror of https://gitlab.com/fdroid/fdroidserver.git synced 2024-10-02 09:10:11 +02:00
fdroidserver/tests
Hans-Christoph Steiner 3011953d0e convert apkcache from pickle to JSON
pickle can serialize executable code, while JSON is only ever pure data.
The APK cache is only ever pure data, so no need for the security risks of
pickle.  For example, if some malicious thing gets write access on the
`fdroid update` machine, it can write out a custom tmp/apkcache which would
then be executed.  That is not possible with JSON.

This does just ignore any existing cache and rebuilds from scratch. That is
so we don't need to maintain pickle anywhere, and to ensure there are no
glitches from a conversion from pickle to JSON.

closes #163
2018-09-03 18:07:40 +02:00
..
extra rewritemeta yaml: fixed boolen mapping for build flags 2017-07-04 11:51:08 +02:00
getsig include test cases for python getsig replacement 2014-11-07 09:20:33 +00:00
gnupghome gpg-sign all valid files in the repo, including source tarballs 2016-11-07 14:53:01 +01:00
metadata fix test metadata case for Builds app field 2018-08-14 12:31:12 +02:00
metadata-rewrite-yml tests: adapt to spdx v4.0.0 2018-05-16 22:49:57 +02:00
repo convert apkcache from pickle to JSON 2018-09-03 18:07:40 +02:00
signindex Support ETag when downloading repository index 2017-05-02 15:37:02 -03:00
source-files Fix applicationIdSuffix / versionNameSuffix #455 2018-05-04 12:24:16 +02:00
stats tests: rename unicode test file to fix "file name too long" errors 2018-05-25 17:27:58 +02:00
androguard_test.py update: find aapt when it is not in the PATH 2017-05-18 17:21:05 +02:00
bad-unicode-πÇÇ现代通用字-български-عربي1.apk rename test files to work round filename length limits 2017-11-27 16:57:30 +01:00
build.TestCase made build.TestCase run independant of cwd 2018-08-14 10:10:19 +02:00
check-fdroid-apk use standard User-Agent in check-fdroid-apk 2018-01-26 10:18:41 +01:00
common.TestCase use defusedxml to avoid DoS attacks while loading XML 2018-08-29 17:44:54 +02:00
complete-ci-tests move pylint run to standalone gitlab-ci job 2018-05-14 15:25:33 +02:00
config.py test for original "v0" index XML compatibility 2017-02-24 11:01:01 +01:00
description-parsing.py tests: switch to python3 2016-03-11 13:27:00 +00:00
dummy-keystore.jks added functions for storing/loading signer fingerprints to stats 2017-09-26 14:11:09 +02:00
dump_internal_metadata_format.py fix metadata dump test to run on CI servers 2017-02-28 12:08:04 +01:00
exception.TestCase added cwd setup boiler-plate to *.TestCase where missing 2018-08-14 10:34:13 +02:00
import_proxy.py add a basic test of fdroid import 2015-09-10 11:08:40 +02:00
import.TestCase added cwd setup boiler-plate to *.TestCase where missing 2018-08-14 10:34:13 +02:00
index.TestCase made index.TestCase run independant of cwd 2018-08-14 10:08:03 +02:00
install.TestCase added cwd setup boiler-plate to *.TestCase where missing 2018-08-14 10:34:13 +02:00
IsMD5Disabled.java tests: support Java setups where MD5 is not disabled by default 2017-09-19 20:16:08 +02:00
janus.apk update: reject APKs with invalid file sig, probably Janus exploits 2017-12-14 16:57:22 +01:00
keystore.jks test for original "v0" index XML compatibility 2017-02-24 11:01:01 +01:00
lint.TestCase added cwd setup boiler-plate to *.TestCase where missing 2018-08-14 10:34:13 +02:00
metadata.TestCase Merge branch '471-lint-check-unknown-keys' into 'master' 2018-08-14 10:50:59 +00:00
openssl-version-check-test.py update: update openssl KnownVuln scan to handle all recent versions 2017-07-06 13:31:42 +02:00
org.bitbucket.tickytacky.mirrormirror_1.apk update: allow_disabled_algorithms option to keep MD5 sigs in repo 2017-07-03 10:02:51 +02:00
org.bitbucket.tickytacky.mirrormirror_2.apk update: allow_disabled_algorithms option to keep MD5 sigs in repo 2017-07-03 10:02:51 +02:00
org.bitbucket.tickytacky.mirrormirror_3.apk update: allow_disabled_algorithms option to keep MD5 sigs in repo 2017-07-03 10:02:51 +02:00
org.bitbucket.tickytacky.mirrormirror_4.apk update: allow_disabled_algorithms option to keep MD5 sigs in repo 2017-07-03 10:02:51 +02:00
org.dyndns.fules.ck_20.apk use androguard if aapt isn't found 2017-05-04 23:35:17 +02:00
publish.TestCase added cwd setup boiler-plate to *.TestCase where missing 2018-08-14 10:34:13 +02:00
run-tests convert apkcache from pickle to JSON 2018-09-03 18:07:40 +02:00
scanner.TestCase added cwd setup boiler-plate to *.TestCase where missing 2018-08-14 10:34:13 +02:00
server.TestCase added tests for update_serverwebroot 2018-06-19 12:24:52 +02:00
signatures.TestCase added cwd setup boiler-plate to *.TestCase where missing 2018-08-14 10:34:13 +02:00
SpeedoMeterApp.main_1.apk update: do not crash with androguard when working with apps without icons 2018-03-12 17:55:45 +01:00
testcommon.py added signatures subcommand 2017-09-07 00:03:35 +02:00
update.TestCase convert apkcache from pickle to JSON 2018-09-03 18:07:40 +02:00
urzip-badcert.apk include test cases for python getsig replacement 2014-11-07 09:20:33 +00:00
urzip-badsig.apk include test cases for python getsig replacement 2014-11-07 09:20:33 +00:00
urzip-release-unsigned.apk added test case for common.isApkDebuggable() 2014-12-14 13:25:20 +01:00
urzip-release.apk added test case for common.isApkDebuggable() 2014-12-14 13:25:20 +01:00
urzip.apk tests: try fdroid update after adding an APK to an existing repo 2014-06-04 21:54:55 -04:00