ROOTPLOIT
Server: LiteSpeed
System: Linux in-mum-web1878.main-hosting.eu 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: u435929562 (435929562)
PHP: 7.4.33
Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: //opt/go/pkg/mod/github.com/go-openapi/[email protected]/middleware/body_test.go
package middleware

import (
	"context"
	"io"
	"net/http"
	"path"
	"testing"

	"github.com/go-openapi/runtime"
	"github.com/go-openapi/runtime/internal/testing/petstore"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
)

type eofReader struct {
}

func (r *eofReader) Read(_ []byte) (int, error) {
	return 0, io.EOF
}

func (r *eofReader) Close() error {
	return nil
}

type rbn func(*http.Request, *MatchedRoute) error

func (b rbn) BindRequest(r *http.Request, rr *MatchedRoute) error {
	return b(r, rr)
}

func TestBindRequest_BodyValidation(t *testing.T) {
	spec, api := petstore.NewAPI(t)
	ctx := NewContext(spec, api, nil)
	api.DefaultConsumes = runtime.JSONMime
	ctx.router = DefaultRouter(spec, ctx.api)

	req, err := http.NewRequestWithContext(context.Background(), http.MethodGet, path.Join(spec.BasePath(), "/pets"), new(eofReader))
	require.NoError(t, err)
	req.Header.Set("Content-Type", runtime.JSONMime)

	ri, rCtx, ok := ctx.RouteInfo(req)
	require.True(t, ok)
	req = rCtx

	err = ctx.BindValidRequest(req, ri, rbn(func(r *http.Request, _ *MatchedRoute) error {
		defer r.Body.Close()
		var data interface{}
		e := runtime.JSONConsumer().Consume(r.Body, &data)
		_ = data
		return e
	}))
	require.Error(t, err)
	assert.Equal(t, io.EOF, err)
}

func TestBindRequest_DeleteNoBody(t *testing.T) {
	spec, api := petstore.NewAPI(t)
	ctx := NewContext(spec, api, nil)
	api.DefaultConsumes = runtime.JSONMime
	ctx.router = DefaultRouter(spec, ctx.api)

	req, err := http.NewRequestWithContext(context.Background(), http.MethodDelete, path.Join(spec.BasePath(), "/pets/123"), new(eofReader))
	require.NoError(t, err)

	req.Header.Set("Accept", "*/*")
	ri, rCtx, ok := ctx.RouteInfo(req)
	require.True(t, ok)
	req = rCtx

	err = ctx.BindValidRequest(req, ri, rbn(func(_ *http.Request, _ *MatchedRoute) error {
		return nil
	}))
	require.NoError(t, err)
	// assert.Equal(t, io.EOF, bverr)

	req, err = http.NewRequestWithContext(context.Background(), http.MethodDelete, path.Join(spec.BasePath(), "/pets/123"), new(eofReader))
	require.NoError(t, err)
	req.Header.Set("Accept", "*/*")
	req.Header.Set("Content-Type", runtime.JSONMime)
	req.ContentLength = 1

	ri, rCtx, ok = ctx.RouteInfo(req)
	require.True(t, ok)
	req = rCtx

	err = ctx.BindValidRequest(req, ri, rbn(func(r *http.Request, _ *MatchedRoute) error {
		defer r.Body.Close()
		var data interface{}
		e := runtime.JSONConsumer().Consume(r.Body, &data)
		_ = data
		return e
	}))
	require.Error(t, err)
	assert.Equal(t, io.EOF, err)
}