7 files changed, 148 insertions, 0 deletions

diff --git a/src/tests/harden_rand/config/config_rand_harden_disabled.ini b/src/tests/harden_rand/config/config_rand_harden_disabled.ini
new file mode 100644
index 0000000..b9cd227
--- /dev/null
+++ b/src/tests/harden_rand/config/config_rand_harden_disabled.ini
@@ -0,0 +1 @@
+sp.harden_random.disable();              
diff --git a/src/tests/harden_rand/config/harden_rand.ini b/src/tests/harden_rand/config/harden_rand.ini
new file mode 100644
index 0000000..89e19be
--- /dev/null
+++ b/src/tests/harden_rand/config/harden_rand.ini
@@ -0,0 +1 @@
+sp.harden_random.enable();
diff --git a/src/tests/harden_rand/disable_handen_rand.phpt b/src/tests/harden_rand/disable_handen_rand.phpt
new file mode 100644
index 0000000..70e1382
--- /dev/null
+++ b/src/tests/harden_rand/disable_handen_rand.phpt
@@ -0,0 +1,22 @@
+--TEST--
+Harden rand
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/config_rand_harden_disabled.ini
+--FILE--
+<?php 
+srand(0);
+$a =  rand(0,100)."\n";
+srand(0);
+$b = rand(0,100)."\n";
+srand(0);
+$c = rand(0,100)."\n";
+if ($a == $b && $a == $c) {
+    echo "win";
+} else {
+    echo "lose";
+}
+?>
+--EXPECT--
+win
diff --git a/src/tests/harden_rand/harden_mt_rand.phpt b/src/tests/harden_rand/harden_mt_rand.phpt
new file mode 100644
index 0000000..da1ac16
--- /dev/null
+++ b/src/tests/harden_rand/harden_mt_rand.phpt
@@ -0,0 +1,22 @@
+--TEST--
+Harden mt_rand
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/harden_rand.ini
+--FILE--
+<?php 
+mt_srand(0);
+$a = mt_rand(0,100)."\n";
+$b = mt_rand(0,100)."\n";
+mt_srand(0);
+$c = mt_rand(0,100)."\n";
+$d = mt_rand(0,100)."\n";
+
+if ($a == $c && $b == $d)
+    echo "a:$a, b:$b, c:$c, d:$d\n";
+else
+        echo 'win';
+?>
+--EXPECT--
+win
diff --git a/src/tests/harden_rand/harden_mt_rand_range.phpt b/src/tests/harden_rand/harden_mt_rand_range.phpt
new file mode 100644
index 0000000..0d5a5bf
--- /dev/null
+++ b/src/tests/harden_rand/harden_mt_rand_range.phpt
@@ -0,0 +1,16 @@
+--TEST--
+Harden mt_rand range
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/harden_rand.ini
+--FILE--
+<?php 
+for ($i=0; $i <=100; $i++) {
+  if (mt_rand(0,1) > 1) {
+    echo "Failed\n";
+  }
+}
+
+?>
+--EXPECT--
diff --git a/src/tests/harden_rand/harden_rand.phpt b/src/tests/harden_rand/harden_rand.phpt
new file mode 100644
index 0000000..336f5a7
--- /dev/null
+++ b/src/tests/harden_rand/harden_rand.phpt
@@ -0,0 +1,24 @@
+--TEST--
+Harden rand
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/harden_rand.ini
+--FILE--
+<?php 
+srand(0);
+$a = rand(0,1000)."\n";
+$b = rand(0,1000)."\n";
+srand(0);
+$c = rand(0,1000)."\n";
+$d = rand(0,1000)."\n";
+
+rand(100,0)."\n";
+
+if ($a == $c && $b == $d)
+    echo "a:$a, b:$b, c:$c, d:$d\n";
+else
+        echo 'win';
+?>
+--EXPECT--
+win
diff --git a/src/tests/harden_rand/harden_rand_noargs.phpt b/src/tests/harden_rand/harden_rand_noargs.phpt
new file mode 100644
index 0000000..dc7d832
--- /dev/null
+++ b/src/tests/harden_rand/harden_rand_noargs.phpt
@@ -0,0 +1,62 @@
+--TEST--
+Harden rand without any arguments
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/harden_rand.ini
+We should fix this
+--FILE--
+<?php 
+rand();
+mt_rand();
+
+rand(1);
+mt_rand(1);
+
+rand(1, 2);
+mt_rand(1, 2);
+
+rand(2, 1);
+mt_rand(2, 1);
+
+rand(2, 1, 0);
+mt_rand(2, 1, 0);
+
+rand("test", 1);
+mt_rand("test", 1);
+
+rand(1, "test");
+mt_rand(1, "test");
+
+rand(1, 2, "test");
+mt_rand(1, 2, "test");
+
+echo "Everything is fine\n";
+echo "Absolutely everything\n";
+echo 'Even with single quotes';
+?>
+--EXPECTF--
+Warning: rand() expects exactly 2 parameters, 1 given in %s/harden_rand_noargs.php on line %d
+
+Warning: mt_rand() expects exactly 2 parameters, 1 given in %s/harden_rand_noargs.php on line %d
+
+Warning: mt_rand(): max(1) is smaller than min(2) in %s/harden_rand_noargs.php on line %d
+
+Warning: rand() expects exactly 2 parameters, 3 given in %s/harden_rand_noargs.php on line %d
+
+Warning: mt_rand() expects exactly 2 parameters, 3 given in %s/harden_rand_noargs.php on line %d
+
+Warning: rand() expects parameter 1 to be in%s, string given in %s/harden_rand_noargs.php on line %d
+
+Warning: mt_rand() expects parameter 1 to be in%s, string given in %s/harden_rand_noargs.php on line %d
+
+Warning: rand() expects parameter 2 to be in%s, string given in %s/harden_rand_noargs.php on line %d
+
+Warning: mt_rand() expects parameter 2 to be in%s, string given in %s/harden_rand_noargs.php on line %d
+
+Warning: rand() expects exactly 2 parameters, 3 given in %s/harden_rand_noargs.php on line %d
+
+Warning: mt_rand() expects exactly 2 parameters, 3 given in %s/harden_rand_noargs.php on line %d
+Everything is fine
+Absolutely everything
+Even with single quotes