Firelink/scripts/verify-linux-packages.node-test.js

import assert from 'node:assert/strict';
import test from 'node:test';

import { isSafePackagePath, parseDebianPackagePath } from './verify-linux-packages.js';

test('parses current dpkg-deb listings without a ./ prefix', () => {
  assert.equal(
    parseDebianPackagePath('drwxr-xr-x 0/0               0 2026-07-12 07:24 usr/share/'),
    'usr/share/'
  );
});

test('parses legacy dpkg-deb listings with a ./ prefix', () => {
  assert.equal(
    parseDebianPackagePath('-rwxr-xr-x root/root     123 2026-07-12 07:24 ./usr/bin/firelink'),
    'usr/bin/firelink'
  );
});

test('accepts the package root in legacy dpkg-deb listings', () => {
  assert.equal(
    parseDebianPackagePath('drwxr-xr-x root/root       0 2026-07-12 07:24 ./'),
    ''
  );
  assert.equal(isSafePackagePath(''), true);
});

test('rejects paths outside the package usr tree', () => {
  assert.equal(isSafePackagePath('../tmp/firelink'), false);
  assert.equal(isSafePackagePath('etc/firelink'), false);
});

test('rejects malformed dpkg-deb listing lines', () => {
  assert.throws(
    () => parseDebianPackagePath('not a dpkg-deb listing'),
    /Could not parse a Debian package path/
  );
});