Changeset 11130 in ntrip for trunk/BNC/tests/README.md

Timestamp:

Oct 28, 2026, 9:32:30 AM (2 weeks ago)

Author:

stuerze

Message:

Some fixes from security point of view

File:

• trunk/BNC/tests/README.md (modified) (4 diffs)

trunk/BNC/tests/README.md

@@ -31 +31 @@
 | `tools/ssr_harness.sh` | builds `tools/ssr_harness.cpp` with the SSR decoders under ASan/UBSan and runs it |
 | `tools/ssl_check.py` | TLS checks of the Ntrip 2s client and upload (not part of `run_tests.py`) |
+| `tools/net_check.py` | UDP/RTP sender filter and upload status checks on loopback (not part of `run_tests.py`) |
 | `work/` | scratch output, not versioned |
 
@@ -100 +101 @@
   coefficients are C(d,o) = (100*d+o)/200 TECU and S = -C, both `.ssr` files
   are identical apart from the station ID. These frames overflowed the
-  coefficient and name arrays; the 4-layer VTEC crashed BNC.
+  coefficient and name arrays; the 4-layer VTEC crashed BNC. Also two RTCM
+  1033: a complete one and one whose receiver descriptor length runs beyond
+  the message (rejected; before, stale buffer content was logged).
+
+* `rawfile_hostile`: raw file with hostile chunk headers from
+  `tools/mkcrafted.py --rawfile`: the station ID `../ESCAPE0` must give
+  `Output/.._ESCAPE0_*.ssr` (no file outside the output directory), a chunk
+  header announcing 2000000000 bytes is rejected with a log message.
 
 ## Sanitizer check of the SSR decoders
@@ -115 +123 @@
 also covers the new RTCM-SSR metadata (message 60 in
 `crafted_limits.raw`: 7 entries with additional parameters of 40 and 0 bits,
-and 31 entries, which must be rejected), which `RTCM3Decoder.cpp` does not
-dispatch at present. Every decoded VTEC and metadata message is encoded
-again with the `Make*` function of the same class and decoded once more; the
-result must be identical. Exit code 0 only without sanitizer errors and
+and 31 entries, which must be rejected) and satellite antenna messages
+(BDS with mask bits in all four 16-bit quarters, GPS with shared blocks),
+which `RTCM3Decoder.cpp` does not dispatch at present. Every decoded VTEC, metadata and antenna message is
+encoded again with the `Make*` function of the same class and decoded once
+more; the result must be identical, for the antenna messages also the bytes. Exit code 0 only without sanitizer errors and
 differences.
 
@@ -135 +144 @@
 certificate for another host name (rejected) and a client certificate
 required by the caster, with and without `sslIgnoreErrors`. Takes about 3 min.
+
+## Network check
+
+```
+tests/tools/net_check.py [--bnc PATH]
+```
+
+Runs BNC live against fake servers on loopback addresses (no root needed).
+A second sender on another address sends spoofed datagrams to BNC's port: in
+the modes 'U' (Ntrip 2 UDP) and 'R' (RTSP/RTP) and in 'UN' with a sender
+address in the URL, BNC's raw output must contain only the server's data;
+'UN' with 127.0.0.1 accepts any sender, as before. An Ntrip 1 caster sending an endless
+response header is cut off, a normal Ntrip 1 stream still works. An upload
+answered with `HTTP/1.1 401` and a header containing `200` must be reported
+as broken. Takes about 2 min.
 
 ## Adding a replay case