Class for parsing and evaluating RFC 5280 NameConstraints.

net/cert/internal/test_helpers.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/internal/test_helpers.h"
 
 #include "base/base64.h"
 #include "base/base_paths.h"
 #include "base/files/file_util.h"
 #include "base/path_service.h"
 #include "net/cert/pem_tokenizer.h"
+#include "net/der/parser.h"
+#include "testing/gtest/include/gtest/gtest.h"
 
 namespace net {
 
 namespace der {
 
 void PrintTo(const Input& data, ::std::ostream* os) {
   std::string b64;
   base::Base64Encode(
       base::StringPiece(reinterpret_cast<const char*>(data.UnsafeData()),
                         data.Length()),
       &b64);
 
   *os << "[" << b64 << "]";
 }
 
 bool operator==(const Input& a, const Input& b) {
   return a.Equals(b);
 }
 
 }  // namespace der
 
 der::Input InputFromString(const std::string* s) {
   return der::Input(reinterpret_cast<const uint8_t*>(s->data()), s->size());
 }
 
+der::Input SequenceValueFromString(const std::string* s) {
+  der::Parser parser(InputFromString(s));
+  der::Input data;
+  if (!parser.ReadTag(der::kSequence, &data)) {
+    ADD_FAILURE();
+    return der::Input();
+  }
+  if (parser.HasMore()) {

[Ryan Sleevi, 2015/09/24 22:06:20]

This surprises me; it doesn't seem part of the documented API contract, nor is
it clear why (in here) this is added.

[mattm, 2015/09/30 04:52:32]

Well, the contract is input is a "DER SEQUENCE tlv", so after skipping the tag
and length, there should only be the value of the sequence left, not any more
data after that.

+    ADD_FAILURE();
+    return der::Input();
+  }
+  return data;
+}
+
 ::testing::AssertionResult ReadTestDataFromPemFile(
     const std::string& file_path_ascii,
     const PemBlockMapping* mappings,
     size_t mappings_length) {
   // Compute the full path, relative to the src/ directory.
   base::FilePath src_root;
   PathService::Get(base::DIR_SOURCE_ROOT, &src_root);
   base::FilePath filepath = src_root.AppendASCII(file_path_ascii);
 
   // Read the full contents of the PEM file.
@@ skipping 39 matching lines @@
     if (mapping.value && !mapping.optional) {
       return ::testing::AssertionFailure() << "PEM block missing: "
                                            << mapping.block_name;
     }
   }
 
   return ::testing::AssertionSuccess();
 }
 
 }  // namespace net