Write MacSandboxTest.OpenSSLAccess.

content/common/sandbox_mac_system_access_unittest.mm

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import <Cocoa/Cocoa.h>
 
 #include "base/file_util.h"
 #include "base/files/scoped_file.h"
 #include "base/logging.h"
 #include "base/strings/sys_string_conversions.h"
 #include "content/common/sandbox_mac.h"
 #include "content/common/sandbox_mac_unittest_helper.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+#if defined(USE_OPENSSL)
+#include <openssl/rand.h>
+#include "crypto/openssl_util.h"
+#else
 #include "crypto/nss_util.h"
-#include "testing/gtest/include/gtest/gtest.h"
+#endif
 
 namespace content {
 
 //--------------------- Clipboard Sandboxing ----------------------
 // Test case for checking sandboxing of clipboard access.
 class MacSandboxedClipboardTestCase : public MacSandboxTestCase {
  public:
   MacSandboxedClipboardTestCase();
   virtual ~MacSandboxedClipboardTestCase();
 
@@ skipping 88 matching lines @@
 
   char buf[16];
   int rc = HANDLE_EINTR(read(fdes.get(), buf, sizeof(buf)));
   return rc == sizeof(buf);
 }
 
 TEST_F(MacSandboxTest, UrandomAccess) {
   EXPECT_TRUE(RunTestInAllSandboxTypes("MacSandboxedUrandomTestCase", NULL));
 }
 
+#if defined(USE_OPENSSL)
+
+//--------------------- OpenSSL Sandboxing ----------------------
+// Test case for checking sandboxing of OpenSSL initialization.
+class MacSandboxedOpenSSLTestCase : public MacSandboxTestCase {
+ public:
+  virtual bool SandboxedTest() OVERRIDE;
+};
+
+REGISTER_SANDBOX_TEST_CASE(MacSandboxedOpenSSLTestCase);
+
+bool MacSandboxedOpenSSLTestCase::SandboxedTest() {
+  crypto::EnsureOpenSSLInit();
+
+  // Ensure that RAND_bytes is functional within the sandbox.
+  uint8_t byte;
+  return RAND_bytes(&byte, 1) == 1;
+}
+
+TEST_F(MacSandboxTest, OpenSSLAccess) {
+  EXPECT_TRUE(RunTestInAllSandboxTypes("MacSandboxedOpenSSLTestCase", NULL));
+}
+
+#else  // !defined(USE_OPENSSL)
+
 //--------------------- NSS Sandboxing ----------------------
 // Test case for checking sandboxing of NSS initialization.
 class MacSandboxedNSSTestCase : public MacSandboxTestCase {
  public:
   virtual bool SandboxedTest() OVERRIDE;
 };
 
 REGISTER_SANDBOX_TEST_CASE(MacSandboxedNSSTestCase);
 
 bool MacSandboxedNSSTestCase::SandboxedTest() {
   // If NSS cannot read from /dev/urandom, NSS initialization will call abort(),
   // which will cause this test case to fail.
   crypto::ForceNSSNoDBInit();
   crypto::EnsureNSSInit();
   return true;
 }
 
 TEST_F(MacSandboxTest, NSSAccess) {
   EXPECT_TRUE(RunTestInAllSandboxTypes("MacSandboxedNSSTestCase", NULL));
 }
 
+#endif  // defined(USE_OPENSSL)
+
 }  // namespace content