Function TestWriteFileRejectsInvalidTargetName

easyssh_test.go:699–710

TestWriteFileRejectsInvalidTargetName guards the SCP protocol-injection fix: a target filename containing newline/CR/NUL must be rejected before any network I/O, so a malicious caller cannot smuggle extra SCP control records (e.g. a second "C0755 ... /etc/shadow" line) into the stream.

(t *testing.T)

// any network I/O, so a malicious caller cannot smuggle extra SCP control
// records (e.g. a second "C0755 ... /etc/shadow" line) into the stream.
func TestWriteFileRejectsInvalidTargetName(t *testing.T) {
	ssh := &MakeConfig{Server: "127.0.0.1", User: "nobody", Port: "22"}
	for _, bad := range []string{
		"foo\nbar",
		"foo\rbar",
		"foo\x00bar",
		"dir/with\nnewline",
	} {
		err := ssh.WriteFile(bytes.NewReader(nil), 0, bad)
		assert.ErrorIs(t, err, ErrInvalidTargetFile, "WriteFile(%q) should reject", bad)
	}
}