Function TestExtractTarGz

pkg/cmd/copilot/copilot_test.go:210–271

(t *testing.T)

}

func TestExtractTarGz(t *testing.T) {
	t.Run("extracts files correctly", func(t *testing.T) {
		content := []byte("hello world")
		archive := createTarGzBuffer(t, map[string][]byte{
			"copilot": content,
		})

		destDir := t.TempDir()

		err := extractTarGz(bytes.NewReader(archive), destDir)
		require.NoError(t, err, "extractTarGz() error")

		extracted, err := os.ReadFile(filepath.Join(destDir, "copilot"))
		require.NoError(t, err, "failed to read extracted file")
		require.Equal(t, content, extracted, "extracted content mismatch")
	})

	t.Run("extracts nested files", func(t *testing.T) {
		content := []byte("nested content")
		archive := createTarGzBuffer(t, map[string][]byte{
			"subdir/file.txt": content,
		})

		destDir := t.TempDir()

		err := extractTarGz(bytes.NewReader(archive), destDir)
		require.NoError(t, err, "extractTarGz() error")

		extracted, err := os.ReadFile(filepath.Join(destDir, "subdir", "file.txt"))
		require.NoError(t, err, "failed to read extracted file")
		require.Equal(t, content, extracted, "extracted content mismatch")
	})

	t.Run("rejects path traversal", func(t *testing.T) {
		// Manually create a malicious tar.gz with path traversal
		var buf bytes.Buffer
		gw := gzip.NewWriter(&buf)
		tw := tar.NewWriter(gw)

		hdr := &tar.Header{
			Name: "../evil.txt",
			Mode: 0755,
			Size: 4,
		}
		_ = tw.WriteHeader(hdr)
		_, _ = tw.Write([]byte("evil"))
		_ = tw.Close()
		_ = gw.Close()

		destDir := t.TempDir()

		err := extractTarGz(bytes.NewReader(buf.Bytes()), destDir)
		require.Error(t, err, "expected error for path traversal, got nil")
	})

	t.Run("handles invalid gzip", func(t *testing.T) {
		destDir := t.TempDir()