/** * Find Security Bugs * Copyright (c) Philippe Arteau, All rights reserved. * * This library is free software; you can redistribute it and/or * modify it under the terms of the GNU Lesser General Public * License as published by the Free Software Foundation; either * version 3.0 of the License, or (at your option) any later version. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public * License along with this library. */ package com.h3xstream.findsecbugs.android; import com.h3xstream.findbugs.test.BaseDetectorTest; import com.h3xstream.findbugs.test.EasyBugReporter; import org.testng.annotations.Test; import java.util.Arrays; import static org.mockito.Mockito.spy; import static org.mockito.Mockito.times; import static org.mockito.Mockito.verify; public class ExternalFileAccessDetectorTest extends BaseDetectorTest { @Test public void detectExternalFileAccess() throws Exception { //Locate test code String[] files = { getClassFilePath("testcode/android/ExternalFileAccessActivity") }; //Run the analysis EasyBugReporter reporter = spy(new SecurityReporter()); analyze(files, reporter); //Assertions int line = 19; //First line while(line++ < 25) { verify(reporter).doReportBug( bugDefinition() // .bugType("ANDROID_EXTERNAL_FILE_ACCESS") // .inClass("ExternalFileAccessActivity") // .inMethod("onCreate") // .atLine(line) // .build() ); } //The count make sure no other bug are detect verify(reporter, times(7)).doReportBug( bugDefinition() // .bugType("ANDROID_EXTERNAL_FILE_ACCESS") .build()); } }