ethers.js/packages/crypto/src.ts/tests/test-algo-swap.ts

import assert from "assert";

import {
    lock,

    computeHmac,

    keccak256, ripemd160, sha256, sha512,

    pbkdf2, scrypt, scryptSync
} from "../index.js";

interface Algorithm {
    (...args: Array<any>): string | Promise<string>;

    register: (func: any) => void;
    lock: () => void;
    _: (...args: Array<any>) => any;
}

interface TestCase {
    name: string;
    params: Array<any>;
    algorithm: Algorithm;
    hijackTag: string;
}


describe("test registration", function() {

    let hijack = "";
    function getHijack(algo: string) {
        return function(...args: Array<any>) {
            hijack = `hijacked ${ algo }: ${ JSON.stringify(args) }`;
            return "0x42";
        }
    }

    const tests: Array<TestCase> = [
        {
            name: "keccak256",
            params: [ "0x" ],
            hijackTag: 'hijacked keccak256: [{}]',
            algorithm: keccak256
        },
        {
            name: "sha256",
            params: [ "0x" ],
            hijackTag: 'hijacked sha256: [{}]',
            algorithm: sha256
        },
        {
            name: "sha512",
            params: [ "0x" ],
            hijackTag: 'hijacked sha512: [{}]',
            algorithm: sha512
        },
        {
            name: "ripemd160",
            params: [ "0x" ],
            hijackTag: 'hijacked ripemd160: [{}]',
            algorithm: ripemd160
        },
        {
            name: "pbkdf2",
            params: [ "0x", "0x", 1024, 32, "sha256" ],
            hijackTag: 'hijacked pbkdf2: [{},{},1024,32,"sha256"]',
            algorithm: pbkdf2
        },
        {
            name: "scryptSync",
            params: [ "0x", "0x", 1024, 8, 1, 32 ],
            hijackTag: 'hijacked scryptSync: [{},{},1024,8,1,32]',
            algorithm: scryptSync
        },
        {
            name: "scrypt",
            params: [ "0x", "0x", 1024, 8, 1, 32 ],
            hijackTag: 'hijacked scrypt: [{},{},1024,8,1,32,null]',
            algorithm: scrypt
        },
        {
            name: "computeHmac",
            params: [ "sha256", "0x", "0x" ],
            hijackTag: 'hijacked computeHmac: ["sha256",{},{}]',
            algorithm: computeHmac
        },
    ];

    tests.forEach(({ name, params, hijackTag, algorithm }) => {
        it(`swaps in hijacked callback: ${ name }`, async function() {
            const initial = await algorithm(...params);

            algorithm.register(getHijack(name));

            assert.equal(await algorithm(...params), "0x42");
            assert.equal(hijack, hijackTag);

            algorithm.register(algorithm._);
            assert.equal(await algorithm(...params), initial);
        });
    });

    it("prevents swapping after locked", function() {
        lock();

        tests.forEach(({ name, params, hijackTag, algorithm }) => {
            assert.throws(function() {
                algorithm.register(getHijack("test"));
            }, function(error) {
                return (error.message === `${ name } is locked`);
            });
        });
    });

});