/*
    * This file is part of dependency-check-core.
    *
    * Licensed under the Apache License, Version 2.0 (the "License");
    * you may not use this file except in compliance with the License.
    * You may obtain a copy of the License at
    *
    *     http://www.apache.org/licenses/LICENSE-2.0
    *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   *
   * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
   */
  package org.owasp.dependencycheck.analyzer;
  
  import java.io.File;
  import org.junit.After;
  import static org.junit.Assert.assertEquals;
  import static org.junit.Assert.assertTrue;
  import static org.junit.Assert.fail;
  import org.junit.Assume;
  import static org.junit.Assume.assumeFalse;
  import org.junit.Before;
  import org.junit.Test;
  import org.owasp.dependencycheck.BaseTest;
  import org.owasp.dependencycheck.analyzer.exception.AnalysisException;
  import org.owasp.dependencycheck.dependency.Confidence;
  import org.owasp.dependencycheck.dependency.Dependency;
  import org.owasp.dependencycheck.dependency.Evidence;
  import org.owasp.dependencycheck.exception.InitializationException;
  import org.owasp.dependencycheck.utils.Settings;
  import org.slf4j.Logger;
  import org.slf4j.LoggerFactory;
  
  /**
   * Tests for the AssemblyAnalyzer.
   *
   * @author colezlaw
   *
   */
  public class AssemblyAnalyzerTest extends BaseTest {
  
      private static final Logger LOGGER = LoggerFactory.getLogger(AssemblyAnalyzerTest.class);
  
      private static final String LOG_KEY = "org.slf4j.simpleLogger.org.owasp.dependencycheck.analyzer.AssemblyAnalyzer";
  
      AssemblyAnalyzer analyzer;
  
      /**
       * Sets up the analyzer.
       *
       * @throws Exception if anything goes sideways
       */
      @Before
      public void setUp() throws Exception {
          try {
              analyzer = new AssemblyAnalyzer();
              analyzer.accept(new File("test.dll")); // trick into "thinking it is active"
              analyzer.initialize();
          } catch (Exception e) {
              if (e.getMessage().contains("Could not execute .NET AssemblyAnalyzer")) {
                  LOGGER.warn("Exception setting up AssemblyAnalyzer. Tests will be incomplete");
              } else {
                  LOGGER.warn("Exception setting up AssemblyAnalyzer. Tests will be incomplete");
              }
              Assume.assumeNoException("Is mono installed? TESTS WILL BE INCOMPLETE", e);
          }
      }
  
      /**
       * Tests to make sure the name is correct.
       */
      @Test
      public void testGetName() {
          assertEquals("Assembly Analyzer", analyzer.getName());
      }
  
      @Test
      public void testAnalysis() throws Exception {
          //File f = new File(AssemblyAnalyzerTest.class.getClassLoader().getResource("GrokAssembly.exe").getPath());
          File f = BaseTest.getResourceAsFile(this, "GrokAssembly.exe");
          Dependency d = new Dependency(f);
          analyzer.analyze(d, null);
          boolean foundVendor = false;
          for (Evidence e : d.getVendorEvidence().getEvidence("grokassembly", "vendor")) {
              if ("OWASP".equals(e.getValue())) {
                  foundVendor = true;
              }
          }
          assertTrue(foundVendor);
  
          boolean foundProduct = false;
          for (Evidence e : d.getProductEvidence().getEvidence("grokassembly", "product")) {
              if ("GrokAssembly".equals(e.getValue())) {
                  foundProduct = true;
             }
         }
         assertTrue(foundProduct);
     }
 
     @Test
     public void testLog4Net() throws Exception {
         //File f = new File(AssemblyAnalyzerTest.class.getClassLoader().getResource("log4net.dll").getPath());
         File f = BaseTest.getResourceAsFile(this, "log4net.dll");
 
         Dependency d = new Dependency(f);
         analyzer.analyze(d, null);
         assertTrue(d.getVersionEvidence().getEvidence().contains(new Evidence("grokassembly", "version", "1.2.13.0", Confidence.HIGHEST)));
         assertTrue(d.getVendorEvidence().getEvidence().contains(new Evidence("grokassembly", "vendor", "The Apache Software Foundation", Confidence.HIGH)));
         assertTrue(d.getProductEvidence().getEvidence().contains(new Evidence("grokassembly", "product", "log4net", Confidence.HIGH)));
     }
 
     @Test
     public void testNonexistent() {
         // Tweak the log level so the warning doesn't show in the console
         String oldProp = System.getProperty(LOG_KEY, "info");
         //File f = new File(AssemblyAnalyzerTest.class.getClassLoader().getResource("log4net.dll").getPath());
         File f = BaseTest.getResourceAsFile(this, "log4net.dll");
         File test = new File(f.getParent(), "nonexistent.dll");
         Dependency d = new Dependency(test);
 
         try {
             analyzer.analyze(d, null);
             fail("Expected an AnalysisException");
         } catch (AnalysisException ae) {
             assertEquals("File does not exist", ae.getMessage());
         } finally {
             System.setProperty(LOG_KEY, oldProp);
         }
     }
 
     @Test
     public void testWithSettingMono() throws Exception {
 
         //This test doesn't work on Windows.
         assumeFalse(System.getProperty("os.name").startsWith("Windows"));
 
         String oldValue = Settings.getString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH);
         // if oldValue is null, that means that neither the system property nor the setting has
         // been set. If that's the case, then we have to make it such that when we recover,
         // null still comes back. But you can't put a null value in a HashMap, so we have to set
         // the system property rather than the setting.
         if (oldValue == null) {
             System.setProperty(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, "/yooser/bine/mono");
         } else {
             Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, "/yooser/bine/mono");
         }
 
         String oldProp = System.getProperty(LOG_KEY, "info");
         try {
             // Tweak the logging to swallow the warning when testing
             System.setProperty(LOG_KEY, "error");
             // Have to make a NEW analyzer because during setUp, it would have gotten the correct one
             AssemblyAnalyzer aanalyzer = new AssemblyAnalyzer();
             aanalyzer.accept(new File("test.dll")); // trick into "thinking it is active"
             aanalyzer.initialize();
             fail("Expected an InitializationException");
         } catch (InitializationException ae) {
             assertEquals("An error occurred with the .NET AssemblyAnalyzer", ae.getMessage());
         } finally {
             System.setProperty(LOG_KEY, oldProp);
             // Recover the logger
             // Now recover the way we came in. If we had to set a System property, delete it. Otherwise,
             // reset the old value
             if (oldValue == null) {
                 System.getProperties().remove(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH);
             } else {
                 Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, oldValue);
             }
         }
     }
 
     @After
     public void tearDown() throws Exception {
         analyzer.close();
     }
 }