shieldcontract 0.2.0

Advanced security analysis for blockchain platforms
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122

use shieldcontract::solana::SolanaAnalyzer;
use std::path::Path;

#[tokio::test]
async fn test_solana_analyzer_detects_arithmetic_issues() {
    let mut analyzer = SolanaAnalyzer::new().expect("Failed to create analyzer");
    let path = Path::new("examples/vulnerable_solana_program.rs.example");

    let result = analyzer
        .analyze_program(path)
        .await
        .expect("Analysis failed");

    // Should detect arithmetic issues
    let arithmetic_findings: Vec<_> = result
        .findings
        .iter()
        .filter(|f| f.category.contains("Arithmetic"))
        .collect();

    assert!(
        !arithmetic_findings.is_empty(),
        "Should detect arithmetic issues"
    );
    assert!(arithmetic_findings.iter().any(|f| f.id == "SOL-ARITH-001"));
}

#[tokio::test]
async fn test_solana_analyzer_detects_account_validation_issues() {
    let mut analyzer = SolanaAnalyzer::new().expect("Failed to create analyzer");
    let path = Path::new("examples/vulnerable_solana_program.rs.example");

    let result = analyzer
        .analyze_program(path)
        .await
        .expect("Analysis failed");

    // Should detect account validation issues
    let account_findings: Vec<_> = result
        .findings
        .iter()
        .filter(|f| f.category.contains("AccountValidation"))
        .collect();

    assert!(
        !account_findings.is_empty(),
        "Should detect account validation issues"
    );
}

#[tokio::test]
async fn test_solana_analyzer_detects_signer_check_issues() {
    let mut analyzer = SolanaAnalyzer::new().expect("Failed to create analyzer");
    let path = Path::new("examples/vulnerable_solana_program.rs.example");

    let result = analyzer
        .analyze_program(path)
        .await
        .expect("Analysis failed");

    // Should detect signer check issues
    let signer_findings: Vec<_> = result
        .findings
        .iter()
        .filter(|f| f.category.contains("SignerCheck"))
        .collect();

    assert!(
        !signer_findings.is_empty(),
        "Should detect signer check issues"
    );
}

#[tokio::test]
async fn test_solana_analyzer_calculates_scores() {
    let mut analyzer = SolanaAnalyzer::new().expect("Failed to create analyzer");
    let path = Path::new("examples/vulnerable_solana_program.rs.example");

    let result = analyzer
        .analyze_program(path)
        .await
        .expect("Analysis failed");

    // Scores should be calculated
    assert!(result.security_score >= 0.0 && result.security_score <= 100.0);
    assert!(result.performance_score >= 0.0 && result.performance_score <= 100.0);
    assert!(result.best_practices_score >= 0.0 && result.best_practices_score <= 100.0);
}

#[tokio::test]
async fn test_solana_analyzer_handles_nonexistent_file() {
    let mut analyzer = SolanaAnalyzer::new().expect("Failed to create analyzer");
    let path = Path::new("nonexistent.rs");

    let result = analyzer.analyze_program(path).await;
    assert!(result.is_err(), "Should fail for nonexistent file");
}

#[tokio::test]
async fn test_solana_analyzer_empty_file() {
    use tokio::fs;

    // Create a temporary empty file
    let temp_file = "test_empty.rs";
    fs::write(temp_file, "")
        .await
        .expect("Failed to create temp file");

    let mut analyzer = SolanaAnalyzer::new().expect("Failed to create analyzer");
    let path = Path::new(temp_file);

    let result = analyzer.analyze_program(path).await;

    // Clean up
    fs::remove_file(temp_file).await.ok();

    // Should handle empty file gracefully
    assert!(result.is_ok(), "Should handle empty file");
    if let Ok(res) = result {
        assert_eq!(res.findings.len(), 0); // No findings for empty file
    }
}