Initial Commit

naxsi-0.55.3/ext/libinjection/test_speed_sqli.c

@@ -0,0 +1,68 @@
+/*
+ * A not very good test for performance.  This is mostly useful in
+ * testing performance -regressions-
+ *
+ */
+#include <time.h>
+#include <string.h>
+#include <stdio.h>
+
+#include "libinjection.h"
+#include "libinjection_sqli.h"
+int testIsSQL(void);
+
+int testIsSQL(void)
+{
+    const char* const s[] = {
+        "123 LIKE -1234.5678E+2;",
+        "APPLE 19.123 'FOO' \"BAR\"",
+        "/* BAR */ UNION ALL SELECT (2,3,4)",
+        "1 || COS(+0X04) --FOOBAR",
+        "dog apple @cat banana bar",
+        "dog apple cat \"banana \'bar",
+        "102 TABLE CLOTH",
+        "(1001-'1') union select 1,2,3,4 from credit_cards",
+        NULL
+    };
+    const int imax = 1000000;
+    int i, j;
+    size_t slen;
+    sfilter sf;
+    clock_t t0,t1;
+    double total;
+    int tps;
+
+    t0 = clock();
+    for (i = imax, j=0; i != 0; --i, ++j) {
+        if (s[j] == NULL) {
+            j = 0;
+        }
+
+        slen = strlen(s[j]);
+        libinjection_sqli_init(&sf, s[j], slen, FLAG_QUOTE_NONE | FLAG_SQL_ANSI);
+        libinjection_is_sqli(&sf);
+    }
+
+    t1 = clock();
+    total = (double) (t1 - t0) / (double) CLOCKS_PER_SEC;
+    tps = (int)((double) imax / total);
+    return tps;
+}
+
+int main()
+{
+    const int mintps = 450000;
+    int tps = testIsSQL();
+
+    printf("\nTPS : %d\n\n", tps);
+
+    if (tps < mintps) {
+        printf("FAIL: %d < %d\n", tps, mintps);
+        /* FAIL */
+        return 1;
+    } else {
+        printf("OK: %d > %d\n", tps, mintps);
+        /* OK */
+        return 0;
+    }
+}