From 9efca707b671d9e1dae3d6e5b064d12364906a3c Mon Sep 17 00:00:00 2001
From: Zeke Medley <zeke@corelight.com>
Date: Mon, 24 Jun 2019 12:40:16 -0700
Subject: [PATCH] Add leak test to paraglob.

---
 testing/btest/core/leaks/paraglob.zeek | 34 ++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 testing/btest/core/leaks/paraglob.zeek

diff --git a/testing/btest/core/leaks/paraglob.zeek b/testing/btest/core/leaks/paraglob.zeek
new file mode 100644
index 0000000000..c9e42f51e0
--- /dev/null
+++ b/testing/btest/core/leaks/paraglob.zeek
@@ -0,0 +1,34 @@
+# Needs perftools support.
+#
+# @TEST-GROUP: leaks
+#
+# @TEST-REQUIRES: zeek  --help 2>&1 | grep -q mem-leaks
+#
+# @TEST-EXEC: HEAP_CHECK_DUMP_DIRECTORY=. HEAPCHECK=local btest-bg-run zeek zeek -m -b -r $TRACES/http/get.trace %INPUT
+# @TEST-EXEC: btest-bg-wait 120
+
+event new_connection (c : connection)
+{
+  local v1 = vector("*", "d?g", "*og", "d?", "d[!wl]g");
+  local v2 = vector("once", "!o*", "once");
+  local v3 = vector("https://*.google.com/*", "*malware*", "*.gov*");
+
+  local p1 = paraglob_init(v1);
+  local p2: opaque of paraglob = paraglob_init(v2);
+  local p3 = paraglob_init(v3);
+  local p_eq = paraglob_init(v1);
+
+  # paraglob_init should not modify v1
+  print (v1 == vector("*", "d?g", "*og", "d?", "d[!wl]g"));
+  # p_eq and p1 should be the same paraglobs
+  print paraglob_equals(p_eq, p1);
+
+  print paraglob_get(p1, "dog");
+
+
+  print paraglob_get(p2, "once");
+  print paraglob_get(p3, "www.strange-malware-domain.gov");
+
+  local large_glob: opaque of paraglob = paraglob_init(v3);
+  print paraglob_get(large_glob, "www.strange-malware-domain.gov");
+}