test_speed_sqli.c

/*
 * A not very good test for performance.  This is mostly useful in
 * testing performance -regressions-
 *
 */
#include <time.h>
#include <string.h>
#include <stdio.h>

#include "libinjection.h"
#include "libinjection_sqli.h"
int testIsSQL(void);

int testIsSQL(void)
{
    const char* const s[] = {
        "123 LIKE -1234.5678E+2;",
        "APPLE 19.123 'FOO' \"BAR\"",
        "/* BAR */ UNION ALL SELECT (2,3,4)",
        "1 || COS(+0X04) --FOOBAR",
        "dog apple @cat banana bar",
        "dog apple cat \"banana \'bar",
        "102 TABLE CLOTH",
        "(1001-'1') union select 1,2,3,4 from credit_cards",
        NULL
    };
    const int imax = 1000000;
    int i, j;
    size_t slen;
    sfilter sf;
    clock_t t0,t1;
    double total;
    int tps;

    t0 = clock();
    for (i = imax, j=0; i != 0; --i, ++j) {
        if (s[j] == NULL) {
            j = 0;
        }

        slen = strlen(s[j]);
        libinjection_sqli_init(&sf, s[j], slen, FLAG_QUOTE_NONE | FLAG_SQL_ANSI);
        libinjection_is_sqli(&sf);
    }

    t1 = clock();
    total = (double) (t1 - t0) / (double) CLOCKS_PER_SEC;
    tps = (int)((double) imax / total);
    return tps;
}

int main()
{
    const int mintps = 450000;
    int tps = testIsSQL();

    printf("\nTPS : %d\n\n", tps);

    if (tps < mintps) {
        printf("FAIL: %d < %d\n", tps, mintps);
        /* FAIL */
        return 1;
    } else {
        printf("OK: %d > %d\n", tps, mintps);
        /* OK */
        return 0;
    }
}