From 66aff75446289e5d5f1db562252fc26923553ba4 Mon Sep 17 00:00:00 2001
From: TristonianJones <tswadell@google.com>
Date: Tue, 13 Jan 2026 15:24:31 -0800
Subject: [PATCH] Networking extension conformance tests

---
 tests/simple/testdata/network_ext.textproto | 315 ++++++++++++++++++++
 1 file changed, 315 insertions(+)
 create mode 100644 tests/simple/testdata/network_ext.textproto

diff --git a/tests/simple/testdata/network_ext.textproto b/tests/simple/testdata/network_ext.textproto
new file mode 100644
index 0000000..ef6bd65
--- /dev/null
+++ b/tests/simple/testdata/network_ext.textproto
@@ -0,0 +1,315 @@
+# proto-file: ../../../proto/cel/expr/conformance/test/simple.proto
+# proto-message: cel.expr.conformance.test.SimpleTestFile
+
+name: "network_ext"
+description: "Conformance tests for IP address extensions in CEL"
+section {
+  name: "ip_type"
+  description: "Tests for parsing and validating IP addresses"
+  test {
+    name: "parse_ipv4"
+    description: "Successfully parse a standard IPv4 address"
+    expr: "string(ip('192.168.0.1'))"
+    value: { string_value: "192.168.0.1" }  
+  }
+  test {
+    name: "parse_invalid_ipv4"
+    description: "Fail to parse an invalid IPv4 address"
+    expr: "ip('192.168.0.1.0')"
+    eval_error: {
+      errors: {
+        message: "IP Address '192.168.0.1.0' parse error during conversion from string"
+      }
+    }
+  }
+  test {
+    name: "is_ip_valid_ipv4"
+    description: "isIP returns true for valid IPv4"
+    expr: "isIP('192.168.0.1')"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_ip_invalid_ipv4"
+    description: "isIP returns false for invalid IPv4"
+    expr: "isIP('192.168.0.1.0')"
+    value: { bool_value: false }
+  }
+  test {
+    name: "ip_is_canonical_valid_ipv4"
+    description: "ip.isCanonical returns true for valid IPv4"
+    expr: "ip.isCanonical('127.0.0.1')"
+    value: { bool_value: true }
+  }
+  test {
+    name: "ip_is_canonical_invalid_ipv4"
+    description: "ip.isCanonical errors on invalid address string"
+    expr: "ip.isCanonical('127.0.0.1.0')"
+    eval_error: {
+      errors: {
+        message: "IP Address '127.0.0.1.0' parse error during conversion from string"
+      }
+    }
+  }
+  test {
+    name: "ip_is_canonical_non_canonical_ipv6"
+    description: "IPv6 with uppercase letters is not canonical"
+    expr: "ip.isCanonical('2001:DB8::68')"
+    value: { bool_value: false }
+  }
+  test {
+    name: "parse_ipv6"
+    expr: "string(ip('2001:db8::68'))"
+    value: { string_value: "2001:db8::68" }
+  }
+  test {
+    name: "parse_invalid_ipv6"
+    expr: "ip('2001:db8:::68')"
+    eval_error: {
+      errors: {
+        message: "IP Address '2001:db8:::68' parse error"
+      }
+    }
+  }
+  test {
+    name: "ip_to_string"
+    description: "Converting an IP address back to a string"
+    expr: "string(ip('192.168.0.1'))"
+    value: { string_value: "192.168.0.1" }
+  }
+  test {
+    name: "ip_type"
+    description: "Check the type of the IP object"
+    expr: "type(ip('192.168.0.1')) == net.IP"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_ip_cidr_compile_error"
+    description: "isIP should not accept a CIDR type"
+    expr: "isIP(cidr('192.168.0.0/24'))"
+    disable_check: false
+    eval_error: {
+      errors: {
+        message: "found no matching overload for 'isIP' applied to '(net.CIDR)'"
+      }
+    }
+  }
+}
+section {
+  name: "ipv4"
+  description: "Tests for properties and methods of IPv4 addresses"
+  test {
+    name: "ipv4_family"
+    expr: "ip('192.168.0.1').family()"
+    value: { int64_value: 4 }
+  }
+  test {
+    name: "ipv4_is_unspecified_true"
+    expr: "ip('0.0.0.0').isUnspecified()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "ipv4_is_unspecified_false"
+    expr: "ip('127.0.0.1').isUnspecified()"
+    value: { bool_value: false }
+  }
+  test {
+    name: "ipv4_is_loopback_true"
+    expr: "ip('127.0.0.1').isLoopback()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "ipv4_is_loopback_false"
+    expr: "ip('1.2.3.4').isLoopback()"
+    value: { bool_value: false }
+  }
+  test {
+    name: "ipv4_is_global_unicast_true"
+    expr: "ip('192.168.0.1').isGlobalUnicast()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "ipv4_is_global_unicast_false"
+    expr: "ip('255.255.255.255').isGlobalUnicast()"
+    value: { bool_value: false }
+  }
+  test {
+    name: "is_link_local_multicast_true"
+    expr: "ip('224.0.0.1').isLinkLocalMulticast()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_link_local_multicast_false"
+    expr: "ip('224.0.1.1').isLinkLocalMulticast()"
+    value: { bool_value: false }
+  }
+  test {
+    name: "is_link_local_unicast_true"
+    expr: "ip('169.254.169.254').isLinkLocalUnicast()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_link_local_unicast_false"
+    expr: "ip('192.168.0.1').isLinkLocalUnicast()"
+    value: { bool_value: false }
+  }
+}
+section {
+  name: "ipv6"
+  description: "Tests for properties and methods of IPv6 addresses"
+  test {
+    name: "family"
+    expr: "ip('2001:db8::68').family()"
+    value: { int64_value: 6 }
+  }
+  test {
+    name: "is_unspecified_true"
+    expr: "ip('::').isUnspecified()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_loopback_true"
+    expr: "ip('::1').isLoopback()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_global_unicast_true"
+    expr: "ip('2001:db8::abcd').isGlobalUnicast()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_global_unicast_false"
+    expr: "ip('ff00::1').isGlobalUnicast()"
+    value: { bool_value: false }
+  }
+  test {
+    name: "is_link_local_multicast_true"
+    expr: "ip('ff02::1').isLinkLocalMulticast()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_link_local_multicast_false"
+    expr: "ip('fd00::1').isLinkLocalMulticast()"
+    value: { bool_value: false }
+  }
+  test {
+    name: "is_link_local_unicast_true"
+    expr: "ip('fe80::1').isLinkLocalUnicast()"
+    value: { bool_value: true }
+  }
+  test {
+    name: "is_link_local_unicast_false"
+    expr: "ip('fd80::1').isLinkLocalUnicast()"
+    value: { bool_value: false }
+  }
+}
+
+section {
+  name: "cidr"
+  description: "Tests for CIDR parsing and range checking"
+  test {
+    name: "parse_cidr_ipv4"
+    expr: "type(cidr('192.168.0.0/24')) == net.CIDR"
+    value: { bool_value: true }
+  }
+  test {
+    name: "parse_invalid_cidr_ipv4"
+    expr: "cidr('192.168.0.0/')"
+    eval_error: {
+      errors: {
+        message: "network address parse error during conversion from string"
+      }
+    }
+  }
+  test {
+    name: "cidr_contains_ip_ipv4_object"
+    expr: "cidr('192.168.0.0/24').containsIP(ip('192.168.0.1'))"
+    value: { bool_value: true }
+  }
+  test {
+    name: "cidr_does_not_contain_ip_ipv4_object"
+    expr: "cidr('192.168.0.0/24').containsIP(ip('192.168.1.1'))"
+    value: { bool_value: false }
+  }
+  test {
+    name: "cidr_contains_ip_ipv4_string"
+    expr: "cidr('192.168.0.0/24').containsIP('192.168.0.1')"
+    value: { bool_value: true }
+  }
+  test {
+    name: "cidr_does_not_contain_ip_ipv4_string"
+    expr: "cidr('192.168.0.0/24').containsIP('192.168.1.1')"
+    value: { bool_value: false }
+  }
+  test {
+    name: "cidr_contains_cidr_ipv4_object"
+    expr: "cidr('192.168.0.0/24').containsCIDR(cidr('192.168.0.0/25'))"
+    value: { bool_value: true }
+  }
+  test {
+    name: "cidr_contains_cidr_ipv4_object_32"
+    expr: "cidr('192.168.0.0/24').containsCIDR(cidr('192.168.0.1/32'))"
+    value: { bool_value: true }
+  }
+  test {
+    name: "cidr_does_not_contain_cidr_ipv4_object"
+    expr: "cidr('192.168.0.0/24').containsCIDR(cidr('192.168.0.0/23'))"
+    value: { bool_value: false }
+  }
+  test {
+    name: "cidr_contains_cidr_ipv4_string"
+    expr: "cidr('192.168.0.0/24').containsCIDR('192.168.0.0/25')"
+    value: { bool_value: true }
+  }
+  test {
+    name: "cidr_get_ip_ipv4"
+    expr: "cidr('192.168.0.0/24').ip() == ip('192.168.0.0')"
+    value: { bool_value: true }
+  }
+  test {
+    name: "cidr_masked_ipv4"
+    expr: "cidr('192.168.0.1/24').masked()"
+    value: { string_value: "192.168.0.0/24" }
+  }
+  test {
+    name: "cidr_prefix_length_ipv4"
+    expr: "cidr('192.168.0.0/24').prefixLength()"
+    value: { int64_value: 24 }
+  }
+  test {
+    name: "parse_cidr_ipv6"
+    expr: "string(cidr('2001:db8::/32'))"
+    value: { string_value: "2001:db8::/32" }
+  }
+  test {
+    name: "cidr_contains_ip_ipv6_object"
+    expr: "cidr('2001:db8::/32').containsIP(ip('2001:db8::1'))"
+    value: { bool_value: true }
+  }
+  test {
+    name: "cidr_contains_cidr_ipv6_object"
+    expr: "cidr('2001:db8::/32').containsCIDR(cidr('2001:db8::/33'))"
+    value: { bool_value: true }
+  }
+  test {
+    name: "cidr_get_ip_ipv6"
+    expr: "cidr('2001:db8::/32').ip() == ip('2001:db8::')"
+    value: { bool_value: "true" }
+  }
+  test {
+    name: "cidr_prefix_length_ipv6"
+    expr: "cidr('2001:db8::/32').prefixLength()"
+    value: { int64_value: 32 }
+  }
+  test {
+    name: "cidr_to_string"
+    description: "Converting a CIDR back to a string"
+    expr: "string(cidr('192.168.0.0/24'))"
+    value: { string_value: "192.168.0.0/24" }
+  }
+  test {
+    name: "cidr_type"
+    description: "Check the type of the CIDR object"
+    expr: "type(cidr('192.168.0.0/24')) == net.CIDR"
+    value: { bool_value: true }
+  }
+}