src/Cidr.hs

   1 module Cidr
   2 ( Cidr(..),
   3   cidr_from_string,
   4   cidr_tests,
   5   combine_all,
   6   contains,
   7   contains_proper,
   8   max_octet1,
   9   max_octet2,
  10   max_octet3,
  11   max_octet4,
  12   min_octet1,
  13   min_octet2,
  14   min_octet3,
  15   min_octet4,
  16   prop_all_cidrs_contain_themselves,
  17   prop_contains_proper_intransitive
  18 ) where
  19
  20 import Data.List (nubBy)
  21 import Test.HUnit
  22 import Test.QuickCheck
  23
  24 import qualified Bit as B
  25 import IPv4Address
  26 import ListUtils
  27 import Maskable
  28 import Maskbits
  29 import Octet
  30
  31
  32 data Cidr = None | Cidr { ipv4address :: IPv4Address,
  33                           maskbits :: Maskbits }
  34             deriving (Eq)
  35
  36
  37 instance Show Cidr where
  38     show Cidr.None = "None"
  39     show cidr = (show (ipv4address cidr)) ++ "/" ++ (show (maskbits cidr))
  40
  41
  42 instance Arbitrary Cidr where
  43     arbitrary = do
  44       ipv4 <- arbitrary :: Gen IPv4Address
  45       mask <- arbitrary :: Gen Maskbits
  46       return (Cidr ipv4 mask)
  47
  48     coarbitrary _ = variant 0
  49
  50
  51 -- Two CIDR ranges are equivalent if they have the same network bits
  52 -- and the masks are the same.
  53 equivalent :: Cidr -> Cidr -> Bool
  54 equivalent Cidr.None Cidr.None = True
  55 equivalent Cidr.None _ = False
  56 equivalent _ Cidr.None = False
  57 equivalent (Cidr addr1 mbits1) (Cidr addr2 mbits2) =
  58     (mbits1 == mbits2) && ((apply_mask addr1 mbits1) == (apply_mask addr2 mbits2))
  59
  60 -- Returns the mask portion of a CIDR address. That is, everything
  61 -- after the trailing slash.
  62 maskbits_from_cidr_string :: String -> Maskbits
  63 maskbits_from_cidr_string s =
  64     maskbits_from_string ((splitWith (`elem` "/") s) !! 1)
  65
  66
  67 -- Takes an IP address String in CIDR notation, and returns a list of
  68 -- its octets (as Ints).
  69 octets_from_cidr_string :: String -> [Octet]
  70 octets_from_cidr_string s =
  71     map octet_from_string (take 4 (splitWith (`elem` "./") s))
  72
  73
  74 cidr_from_string :: String -> Cidr
  75 cidr_from_string s
  76     | addr  == IPv4Address.None = Cidr.None
  77     | mbits == Maskbits.None    = Cidr.None
  78     | otherwise = Cidr addr mbits
  79                where
  80                  addr = ipv4address_from_octets (oct1) (oct2) (oct3) (oct4)
  81                  oct1 = (octs !! 0)
  82                  oct2 = (octs !! 1)
  83                  oct3 = (octs !! 2)
  84                  oct4 = (octs !! 3)
  85                  octs  = octets_from_cidr_string s
  86                  mbits = maskbits_from_cidr_string s
  87
  88
  89
  90 min_host :: Cidr -> IPv4Address
  91 min_host Cidr.None                 = IPv4Address.None
  92 min_host (Cidr IPv4Address.None _) = IPv4Address.None
  93 min_host (Cidr _ Maskbits.None)    = IPv4Address.None
  94 min_host (Cidr addr mask)
  95     | mask == ThirtyTwo = addr
  96     | mask == ThirtyOne = addr { octet4 = apply_mask oct4 Seven }
  97     | mask == Thirty = addr { octet4 = apply_mask oct4 Six }
  98     | mask == TwentyNine = addr { octet4 = apply_mask oct4 Five }
  99     | mask == TwentyEight = addr { octet4 = apply_mask oct4 Four }
 100     | mask == TwentySeven = addr { octet4 = apply_mask oct4 Three }
 101     | mask == TwentySix = addr { octet4 = apply_mask oct4 Two }
 102     | mask == TwentyFive = addr { octet4 = apply_mask oct4 One }
 103     | mask == TwentyFour = addr { octet4 = min_octet }
 104     | mask == TwentyThree = addr { octet3 = apply_mask oct3 Seven,
 105                                    octet4 = min_octet }
 106     | mask == TwentyTwo = addr { octet3 = apply_mask oct3 Six,
 107                                  octet4 = min_octet }
 108     | mask == TwentyOne = addr { octet3 = apply_mask oct3 Five,
 109                                  octet4 = min_octet }
 110     | mask == Twenty = addr { octet3 = apply_mask oct3 Four,
 111                               octet4 = min_octet }
 112     | mask == Nineteen = addr { octet3 = apply_mask oct3 Three,
 113                                 octet4 = min_octet }
 114     | mask == Eighteen = addr { octet3 = apply_mask oct3 Two,
 115                                 octet4 = min_octet }
 116     | mask == Seventeen = addr { octet3 = apply_mask oct3 One,
 117                                  octet4 = min_octet }
 118     | mask == Sixteen = addr { octet3 = min_octet,
 119                                octet4 = min_octet }
 120     | mask == Fifteen = addr { octet2 = apply_mask oct2 Seven,
 121                                octet3 = min_octet,
 122                                octet4 = min_octet }
 123     | mask == Fourteen = addr { octet2 = apply_mask oct2 Six,
 124                                 octet3 = min_octet,
 125                                 octet4 = min_octet }
 126     | mask == Thirteen = addr { octet2 = apply_mask oct2 Five,
 127                                 octet3 = min_octet,
 128                                 octet4 = min_octet }
 129     | mask == Twelve = addr { octet2 = apply_mask oct2 Four,
 130                               octet3 = min_octet,
 131                               octet4 = min_octet }
 132     | mask == Eleven = addr { octet2 = apply_mask oct2 Three,
 133                               octet3 = min_octet,
 134                               octet4 = min_octet }
 135     | mask == Ten = addr { octet2 = apply_mask oct2 Two,
 136                            octet3 = min_octet,
 137                            octet4 = min_octet }
 138     | mask == Nine = addr { octet2 = apply_mask oct2 One,
 139                             octet3 = min_octet,
 140                             octet4 = min_octet }
 141     | mask == Eight = addr { octet2 = min_octet,
 142                              octet3 = min_octet,
 143                              octet4 = min_octet }
 144     | mask == Seven = addr { octet1 = apply_mask oct1 Seven,
 145                              octet2 = min_octet,
 146                              octet3 = min_octet,
 147                              octet4 = min_octet }
 148     | mask == Six = addr { octet1 = apply_mask oct1 Six,
 149                            octet2 = min_octet,
 150                            octet3 = min_octet,
 151                            octet4 = min_octet }
 152     | mask == Five = addr { octet1 = apply_mask oct1 Five,
 153                             octet2 = min_octet,
 154                             octet3 = min_octet,
 155                             octet4 = min_octet }
 156     | mask == Four = addr { octet1 = apply_mask oct1 Four,
 157                             octet2 = min_octet,
 158                             octet3 = min_octet,
 159                             octet4 = min_octet }
 160     | mask == Three = addr { octet1 = apply_mask oct1 Three,
 161                              octet2 = min_octet,
 162                              octet3 = min_octet,
 163                              octet4 = min_octet }
 164     | mask == Two = addr { octet1 = apply_mask oct1 Two,
 165                            octet2 = min_octet,
 166                            octet3 = min_octet,
 167                            octet4 = min_octet }
 168     | mask == One = addr { octet1 = apply_mask oct1 One,
 169                            octet2 = min_octet,
 170                            octet3 = min_octet,
 171                            octet4 = min_octet }
 172     | mask == Zero = addr { octet1 = min_octet,
 173                             octet2 = min_octet,
 174                             octet3 = min_octet,
 175                             octet4 = min_octet }
 176     | otherwise = addr
 177     where
 178       oct1 = (octet1 addr)
 179       oct2 = (octet2 addr)
 180       oct3 = (octet3 addr)
 181       oct4 = (octet4 addr)
 182
 183
 184
 185 max_host :: Cidr -> IPv4Address
 186 max_host Cidr.None                 = IPv4Address.None
 187 max_host (Cidr IPv4Address.None _) = IPv4Address.None
 188 max_host (Cidr _ Maskbits.None)    = IPv4Address.None
 189 max_host (Cidr addr mask)
 190     | mask == ThirtyTwo = ipv4address_from_octets oct1 oct2 oct3 oct4
 191     | mask == ThirtyOne = ipv4address_from_octets oct1 oct2 oct3 (Octet a25 a26 a27 a28 a29 a30 a31 B.One)
 192     | mask == Thirty = ipv4address_from_octets oct1 oct2 oct3 (Octet a25 a26 a27 a28 a29 a30 B.One B.One)
 193     | mask == TwentyNine = ipv4address_from_octets oct1 oct2 oct3 (Octet a25 a26 a27 a28 a29 B.One B.One B.One)
 194     | mask == TwentyEight = ipv4address_from_octets oct1 oct2 oct3 (Octet a25 a26 a27 a28 B.One B.One B.One B.One)
 195     | mask == TwentySeven = ipv4address_from_octets oct1 oct2 oct3 (Octet a25 a26 a27 B.One B.One B.One B.One B.One)
 196     | mask == TwentySix = ipv4address_from_octets oct1 oct2 oct3 (Octet a25 a26 B.One B.One B.One B.One B.One B.One)
 197     | mask == TwentyFive = ipv4address_from_octets oct1 oct2 oct3 (Octet a25 B.One B.One B.One B.One B.One B.One B.One)
 198     | mask == TwentyFour = ipv4address_from_octets oct1 oct2 oct3 (max_octet)
 199     | mask == TwentyThree = ipv4address_from_octets oct1 oct2 (Octet a17 a18 a19 a20 a21 a22 a23 B.One) (max_octet)
 200     | mask == TwentyTwo = ipv4address_from_octets oct1 oct2 (Octet a17 a18 a19 a20 a21 a22 B.One B.One) (max_octet)
 201     | mask == TwentyOne = ipv4address_from_octets oct1 oct2 (Octet a17 a18 a19 a20 a21 B.One B.One B.One) (max_octet)
 202     | mask == Twenty = ipv4address_from_octets oct1 oct2 (Octet a17 a18 a19 a20 B.One B.One B.One B.One) (max_octet)
 203     | mask == Nineteen = ipv4address_from_octets oct1 oct2 (Octet a17 a18 a19 B.One B.One B.One B.One B.One) (max_octet)
 204     | mask == Eighteen = ipv4address_from_octets oct1 oct2 (Octet a17 a18 B.One B.One B.One B.One B.One B.One) (max_octet)
 205     | mask == Seventeen = ipv4address_from_octets oct1 oct2 (Octet a17 B.One B.One B.One B.One B.One B.One B.One) (max_octet)
 206     | mask == Sixteen = ipv4address_from_octets oct1 oct2 (max_octet) (max_octet)
 207     | mask == Fifteen = ipv4address_from_octets oct1 (Octet a9 a10 a11 a12 a13 a14 a15 B.One) (max_octet) (max_octet)
 208     | mask == Fourteen = ipv4address_from_octets oct1 (Octet a9 a10 a11 a12 a13 a14 B.One B.One) (max_octet) (max_octet)
 209     | mask == Thirteen = ipv4address_from_octets oct1 (Octet a9 a10 a11 a12 a13 B.One B.One B.One) (max_octet) (max_octet)
 210     | mask == Twelve = ipv4address_from_octets oct1 (Octet a9 a10 a11 a12 B.One B.One B.One B.One) (max_octet) (max_octet)
 211     | mask == Eleven = ipv4address_from_octets oct1 (Octet a9 a10 a11 B.One B.One B.One B.One B.One) (max_octet) (max_octet)
 212     | mask == Ten = ipv4address_from_octets oct1 (Octet a9 a10 B.One B.One B.One B.One B.One B.One) (max_octet) (max_octet)
 213     | mask == Nine = ipv4address_from_octets oct1 (Octet a9 B.One B.One B.One B.One B.One B.One B.One) (max_octet) (max_octet)
 214     | mask == Eight = ipv4address_from_octets oct1 (max_octet) (max_octet) (max_octet)
 215     | mask == Seven = ipv4address_from_octets (Octet a1 a2 a3 a4 a5 a6 a7 B.One) (max_octet) (max_octet) (max_octet)
 216     | mask == Six = ipv4address_from_octets (Octet a1 a2 a3 a4 a5 a6 B.One B.One) (max_octet) (max_octet) (max_octet)
 217     | mask == Five = ipv4address_from_octets (Octet a1 a2 a3 a4 a5 B.One B.One B.One) (max_octet) (max_octet) (max_octet)
 218     | mask == Four = ipv4address_from_octets (Octet a1 a2 a3 a4 B.One B.One B.One B.One) (max_octet) (max_octet) (max_octet)
 219     | mask == Three = ipv4address_from_octets (Octet a1 a2 a3 B.One B.One B.One B.One B.One) (max_octet) (max_octet) (max_octet)
 220     | mask == Two = ipv4address_from_octets (Octet a1 a2 B.One B.One B.One B.One B.One B.One) (max_octet) (max_octet) (max_octet)
 221     | mask == One = ipv4address_from_octets (Octet a1 B.One B.One B.One B.One B.One B.One B.One) (max_octet) (max_octet) (max_octet)
 222     | mask == Zero = ipv4address_from_octets (max_octet) (max_octet) (max_octet) (max_octet)
 223     | otherwise = addr
 224     where
 225       a1  = (b1 oct1)
 226       a2  = (b2 oct1)
 227       a3  = (b3 oct1)
 228       a4  = (b4 oct1)
 229       a5  = (b5 oct1)
 230       a6  = (b6 oct1)
 231       a7  = (b7 oct1)
 232       a9  = (b1 oct2)
 233       a10 = (b2 oct2)
 234       a11 = (b3 oct2)
 235       a12 = (b4 oct2)
 236       a13 = (b5 oct2)
 237       a14 = (b6 oct2)
 238       a15 = (b7 oct2)
 239       a17 = (b1 oct3)
 240       a18 = (b2 oct3)
 241       a19 = (b3 oct3)
 242       a20 = (b4 oct3)
 243       a21 = (b5 oct3)
 244       a22 = (b6 oct3)
 245       a23 = (b7 oct3)
 246       a25 = (b1 oct4)
 247       a26 = (b2 oct4)
 248       a27 = (b3 oct4)
 249       a28 = (b4 oct4)
 250       a29 = (b5 oct4)
 251       a30 = (b6 oct4)
 252       a31 = (b7 oct4)
 253       oct1 = (octet1 addr)
 254       oct2 = (octet2 addr)
 255       oct3 = (octet3 addr)
 256       oct4 = (octet4 addr)
 257
 258
 259
 260 min_octet1 :: Cidr -> Octet
 261 min_octet1 cidr = octet1 (min_host cidr)
 262
 263 min_octet2 :: Cidr -> Octet
 264 min_octet2 cidr = octet2 (min_host cidr)
 265
 266 min_octet3 :: Cidr -> Octet
 267 min_octet3 cidr = octet3 (min_host cidr)
 268
 269 min_octet4 :: Cidr -> Octet
 270 min_octet4 cidr = octet4 (min_host cidr)
 271
 272 max_octet1 :: Cidr -> Octet
 273 max_octet1 cidr = octet1 (max_host cidr)
 274
 275 max_octet2 :: Cidr -> Octet
 276 max_octet2 cidr = octet2 (max_host cidr)
 277
 278 max_octet3 :: Cidr -> Octet
 279 max_octet3 cidr = octet3 (max_host cidr)
 280
 281 max_octet4 :: Cidr -> Octet
 282 max_octet4 cidr = octet4 (max_host cidr)
 283
 284
 285
 286 -- Return true if the first argument (a CIDR range) contains the
 287 -- second (another CIDR range). There are a lot of ways we can be fed
 288 -- junk here. For lack of a better alternative, just return False when
 289 -- we are given nonsense.
 290 contains :: Cidr -> Cidr -> Bool
 291 contains Cidr.None _ = False
 292 contains _ Cidr.None = False
 293 contains (Cidr _ Maskbits.None) _    = False
 294 contains (Cidr IPv4Address.None _) _ = False
 295 contains _ (Cidr _ Maskbits.None)    = False
 296 contains _ (Cidr IPv4Address.None _) = False
 297
 298 -- If the number of bits in the network part of the first address is
 299 -- larger than the number of bits in the second, there is no way that
 300 -- the first range can contain the second. For, if the number of
 301 -- network bits is larger, then the number of host bits must be
 302 -- smaller, and if cidr1 has fewer hosts than cidr2, cidr1 most
 303 -- certainly does not contain cidr2.
 304 --
 305 -- On the other hand, if the first argument (cidr1) has fewer (or the
 306 -- same number of) network bits as the second, it can contain the
 307 -- second. In this case, we need to check that every host in cidr2 is
 308 -- contained in cidr1. If a host in cidr2 is contained in cidr1, then
 309 -- at least mbits1 of an address in cidr2 will match cidr1. For
 310 -- example,
 311 --
 312 -- cidr1 = 192.168.1.0/23, cidr2 = 192.168.1.100/24
 313 --
 314 -- Here, cidr2 contains all of 192.168.1.0 through
 315 -- 192.168.1.255. However, cidr1 contains BOTH 192.168.0.0 through
 316 -- 192.168.0.255 and 192.168.1.0 through 192.168.1.255. In essence,
 317 -- what we want to check is that cidr2 "begins with" something that
 318 -- cidr1 CAN begin with. Since cidr1 can begin with 192.168.1, and
 319 -- cidr2 DOES, cidr1 contains cidr2..
 320 --
 321 -- The way that we check this is to apply cidr1's mask to cidr2's
 322 -- address and see if the result is the same as cidr1's mask applied
 323 -- to cidr1's address.
 324 --
 325 contains (Cidr addr1 mbits1) (Cidr addr2 mbits2)
 326     | mbits1 > mbits2 = False
 327     | otherwise = addr1masked == addr2masked
 328     where
 329       addr1masked = apply_mask addr1 mbits1
 330       addr2masked = apply_mask addr2 mbits1
 331
 332
 333 contains_proper :: Cidr -> Cidr -> Bool
 334 contains_proper cidr1 cidr2 =
 335     (cidr1 `contains` cidr2) && (not (cidr2 `contains` cidr1))
 336
 337
 338 -- A CIDR range is redundant (with respect to the given list) if
 339 -- another CIDR range in that list properly contains it.
 340 redundant :: [Cidr] -> Cidr -> Bool
 341 redundant cidrlist cidr = any ((flip contains_proper) cidr) cidrlist
 342
 343
 344 -- First, we look at all possible pairs of cidrs, and combine the
 345 -- adjacent ones in to a new list. Then, we concatenate that list with
 346 -- the original one, and filter out all of the redundancies. If two
 347 -- adjacent Cidrs are combined into a larger one, they will be removed
 348 -- in the second step since the larger Cidr must contain the smaller
 349 -- two.
 350 combine_all :: [Cidr] -> [Cidr]
 351 combine_all cidrs =
 352     combine_contained unique_cidrs
 353     where
 354       unique_cidrs = nubBy equivalent valid_cidr_combinations
 355       valid_cidr_combinations = filter (/= Cidr.None) cidr_combinations
 356       cidr_combinations =
 357           cidrs ++ [ (combine_adjacent x y) | x <- cidrs, y <- cidrs ]
 358
 359
 360 -- Take a list of CIDR ranges and filter out all of the ones that are
 361 -- contained entirelt within some other range in the list.
 362 combine_contained :: [Cidr] -> [Cidr]
 363 combine_contained cidrs =
 364     filter (not . (redundant cidrs)) cidrs
 365
 366
 367 -- If the two Cidrs are not adjacent, return Cidr.None. Otherwise,
 368 -- decrement the maskbits of cidr1 and return that; it will contain
 369 -- both cidr1 and cidr2.
 370 combine_adjacent :: Cidr -> Cidr -> Cidr
 371 combine_adjacent cidr1 cidr2
 372   | not (adjacent cidr1 cidr2) = Cidr.None
 373   | (maskbits cidr1 == Zero) = Cidr.None
 374   | otherwise = cidr1 { maskbits = decrement (maskbits cidr1) }
 375
 376
 377
 378 -- Determine whether or not two CIDR ranges are adjacent. If two
 379 -- ranges lie consecutively within the IP space, they can be
 380 -- combined. For example, 10.1.0.0/24 and 10.0.1.0/24 are adjacent,
 381 -- and can be combined in to 10.1.0.0/23.
 382 adjacent :: Cidr -> Cidr -> Bool
 383 adjacent Cidr.None _ = False
 384 adjacent _ Cidr.None = False
 385 adjacent cidr1 cidr2
 386   | mbits1 /= mbits2 = False
 387   | mbits1 == Maskbits.Zero = False -- They're equal.
 388   | otherwise = (mbits1 == (most_sig_bit_different addr1 addr2))
 389   where
 390     addr1 = ipv4address cidr1
 391     addr2 = ipv4address cidr2
 392     mbits1 = maskbits cidr1
 393     mbits2 = maskbits cidr2
 394
 395
 396
 397
 398
 399 -- HUnit Tests
 400
 401 test_equality1 :: Test
 402 test_equality1 =
 403     TestCase $ assertEqual "10.1.1.0/23 equals itself" True (cidr1 == cidr1)
 404     where
 405       cidr1 = cidr_from_string "10.1.1.0/23"
 406
 407
 408 test_contains1 :: Test
 409 test_contains1 =
 410     TestCase $ assertEqual "10.1.1.0/23 contains 10.1.1.0/24" True (cidr1 `contains` cidr2)
 411     where
 412       cidr1 = cidr_from_string "10.1.1.0/23"
 413       cidr2 = cidr_from_string "10.1.1.0/24"
 414
 415
 416 test_contains2 :: Test
 417 test_contains2 =
 418     TestCase $ assertEqual "10.1.1.0/23 contains itself" True (cidr1 `contains` cidr1)
 419     where
 420       cidr1 = cidr_from_string "10.1.1.0/23"
 421
 422
 423 test_contains_proper1 :: Test
 424 test_contains_proper1 =
 425     TestCase $ assertEqual "10.1.1.0/23 contains 10.1.1.0/24 properly" True (cidr1 `contains_proper` cidr2)
 426     where
 427       cidr1 = cidr_from_string "10.1.1.0/23"
 428       cidr2 = cidr_from_string "10.1.1.0/24"
 429
 430
 431 test_contains_proper2 :: Test
 432 test_contains_proper2 =
 433     TestCase $ assertEqual "10.1.1.0/23 does not contain itself properly" False (cidr1 `contains_proper` cidr1)
 434     where
 435       cidr1 = cidr_from_string "10.1.1.0/23"
 436
 437
 438 test_adjacent1 :: Test
 439 test_adjacent1 =
 440     TestCase $ assertEqual "10.1.0.0/24 is adjacent to 10.1.1.0/24" True (cidr1 `adjacent` cidr2)
 441     where
 442       cidr1 = cidr_from_string "10.1.0.0/24"
 443       cidr2 = cidr_from_string "10.1.1.0/24"
 444
 445
 446 test_adjacent2 :: Test
 447 test_adjacent2 =
 448     TestCase $ assertEqual "10.1.0.0/23 is not adjacent to 10.1.0.0/24" False (cidr1 `adjacent` cidr2)
 449     where
 450       cidr1 = cidr_from_string "10.1.0.0/23"
 451       cidr2 = cidr_from_string "10.1.0.0/24"
 452
 453
 454 test_adjacent3 :: Test
 455 test_adjacent3 =
 456     TestCase $ assertEqual "10.1.0.0/24 is not adjacent to 10.2.5.0/24" False (cidr1 `adjacent` cidr2)
 457     where
 458       cidr1 = cidr_from_string "10.1.0.0/24"
 459       cidr2 = cidr_from_string "10.2.5.0/24"
 460
 461
 462 test_adjacent4 :: Test
 463 test_adjacent4 =
 464     TestCase $ assertEqual "10.1.1.0/24 is not adjacent to 10.1.2.0/24" False (cidr1 `adjacent` cidr2)
 465     where
 466       cidr1 = cidr_from_string "10.1.1.0/24"
 467       cidr2 = cidr_from_string "10.1.2.0/24"
 468
 469
 470 test_combine_contained1 :: Test
 471 test_combine_contained1 =
 472     TestCase $ assertEqual "10.0.0.0/8, 10.1.0.0/16, and 10.1.1.0/24 combine to 10.0.0.0/8" expected_cidrs (combine_contained test_cidrs)
 473     where
 474       cidr1 = cidr_from_string "10.0.0.0/8"
 475       cidr2 = cidr_from_string "10.1.0.0/16"
 476       cidr3 = cidr_from_string "10.1.1.0/24"
 477       expected_cidrs = [cidr1]
 478       test_cidrs = [cidr1, cidr2, cidr3]
 479
 480
 481 test_combine_contained2 :: Test
 482 test_combine_contained2 =
 483     TestCase $ assertEqual "192.168.3.0/23 does not contain 192.168.1.0/24" [cidr1, cidr2] (combine_contained [cidr1, cidr2])
 484     where
 485       cidr1 = cidr_from_string "192.168.3.0/23"
 486       cidr2 = cidr_from_string "192.168.1.0/24"
 487
 488
 489 test_combine_all1 :: Test
 490 test_combine_all1 =
 491     TestCase $ assertEqual "10.0.0.0/24 is adjacent to 10.0.1.0/24 and 10.0.3.0/23 contains 10.0.2.0/24" expected_cidrs (combine_all test_cidrs)
 492     where
 493       cidr1 = cidr_from_string "10.0.0.0/24"
 494       cidr2 = cidr_from_string "10.0.1.0/24"
 495       cidr3 = cidr_from_string "10.0.2.0/24"
 496       cidr4 = cidr_from_string "10.0.3.0/23"
 497       cidr5 = cidr_from_string "10.0.0.0/23"
 498       expected_cidrs = [cidr4, cidr5]
 499       test_cidrs = [cidr1, cidr2, cidr3, cidr4]
 500
 501
 502 test_combine_all2 :: Test
 503 test_combine_all2 =
 504     TestCase $ assertEqual "127.0.0.1/32 combines with itself recursively" expected_cidrs (combine_all test_cidrs)
 505     where
 506       cidr1 = cidr_from_string "127.0.0.1/32"
 507       expected_cidrs = [cidr1]
 508       test_cidrs = [cidr1, cidr1, cidr1, cidr1, cidr1]
 509
 510
 511 cidr_tests :: [Test]
 512 cidr_tests = [ test_equality1,
 513                test_contains1,
 514                test_contains2,
 515                test_contains_proper1,
 516                test_contains_proper2,
 517                test_adjacent1,
 518                test_adjacent2,
 519                test_adjacent3,
 520                test_adjacent4,
 521                test_combine_contained1,
 522                test_combine_contained2,
 523                test_combine_all1,
 524                test_combine_all2
 525              ]
 526
 527
 528 -- QuickCheck Tests
 529 prop_all_cidrs_contain_themselves :: Cidr -> Bool
 530 prop_all_cidrs_contain_themselves cidr1 = cidr1 `contains` cidr1
 531
 532
 533 -- If cidr1 properly contains cidr2, then by definition cidr2
 534 -- does not properly contain cidr1.
 535 prop_contains_proper_intransitive :: Cidr -> Cidr -> Property
 536 prop_contains_proper_intransitive cidr1 cidr2 =
 537     (cidr1 `contains_proper` cidr2) ==>
 538       (not (cidr2 `contains_proper` cidr1))