diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2017-08-01 17:16:07 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2017-08-07 09:24:30 +0200 |
| commit | 453e7a7a03a2cec749abd3878a48e728c515cca7 (patch) | |
| tree | 79b607daa5b3e4aa8175becf49a849c491fbc746 /tests/data/test1289 | |
| parent | 358b2b131ad6c095696f20dcfa62b8305263f898 (diff) | |
glob: do not continue parsing after a strtoul() overflow range
Added test 1289 to verify.
CVE-2017-1000101
Bug: https://curl.haxx.se/docs/adv_20170809A.html
Reported-by: Brian Carpenter
Diffstat (limited to 'tests/data/test1289')
| -rw-r--r-- | tests/data/test1289 | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/tests/data/test1289 b/tests/data/test1289 new file mode 100644 index 000000000..d679cc0bc --- /dev/null +++ b/tests/data/test1289 @@ -0,0 +1,35 @@ +<testcase> +<info> +<keywords> +HTTP +HTTP GET +globbing +</keywords> +</info> + +# +# Server-side +<reply> +</reply> + +# Client-side +<client> +<server> +http +</server> +<name> +globbing with overflow and bad syntxx +</name> +<command> +http://ur%20[0-60000000000000000000 +</command> +</client> + +# Verify data after the test has been "shot" +<verify> +# curl: (3) [globbing] bad range in column +<errorcode> +3 +</errorcode> +</verify> +</testcase> |