archive/ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2025-09-22 03:53:58 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

infect taint flag on Array#pack and String#unpack

Browse source 
with the directives "B", "b", "H" and "h".

	* pack.c (pack_pack, pack_unpack_internal): infect taint flag.

	* test/ruby/test_pack.rb: add test for above.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@65125 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
nagachika 2018-10-17 15:03:10 +00:00
parent 9304c0522d
commit 4989bad438
2 changed files with 23 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
test/ruby/test_pack.rb
View file

@ -862,4 +862,20 @@ EXPECTED
assert_equal "hogefuga", "aG9nZWZ1Z2E=".unpack1("m")
assert_equal "01000001", "A".unpack1("B*")
end
def test_pack_infection
tainted_array_string = ["123456"]
tainted_array_string.first.taint
['a', 'A', 'Z', 'B', 'b', 'H', 'h', 'u', 'M', 'm', 'P', 'p'].each do |f|
assert_predicate(tainted_array_string.pack(f), :tainted?)
end
end
def test_unpack_infection
tainted_string = "123456"
tainted_string.taint
['a', 'A', 'Z', 'B', 'b', 'H', 'h', 'u', 'M', 'm'].each do |f|
assert_predicate(tainted_string.unpack(f).first, :tainted?)
end
end
end