summaryrefslogtreecommitdiffstats
path: root/debian/perl-framework/t/security/CVE-2004-0958.t
blob: 87e8d39e6002df9e2736930c1f9f80c431535e79 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
use strict;
use warnings FATAL => 'all';

use Apache::Test;
use Apache::TestUtil;
use Apache::TestRequest;

my %queries =
(

 "foo[bar=1" => qr/\[foo_bar\] => 1\n/,
 "foo bar=2" => qr/\[foo_bar\] => 2\n/,
 "foo. .bar=3" => qr/\[foo___bar\] => 3\n/,
 "foobar[=3" => qr/\[foobar_\] => 3\n/,

 "foo[g][=1" => qr/\[g\] => 1\n/, # corruption pre-5.0.2/4.3.9
 "foo[][=2" => qr/\[0\] => 2\n/, # segfault in 5.0.2/4.3.9

 "foo[][[[[[=3" => qr/\[0\] => 3\n/,
 "foo[][][][][]=5" => qr/\[0\] => 5\n/,

 "foo[j]bar=6" => qr/\[j\] => 6\n/,


### tests which have dubious results currently:
# "foo[[[[[[[h]=4" => qr/\[0\] => 4\n/,
# "foo[ ]=7" => qr/\[baz\] => 7\n/,
# "foo[  ]=7" => qr/\[baz\] => 7\n/,

 );

plan tests => (keys %queries) * 1, need_php;

foreach (keys %queries) {
    my $actual = GET_BODY "/security/CAN-2004-0958.php?".$_;
    ok t_cmp($actual, $queries{$_}, "query for $_");
}