16accb6b24
- 264 license table entries with exact download URLs (224/264 resolved) - Complete sources/ directory with all BitBake recipes - Build configuration: tqma6ul-multi-mba6ulx, spaetzle (musl) - Full traceability for Softwarefreigabeantrag - GCC 13.4.0, Linux 6.6.102, U-Boot 2023.04, musl 1.2.4 - License distribution: GPL-2.0 (24), MIT (23), GPL-2.0+ (18), BSD-3 (16)
41 lines
1.5 KiB
Diff
41 lines
1.5 KiB
Diff
From 825fda3425546847b42ad5270544e9388ff349fe Mon Sep 17 00:00:00 2001
|
|
From: Patrick Griffis <pgriffis@igalia.com>
|
|
Date: Tue, 27 Aug 2024 13:52:08 -0500
|
|
Subject: [PATCH] tests: Add test for passing invalid UTF-8 to
|
|
soup_header_parse_semi_param_list()
|
|
|
|
CVE: CVE-2024-52531
|
|
Upstream-Status: Backport
|
|
[https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407/diffs?commit_id=825fda3425546847b42ad5270544e9388ff349fe]
|
|
|
|
Signed-off-by: Changqing Li <changqing.li@windriver.com>
|
|
---
|
|
tests/header-parsing-test.c | 11 +++++++++++
|
|
1 file changed, 11 insertions(+)
|
|
|
|
diff --git a/tests/header-parsing-test.c b/tests/header-parsing-test.c
|
|
index 715c2c6f..5e423d2b 100644
|
|
--- a/tests/header-parsing-test.c
|
|
+++ b/tests/header-parsing-test.c
|
|
@@ -825,6 +825,17 @@ static struct ParamListTest {
|
|
{ "filename", "t\xC3\xA9st.txt" },
|
|
},
|
|
},
|
|
+
|
|
+ /* This tests invalid UTF-8 data which *should* never be passed here but it was designed to be robust against it. */
|
|
+ { TRUE,
|
|
+ "invalid*=\x69\x27\x27\x93\x93\x93\x93\xff\x61\x61\x61\x61\x61\x61\x61\x62\x63\x64\x65\x0a; filename*=iso-8859-1''\x69\x27\x27\x93\x93\x93\x93\xff\x61\x61\x61\x61\x61\x61\x61\x62\x63\x64\x65\x0a; foo",
|
|
+ {
|
|
+ { "filename", "i''\302\223\302\223\302\223\302\223\303\277aaaaaaabcde" },
|
|
+ { "invalid", "\302\223\302\223\302\223\302\223\303\277aaaaaaabcde" },
|
|
+ { "foo", NULL },
|
|
+
|
|
+ },
|
|
+ }
|
|
};
|
|
static const int num_paramlisttests = G_N_ELEMENTS (paramlisttests);
|
|
|
|
--
|
|
2.25.1
|
|
|