Attachment 9718 Details for Bug 21678 – Test for CVE-2017-14033

Test for CVE-2017-14033

file_21678.txt (text/plain), 631 bytes, created by Pascal Terjan on 2017-10-11 22:48:23 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: Pascal Terjan

Created: 2017-10-11 22:48:23 CEST

Size: 631 bytes

patch

obsolete

require 'openssl'
 
test = %w{ 31 06 31 02 30 02 05 00 }
raw = [test.join].pack("H*")
ret = []
begin
  OpenSSL::ASN1.traverse(raw) { |x| ret << x }
  puts "This should have failed."
rescue OpenSSL::ASN1::ASN1Error => e
  puts "Expected exception"
end

puts "2 == #{ret.size}"
puts "17 == #{ret[0][6]}"
puts "17 == #{ret[1][6]}"

test = %w{ 31 80 30 03 00 00 }
raw = [test.join].pack("H*")
ret = []
begin
  OpenSSL::ASN1.traverse(raw) { |x| ret << x }
  puts "This should have failed."
rescue OpenSSL::ASN1::ASN1Error => e
  puts "Expected exception"
end
puts "1 == #{ret.size}"
puts "17 == #{ret[0][6]}"

Actions: View

Attachments on bug 21678: 9717 | 9718 | 9719 | 9721 | 9722 | 9724 | 9725 | 9726