mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
13 lines
352 B
Ruby
13 lines
352 B
Ruby
|
require_relative '../spec_helper'
|
||
|
|
|
||
|
|
describe "String#unpack" do
|
||
|
|
|
||
|
|
it "resists CVE-2018-8778 by raising an exception when a position indicator is larger than a native integer" do
|
||
|
|
pos = (1 << PlatformGuard::POINTER_SIZE) - 99
|
||
|
|
lambda {
|
||
|
|
"0123456789".unpack("@#{pos}C10")
|
||
|
|
}.should raise_error(RangeError, /pack length too big/)
|
||
|
|
end
|
||
|
|
|
||
|
|
end
|