mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
21 lines
541 B
Ruby
21 lines
541 B
Ruby
require_relative '../spec_helper'
|
|
|
|
describe "Array#pack" do
|
|
ruby_version_is ''...'2.7' do
|
|
it "resists CVE-2018-16396 by tainting output based on input" do
|
|
"aAZBbHhuMmPp".each_char do |f|
|
|
["123456".taint].pack(f).tainted?.should be_true
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
describe "String#unpack" do
|
|
ruby_version_is ''...'2.7' do
|
|
it "resists CVE-2018-16396 by tainting output based on input" do
|
|
"aAZBbHhuMm".each_char do |f|
|
|
"123456".taint.unpack(f).first.tainted?.should be_true
|
|
end
|
|
end
|
|
end
|
|
end
|