mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
1d15d5f080
* Other ruby implementations use the spec/ruby directory. [Misc #13792] [ruby-core:82287] git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@59979 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
19 lines
464 B
Ruby
19 lines
464 B
Ruby
require File.expand_path('../../spec_helper', __FILE__)
|
|
|
|
require 'json'
|
|
|
|
describe "String#to_f" do
|
|
|
|
it "resists CVE-2013-4164 by converting very long Strings to a Float" do
|
|
"1.#{'1'*1000000}".to_f.should be_close(1.1111111111111112, TOLERANCE)
|
|
end
|
|
|
|
end
|
|
|
|
describe "JSON.parse" do
|
|
|
|
it "resists CVE-2013-4164 by converting very long Strings to a Float" do
|
|
JSON.parse("[1.#{'1'*1000000}]").first.should be_close(1.1111111111111112, TOLERANCE)
|
|
end
|
|
|
|
end
|