File: taint.rb

package info (click to toggle)
jruby 9.3.9.0%2Bds-8
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 80,856 kB
  • sloc: ruby: 517,823; java: 260,094; xml: 31,930; ansic: 5,777; yacc: 4,973; sh: 1,163; makefile: 105; jsp: 48; tcl: 40; exp: 11
file content (35 lines) | stat: -rw-r--r-- 1,298 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
describe :array_pack_taint, shared: true do
  ruby_version_is ''...'2.7' do
    it "returns a tainted string when a pack argument is tainted" do
      ["abcd".taint, 0x20].pack(pack_format("3C")).tainted?.should be_true
    end

    it "does not return a tainted string when the array is tainted" do
      ["abcd", 0x20].taint.pack(pack_format("3C")).tainted?.should be_false
    end

    it "returns a tainted string when the format is tainted" do
      ["abcd", 0x20].pack(pack_format("3C").taint).tainted?.should be_true
    end

    it "returns a tainted string when an empty format is tainted" do
      ["abcd", 0x20].pack("".taint).tainted?.should be_true
    end

    it "returns a untrusted string when the format is untrusted" do
      ["abcd", 0x20].pack(pack_format("3C").untrust).untrusted?.should be_true
    end

    it "returns a untrusted string when the empty format is untrusted" do
      ["abcd", 0x20].pack("".untrust).untrusted?.should be_true
    end

    it "returns a untrusted string when a pack argument is untrusted" do
      ["abcd".untrust, 0x20].pack(pack_format("3C")).untrusted?.should be_true
    end

    it "returns a trusted string when the array is untrusted" do
      ["abcd", 0x20].untrust.pack(pack_format("3C")).untrusted?.should be_false
    end
  end
end