1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
#include <string.h>
#include "tests.h"
#include "../xmlnode.h"
/*
* If we really wanted to test the billion laughs attack we would
* need to have more than just 4 ha's. But as long as this shorter
* document fails to parse, the longer one should also fail to parse.
*/
START_TEST(test_xmlnode_billion_laughs_attack)
{
const char *malicious_xml_doc = "<!DOCTYPE root [ <!ENTITY ha \"Ha !\"><!ENTITY ha2 \"&ha; &ha;\"><!ENTITY ha3 \"&ha2; &ha2;\"> ]><root>&ha3;</root>";
/* Uncomment this line if you want to see the error message given by
the parser for the above XML document */
/* purple_debug_set_enabled(TRUE); */
fail_if(xmlnode_from_str(malicious_xml_doc, -1),
"xmlnode_from_str() returned an XML tree, but we didn't want it to");
}
END_TEST
Suite *
xmlnode_suite(void)
{
Suite *s = suite_create("Utility Functions");
TCase *tc = tcase_create("xmlnode");
tcase_add_test(tc, test_xmlnode_billion_laughs_attack);
suite_add_tcase(s, tc);
return s;
}
|
