File: taint.rb

package info (click to toggle)
ruby2.7 2.7.4-1%2Bdeb11u1
  • links: PTS, VCS
  • area: main
  • in suites: bullseye
  • size: 112,576 kB
  • sloc: ruby: 849,454; ansic: 697,834; yacc: 45,100; xml: 25,367; pascal: 10,051; javascript: 6,575; sh: 3,848; makefile: 759; cpp: 713; asm: 333; python: 295; lisp: 97; sed: 94; perl: 62; awk: 36
file content (35 lines) | stat: -rw-r--r-- 1,298 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
describe :array_pack_taint, shared: true do
  ruby_version_is ''...'2.7' do
    it "returns a tainted string when a pack argument is tainted" do
      ["abcd".taint, 0x20].pack(pack_format("3C")).tainted?.should be_true
    end

    it "does not return a tainted string when the array is tainted" do
      ["abcd", 0x20].taint.pack(pack_format("3C")).tainted?.should be_false
    end

    it "returns a tainted string when the format is tainted" do
      ["abcd", 0x20].pack(pack_format("3C").taint).tainted?.should be_true
    end

    it "returns a tainted string when an empty format is tainted" do
      ["abcd", 0x20].pack("".taint).tainted?.should be_true
    end

    it "returns a untrusted string when the format is untrusted" do
      ["abcd", 0x20].pack(pack_format("3C").untrust).untrusted?.should be_true
    end

    it "returns a untrusted string when the empty format is untrusted" do
      ["abcd", 0x20].pack("".untrust).untrusted?.should be_true
    end

    it "returns a untrusted string when a pack argument is untrusted" do
      ["abcd".untrust, 0x20].pack(pack_format("3C")).untrusted?.should be_true
    end

    it "returns a trusted string when the array is untrusted" do
      ["abcd", 0x20].untrust.pack(pack_format("3C")).untrusted?.should be_false
    end
  end
end