From 3741554097cc73f03a9a6a4fa4d65dc01c120bd8 Mon Sep 17 00:00:00 2001
From: Ben Fuhrmannek
Date: Fri, 6 Feb 2015 22:38:35 +0100
Subject: tests for eval white/blacklist + include white/blacklist

---
 tests/executor/eval_blacklist_printf.phpt | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 tests/executor/eval_blacklist_printf.phpt

(limited to 'tests/executor/eval_blacklist_printf.phpt')

diff --git a/tests/executor/eval_blacklist_printf.phpt b/tests/executor/eval_blacklist_printf.phpt
new file mode 100644
index 0000000..596036e
--- /dev/null
+++ b/tests/executor/eval_blacklist_printf.phpt
@@ -0,0 +1,16 @@
+--TEST--
+Testing: suhosin.executor.eval.blacklist=printf via call_user_func
+--SKIPIF--
+<?php include "../skipifnotcli.inc"; ?>
+--INI--
+suhosin.log.sapi=64
+suhosin.executor.disable_eval=0
+suhosin.executor.eval.blacklist=printf
+--FILE--
+<?php
+	eval('call_user_func("printf", "hello\n");');
+?>
+--EXPECTF--
+ALERT - function within eval blacklist called: printf() (attacker 'REMOTE_ADDR not set', file '%s : eval()'d code', line 1)
+
+Warning: printf() has been disabled for security reasons in %s : eval()'d code on line 1
-- 
cgit v1.3