From 04f02a230d40c2d86b9d477a7810de24b15a7590 Mon Sep 17 00:00:00 2001
From: Stefan Esser
Date: Sun, 16 Feb 2014 10:45:17 +0100
Subject: Add various tests for include filename checks

---
 tests/include/include_too_long.phpt | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 tests/include/include_too_long.phpt

(limited to 'tests/include/include_too_long.phpt')

diff --git a/tests/include/include_too_long.phpt b/tests/include/include_too_long.phpt
new file mode 100644
index 0000000..91c9958
--- /dev/null
+++ b/tests/include/include_too_long.phpt
@@ -0,0 +1,18 @@
+--TEST--
+Testing include of too long filename
+--SKIPIF--
+<?php include "../skipifcli.inc"; ?>
+--INI--
+suhosin.log.syslog=0
+suhosin.log.sapi=255
+suhosin.log.script=0
+suhosin.log.phpscript=0
+suhosin.executor.include.whitelist=
+suhosin.executor.include.blacklist=
+--FILE--
+<?php
+$filename1 = str_repeat("A", PHP_MAXPATHLEN+1);
+include $filename1;
+?>
+--EXPECTF--
+ALERT - Include filename ('AAAA%sAAAA') is too long (attacker 'REMOTE_ADDR not set', file '%s', line 3)
\ No newline at end of file
-- 
cgit v1.3