From f15b5aa308a46d555ecc09c075db8728a0895c23 Mon Sep 17 00:00:00 2001
From: Ben Fuhrmannek
Date: Fri, 4 Mar 2016 14:50:51 +0100
Subject: test cases for eval+func black/whitelist

---
 tests/executor/eval_blacklist.phpt | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 tests/executor/eval_blacklist.phpt

(limited to 'tests/executor/eval_blacklist.phpt')

diff --git a/tests/executor/eval_blacklist.phpt b/tests/executor/eval_blacklist.phpt
new file mode 100644
index 0000000..8d47564
--- /dev/null
+++ b/tests/executor/eval_blacklist.phpt
@@ -0,0 +1,18 @@
+--TEST--
+Testing: suhosin.executor.eval.blacklist=max
+--SKIPIF--
+<?php include "../skipifnotcli.inc"; ?>
+--INI--
+suhosin.log.sapi=64
+suhosin.executor.disable_eval=0
+suhosin.executor.eval.blacklist=max
+--FILE--
+<?php
+	eval('abs(1);
+	max(1,2);
+	abs(1);');
+?>
+--EXPECTF--
+ALERT - eval'd function blacklisted: max() (attacker 'REMOTE_ADDR not set', file '%s', line 2)
+
+Warning: max() has been disabled for security reasons in %s : eval()'d code on line 2
-- 
cgit v1.3