diff options
| author | jvoisin | 2018-12-26 14:00:01 +0100 |
|---|---|---|
| committer | jvoisin | 2018-12-26 14:00:01 +0100 |
| commit | ae9855034610e63be9416ae4386f7a46b7a0936e (patch) | |
| tree | fa85ddf0f7ca3e3fef8d144e8606d24f89ab06b6 | |
| parent | 613254d1ee2401928672280b516055dd6219e646 (diff) | |
Add two eval-related tests
| -rw-r--r-- | src/tests/eval_backlist_call_user_func.phpt | 14 | ||||
| -rw-r--r-- | src/tests/eval_backlist_chained.phpt | 16 |
2 files changed, 30 insertions, 0 deletions
diff --git a/src/tests/eval_backlist_call_user_func.phpt b/src/tests/eval_backlist_call_user_func.phpt new file mode 100644 index 0000000..47e8d71 --- /dev/null +++ b/src/tests/eval_backlist_call_user_func.phpt | |||
| @@ -0,0 +1,14 @@ | |||
| 1 | --TEST-- | ||
| 2 | Eval blacklist - with several calls in an eval. | ||
| 3 | --SKIPIF-- | ||
| 4 | <?php if (!extension_loaded("snuffleupagus")) die "skip"; ?> | ||
| 5 | --INI-- | ||
| 6 | sp.configuration_file={PWD}/config/eval_backlist.ini | ||
| 7 | --FILE-- | ||
| 8 | <?php | ||
| 9 | eval(' | ||
| 10 | call_user_func("strlen", 2); | ||
| 11 | ') | ||
| 12 | ?> | ||
| 13 | --EXPECTF-- | ||
| 14 | Fatal error: [snuffleupagus][eval] A call to strlen was tried in eval, in %s/eval_backlist_call_user_func.php:%d, dropping it. in %s/eval_backlist_call_user_func.php(%d) : eval()'d code on line %d | ||
diff --git a/src/tests/eval_backlist_chained.phpt b/src/tests/eval_backlist_chained.phpt new file mode 100644 index 0000000..2360e06 --- /dev/null +++ b/src/tests/eval_backlist_chained.phpt | |||
| @@ -0,0 +1,16 @@ | |||
| 1 | --TEST-- | ||
| 2 | Eval blacklist - with several calls in an eval. | ||
| 3 | --SKIPIF-- | ||
| 4 | <?php if (!extension_loaded("snuffleupagus")) die "skip"; ?> | ||
| 5 | --INI-- | ||
| 6 | sp.configuration_file={PWD}/config/eval_backlist.ini | ||
| 7 | --FILE-- | ||
| 8 | <?php | ||
| 9 | eval(' | ||
| 10 | cos(1); | ||
| 11 | strlen(2); | ||
| 12 | sin(3); | ||
| 13 | ') | ||
| 14 | ?> | ||
| 15 | --EXPECTF-- | ||
| 16 | Fatal error: [snuffleupagus][eval] A call to strlen was tried in eval, in %s/eval_backlist_chained.php:%d, dropping it. in %s/eval_backlist_chained.php(%d) : eval()'d code on line %d | ||
