From 9111fdf5e6332923a5faf9f8a7e6b428eb91795a Mon Sep 17 00:00:00 2001 From: Ben Fuhrmannek Date: Thu, 11 Nov 2021 12:02:07 +0100 Subject: detect dummy or short encryption key --- src/tests/unserialize/config/config_serialize.ini | 2 +- src/tests/unserialize/config/config_serialize_sim.ini | 2 +- src/tests/unserialize/config/dump_unserialize.ini | 2 +- src/tests/unserialize/serialize.phpt | 2 +- src/tests/unserialize/unserialize_sim.phpt | 5 +++-- 5 files changed, 7 insertions(+), 6 deletions(-) (limited to 'src/tests/unserialize') diff --git a/src/tests/unserialize/config/config_serialize.ini b/src/tests/unserialize/config/config_serialize.ini index f2c1699..30e8fba 100644 --- a/src/tests/unserialize/config/config_serialize.ini +++ b/src/tests/unserialize/config/config_serialize.ini @@ -1,2 +1,2 @@ -sp.global.secret_key("abcdef"); +sp.global.secret_key("abcdefGHIJ"); sp.unserialize_hmac.enable(); \ No newline at end of file diff --git a/src/tests/unserialize/config/config_serialize_sim.ini b/src/tests/unserialize/config/config_serialize_sim.ini index 7f015e0..c20013f 100644 --- a/src/tests/unserialize/config/config_serialize_sim.ini +++ b/src/tests/unserialize/config/config_serialize_sim.ini @@ -1,2 +1,2 @@ -sp.global.secret_key("abcdef"); +sp.global.secret_key("abcdefGHIJ"); sp.unserialize_hmac.enable().simulation(); diff --git a/src/tests/unserialize/config/dump_unserialize.ini b/src/tests/unserialize/config/dump_unserialize.ini index 4352a3e..09480cc 100644 --- a/src/tests/unserialize/config/dump_unserialize.ini +++ b/src/tests/unserialize/config/dump_unserialize.ini @@ -1,2 +1,2 @@ -sp.global.secret_key("abcdef"); +sp.global.secret_key("abcdefGHIJ"); sp.unserialize_hmac.enable().dump("/tmp/dump_result/"); diff --git a/src/tests/unserialize/serialize.phpt b/src/tests/unserialize/serialize.phpt index e93dbaf..8b7c0bc 100644 --- a/src/tests/unserialize/serialize.phpt +++ b/src/tests/unserialize/serialize.phpt @@ -9,5 +9,5 @@ sp.configuration_file={PWD}/config/config_serialize.ini echo serialize("a"); ?> --EXPECT-- -s:1:"a";650609b417904d0d9bbf1fc44a975d13ecdf6b02b715c1a06271fb3b673f25b1 +s:1:"a";cdbc93e593656164d448db33e4668a3f30fa794d6658016365f7eb453d48b022 diff --git a/src/tests/unserialize/unserialize_sim.phpt b/src/tests/unserialize/unserialize_sim.phpt index 9bff2c1..1256c23 100644 --- a/src/tests/unserialize/unserialize_sim.phpt +++ b/src/tests/unserialize/unserialize_sim.phpt @@ -7,12 +7,13 @@ sp.configuration_file={PWD}/config/config_serialize_sim.ini --FILE-- --EXPECTF-- -s:1:"a";650609b417904d0d9bbf1fc44a975d13ecdf6b02b715c1a06271fb3b673f25b1string(1) "a" +s:1:"a";cdbc93e593656164d448db33e4668a3f30fa794d6658016365f7eb453d48b022 +string(1) "a" Warning: [snuffleupagus][0.0.0.0][unserialize][simulation] Invalid HMAC for s:1:"a";alyualskdufyhalkdjsfh in %a/unserialize_sim.php on line 5 string(1) "a" -- cgit v1.3