From 32476340c5fd3c76b86487a92fd5c5075342ca99 Mon Sep 17 00:00:00 2001
From: jvoisin
Date: Mon, 4 Dec 2017 16:09:50 +0100
Subject: Fix the configuration parser wrt. non-matching brackets

This validation step is a bit idiotic, but we'll replace it with a
proper parser anyway.
---
 src/tests/broken_conf_quotes.phpt       | 9 +++++++++
 src/tests/broken_regexp.phpt            | 1 +
 src/tests/config/broken_conf_quotes.ini | 3 +++
 src/tests/example_configuration.phpt    | 2 +-
 4 files changed, 14 insertions(+), 1 deletion(-)
 create mode 100644 src/tests/broken_conf_quotes.phpt
 create mode 100644 src/tests/config/broken_conf_quotes.ini

(limited to 'src/tests')

diff --git a/src/tests/broken_conf_quotes.phpt b/src/tests/broken_conf_quotes.phpt
new file mode 100644
index 0000000..7f754e6
--- /dev/null
+++ b/src/tests/broken_conf_quotes.phpt
@@ -0,0 +1,9 @@
+--TEST--
+Broken configuration - missing quote
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/broken_conf_quotes.ini
+--FILE--
+--EXPECT--
+[snuffleupagus][0.0.0.0][config][error] You forgot to close 1 bracket  in the string '_SERVER[PHP_SELF'
diff --git a/src/tests/broken_regexp.phpt b/src/tests/broken_regexp.phpt
index 3367997..680cf22 100644
--- a/src/tests/broken_regexp.phpt
+++ b/src/tests/broken_regexp.phpt
@@ -6,4 +6,5 @@ Broken regexp
 sp.configuration_file={PWD}/config/broken_regexp.ini
 --FILE--
 --EXPECTF--
+[snuffleupagus][0.0.0.0][config][error] You forgot to close 1 bracket  in the string '^$['
 [snuffleupagus][0.0.0.0][config][error] '.value_r()' is expecting a valid regexp, and not '"^$["' on line 1.
diff --git a/src/tests/config/broken_conf_quotes.ini b/src/tests/config/broken_conf_quotes.ini
new file mode 100644
index 0000000..7c3b0cd
--- /dev/null
+++ b/src/tests/config/broken_conf_quotes.ini
@@ -0,0 +1,3 @@
+sp.disable_function.filename("static_pages/index.php").var("_SERVER[PHP_SELF").value_r("\"").drop().alias("XSS");
+sp.disable_function.filename("include/imageobject_im.class.php").function("exec").var("CONFIG[im_options]).value_r("[^a-z0-9]").drop();
+
diff --git a/src/tests/example_configuration.phpt b/src/tests/example_configuration.phpt
index 0bbf59c..b7fec48 100644
--- a/src/tests/example_configuration.phpt
+++ b/src/tests/example_configuration.phpt
@@ -6,7 +6,7 @@ Shipped configuration
 sp.configuration_file={PWD}/../../config/examples.ini
 --FILE--
 <?php 
-system("echo 0");
+echo 0;
 ?>
 --EXPECTF--
 0
-- 
cgit v1.3