From a99c0b3ba7ebbd27fd62f2bde3963354c2bf55e3 Mon Sep 17 00:00:00 2001
From: Ben Fuhrmannek
Date: Thu, 16 Sep 2021 12:43:11 +0200
Subject: ported sid min/max restriction from suhosin

---
 src/tests/sid_too_long.phpt  | 16 ++++++++++++++++
 src/tests/sid_too_short.phpt | 16 ++++++++++++++++
 2 files changed, 32 insertions(+)
 create mode 100644 src/tests/sid_too_long.phpt
 create mode 100644 src/tests/sid_too_short.phpt

(limited to 'src/tests')

diff --git a/src/tests/sid_too_long.phpt b/src/tests/sid_too_long.phpt
new file mode 100644
index 0000000..235b166
--- /dev/null
+++ b/src/tests/sid_too_long.phpt
@@ -0,0 +1,16 @@
+--TEST--
+SESSION ID too long
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/sid_length_limit.ini
+--FILE--
+<?php
+session_id('123456789012345678901234567890123');
+session_start();
+echo strlen(session_id());
+?>
+--EXPECTF--
+Fatal error: [snuffleupagus][0.0.0.0][session][drop] Session ID is too long in %a.php on line %d
+
+Fatal error: [snuffleupagus][0.0.0.0][session][drop] Session ID is too long in Unknown on line 0
\ No newline at end of file
diff --git a/src/tests/sid_too_short.phpt b/src/tests/sid_too_short.phpt
new file mode 100644
index 0000000..0d9d514
--- /dev/null
+++ b/src/tests/sid_too_short.phpt
@@ -0,0 +1,16 @@
+--TEST--
+SESSION ID too short
+--SKIPIF--
+<?php if (!extension_loaded("snuffleupagus")) print "skip"; ?>
+--INI--
+sp.configuration_file={PWD}/config/sid_length_limit.ini
+--FILE--
+<?php
+session_id('123');
+session_start();
+echo strlen(session_id());
+?>
+--EXPECTF--
+Fatal error: [snuffleupagus][0.0.0.0][session][drop] Session ID is too short in %a.php on line %d
+
+Fatal error: [snuffleupagus][0.0.0.0][session][drop] Session ID is too short in Unknown on line 0
\ No newline at end of file
-- 
cgit v1.3