summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@redhat.com>2017-02-23 11:08:34 +0100
committerNikos Mavrogiannopoulos <nmav@redhat.com>2017-02-23 16:45:22 +0100
commit0e9cce408c680e0f723512bdcdcecdfb60ad59ee (patch)
tree8703705f6cd36f8c5ae5c3c5c0f7328b2c32a12d
parent3f5b3a45e4ad9520f5efc02676f996f780169e40 (diff)
downloadgnutls-0e9cce408c680e0f723512bdcdcecdfb60ad59ee.tar.gz
tests: added test case with invalid openpgp cert
This triggers an invalid memory access: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
-rw-r--r--tests/cert-tests/Makefile.am3
-rw-r--r--tests/cert-tests/data/openpgp-invalid6.pubbin0 -> 1658 bytes
-rwxr-xr-xtests/cert-tests/openpgp-cert-parser3
3 files changed, 4 insertions, 2 deletions
diff --git a/tests/cert-tests/Makefile.am b/tests/cert-tests/Makefile.am
index c32c8fe1f5..3776538762 100644
--- a/tests/cert-tests/Makefile.am
+++ b/tests/cert-tests/Makefile.am
@@ -63,7 +63,8 @@ EXTRA_DIST = data/ca-no-pathlen.pem data/no-ca-or-pathlen.pem data/aki-cert.pem
data/pkcs7-cat-ca.pem data/pkcs7-cat.p7 data/openssl.p7b data/openssl.p7b.out \
data/openssl-keyid.p7b data/openssl-keyid.p7b.out data/openssl.p12 \
data/openpgp-invalid1.pub data/openpgp-invalid2.pub data/openpgp-invalid3.pub \
- data/openpgp-invalid4.pub data/openpgp-invalid5.pub
+ data/openpgp-invalid4.pub data/openpgp-invalid5.pub \
+ data/openpgp-invalid5.pub data/openpgp-invalid6.pub
dist_check_SCRIPTS = pathlen aki certtool invalid-sig email \
pkcs7 pkcs7-broken-sigs privkey-import name-constraints certtool-long-cn crl provable-privkey \
diff --git a/tests/cert-tests/data/openpgp-invalid6.pub b/tests/cert-tests/data/openpgp-invalid6.pub
new file mode 100644
index 0000000000..21a1593bcf
--- /dev/null
+++ b/tests/cert-tests/data/openpgp-invalid6.pub
Binary files differ
diff --git a/tests/cert-tests/openpgp-cert-parser b/tests/cert-tests/openpgp-cert-parser
index e3d7d88179..1039cf136e 100755
--- a/tests/cert-tests/openpgp-cert-parser
+++ b/tests/cert-tests/openpgp-cert-parser
@@ -41,7 +41,8 @@ fail() {
echo "Checking OpenPGP certificate parsing"
for i in "truncated.pub" "attribute-leak-1.pub" "subpkt-leak.pub" "openpgp-invalid1.pub" \
- "openpgp-invalid2.pub" "openpgp-invalid3.pub" "openpgp-invalid4.pub" "openpgp-invalid5.pub";do
+ "openpgp-invalid2.pub" "openpgp-invalid3.pub" "openpgp-invalid4.pub" "openpgp-invalid5.pub" \
+ "openpgp-invalid6.pub";do
${VALGRIND} "${CERTTOOL}" --inraw --pgp-certificate-info --infile "${srcdir}/data/${i}"
rc=$?
if test $rc != 1;then