diff options
author | Simon Josefsson <simon@josefsson.org> | 2009-04-30 13:36:18 +0200 |
---|---|---|
committer | Simon Josefsson <simon@josefsson.org> | 2009-04-30 13:36:18 +0200 |
commit | e753b2dabfafe10d7c1c469acdf3cadb411e8acd (patch) | |
tree | 5794feac5387099a2736a386c8f97640ce9a4d82 /tests/cve-2009-1416.c | |
parent | cbff6a01b0017cffe53d31fecaf10e8c75150f52 (diff) | |
download | gnutls-e753b2dabfafe10d7c1c469acdf3cadb411e8acd.tar.gz |
Add self-tests for security problems.
Diffstat (limited to 'tests/cve-2009-1416.c')
-rw-r--r-- | tests/cve-2009-1416.c | 88 |
1 files changed, 88 insertions, 0 deletions
diff --git a/tests/cve-2009-1416.c b/tests/cve-2009-1416.c new file mode 100644 index 0000000000..b637344949 --- /dev/null +++ b/tests/cve-2009-1416.c @@ -0,0 +1,88 @@ +/* + * Copyright (C) 2009 Free Software Foundation + * + * Author: Simon Josefsson + * + * This file is part of GNUTLS. + * + * GNUTLS is free software; you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3 of the License, or + * (at your option) any later version. + * + * GNUTLS is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with GNUTLS; if not, write to the Free Software Foundation, + * Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA + */ + +#ifdef HAVE_CONFIG_H +# include <config.h> +#endif + +/* + * Small code to reproduce the CVE-2009-1416 bad DSA key problem. + * + * Build it using: + * + * gcc -o cve-2009-1416 cve-2009-1416.c -lgnutls + * + * If your gnutls library is OK then running it will print 'success!'. + * + * If your gnutls library is buggy then running it will print 'buggy'. + * + */ + +#include <stdio.h> +#include <stdarg.h> +#include <stdlib.h> + +#include <gcrypt.h> +#include <gnutls/gnutls.h> +#include <gnutls/x509.h> + +int +main (void) +{ + gnutls_x509_privkey_t key; + gnutls_datum_t p, q, g, y, x; + int ret; + + gnutls_global_init (); + gcry_control (GCRYCTL_ENABLE_QUICK_RANDOM, 0); + + ret = gnutls_x509_privkey_init (&key); + if (ret < 0) + return 1; + + ret = gnutls_x509_privkey_generate (key, GNUTLS_PK_DSA, 512, 0); + if (ret < 0) + return 1; + + ret = gnutls_x509_privkey_export_dsa_raw (key, &p, &q, &g, &y, &x); + if (ret < 0) + return 1; + + if (q.size == 3 && memcmp (q.data, "\x01\x00\x01", 3) == 0) + { + printf ("buggy\n"); + return 1; + } + else + printf ("success!\n"); + + gnutls_free (p.data); + gnutls_free (q.data); + gnutls_free (g.data); + gnutls_free (y.data); + gnutls_free (x.data); + + gnutls_x509_privkey_deinit (key); + gnutls_global_deinit (); + + return 0; +} |