diff options
| author | Tom Yu <tlyu@mit.edu> | 2013-05-09 16:51:31 -0400 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 2013-05-09 18:16:46 -0400 |
| commit | ab8aa580737d0283bf7cc1f71fa8d692a2ddd75c (patch) | |
| tree | e997cb07f09ee0c95f210eb6c45e3fb88a6f5a8f /src | |
| parent | efa31786c01bc7be064a6f94c233488c30e4a2dc (diff) | |
| download | krb5-ab8aa580737d0283bf7cc1f71fa8d692a2ddd75c.tar.gz krb5-ab8aa580737d0283bf7cc1f71fa8d692a2ddd75c.tar.xz krb5-ab8aa580737d0283bf7cc1f71fa8d692a2ddd75c.zip | |
Add test case for CVE-2013-1416
ticket: 7635 (new)
Diffstat (limited to 'src')
| -rw-r--r-- | src/tests/Makefile.in | 1 | ||||
| -rw-r--r-- | src/tests/t_cve-2013-1416.py | 15 |
2 files changed, 16 insertions, 0 deletions
diff --git a/src/tests/Makefile.in b/src/tests/Makefile.in index 55a323789..23684c010 100644 --- a/src/tests/Makefile.in +++ b/src/tests/Makefile.in @@ -101,6 +101,7 @@ check-pytests:: gcred hist kdbtest t_localauth $(RUNPYTEST) $(srcdir)/t_kdb.py $(PYTESTFLAGS) $(RUNPYTEST) $(srcdir)/t_cve-2012-1014.py $(PYTESTFLAGS) $(RUNPYTEST) $(srcdir)/t_cve-2012-1015.py $(PYTESTFLAGS) + $(RUNPYTEST) $(srcdir)/t_cve-2013-1416.py $(PYTESTFLAGS) clean:: $(RM) gcred hist kdbtest krb5.conf kdc.conf t_localauth diff --git a/src/tests/t_cve-2013-1416.py b/src/tests/t_cve-2013-1416.py new file mode 100644 index 000000000..94fb6d5ef --- /dev/null +++ b/src/tests/t_cve-2013-1416.py @@ -0,0 +1,15 @@ +#!/usr/bin/python + +from k5test import * + +realm = K5Realm() + +# CVE-2013-1416 KDC dereferences null pointer + +realm.kinit(realm.user_princ, password('user')) +realm.run([kvno, '/test'], expected_code=1) +realm.run([kvno, 'test/'], expected_code=1) +realm.run([kvno, '/'], expected_code=1) +# Make sure KDC is still running. +realm.kinit(realm.user_princ, password('user')) +success('CVE-2013-1416 regression test') |