summaryrefslogtreecommitdiff
path: root/spec/ruby/security/cve_2018_16396_spec.rb
diff options
context:
space:
mode:
-rw-r--r--spec/ruby/security/cve_2018_16396_spec.rb16
1 files changed, 10 insertions, 6 deletions
@@ -2,9 +2,11 @@ require_relative '../spec_helper'
describe "Array#pack" do
- it "resists CVE-2018-16396 by tainting output based on input" do
- "aAZBbHhuMmPp".each_char do |f|
- ["123456".taint].pack(f).tainted?.should be_true
end
end
@@ -12,9 +14,11 @@ end
describe "String#unpack" do
- it "resists CVE-2018-16396 by tainting output based on input" do
- "aAZBbHhuMm".each_char do |f|
- "123456".taint.unpack(f).first.tainted?.should be_true
end
end