Fix no-cms (CVE-2016-7053)

Reviewed-by: Matt Caswell <matt@openssl.org>
This commit is contained in:
Richard Levitte 2016-11-10 01:49:47 +01:00 committed by Matt Caswell
parent 70d8b304d0
commit 9d7ce8d42b

View File

@ -12,6 +12,7 @@ use warnings;
use File::Spec;
use OpenSSL::Test qw/:DEFAULT srctop_file/;
use OpenSSL::Test::Utils;
setup("test_d2i");
@ -80,9 +81,13 @@ ok(run(test(["d2i_test", "ASN1_INTEGER", "decode",
srctop_file('test','d2i-tests','bad-int-padminus1.der')])),
"Running d2i_test bad-int-padminus1.der INTEGER");
# Invalid CMS structure with decode error in CHOICE value.
# Test for CVE-2016-7053
SKIP: {
skip "No CMS support in this configuration", 1 if disabled("cms");
ok(run(test(["d2i_test", "CMS_ContentInfo", "decode",
srctop_file('test','d2i-tests','bad-cms.der')])),
"Running d2i_test bad-cms.der CMS ContentInfo");
# Invalid CMS structure with decode error in CHOICE value.
# Test for CVE-2016-7053
ok(run(test(["d2i_test", "CMS_ContentInfo", "decode",
srctop_file('test','d2i-tests','bad-cms.der')])),
"Running d2i_test bad-cms.der CMS ContentInfo");
}