s...@apache.org wrote on Fri, Feb 12, 2021 at 10:40:16 -0000: > Author: stsp > Date: Fri Feb 12 10:40:16 2021 > New Revision: 1886460 > > URL: http://svn.apache.org/viewvc?rev=1886460&view=rev > Log: > Add a test for the NULL deref issue also known as CVE-2020-17525. > > * subversion/tests/cmdline/mod_authz_svn_tests.py > (nonexistent_repos_relative_access_file): New test.
Propose this for backport? > +++ subversion/trunk/subversion/tests/cmdline/mod_authz_svn_tests.py Fri Feb > 12 10:40:16 2021 > @@ -1072,6 +1072,43 @@ def repos_relative_access_file(sbox): > > verify_gets(test_area_url, in_repos_authz_tests) > > +# test for the bug also known as CVS-2020-17525 s/S/E/ > +@SkipUnless(svntest.main.is_ra_type_dav) > +def nonexistent_repos_relative_access_file(sbox): > + "repos-relative access file with bad repository URL"
