scottmac                                 Mon, 19 Dec 2011 03:09:05 +0000

Revision: http://svn.php.net/viewvc?view=revision&revision=321148

Log:
Add tests for OpenSSL crash.

Changed paths:
    A   
php/php-src/branches/PHP_5_3/ext/openssl/tests/openssl_encrypt_crash.phpt
    A   
php/php-src/branches/PHP_5_4/ext/openssl/tests/openssl_encrypt_crash.phpt
    A   php/php-src/trunk/ext/openssl/tests/openssl_encrypt_crash.phpt

Added: php/php-src/branches/PHP_5_3/ext/openssl/tests/openssl_encrypt_crash.phpt
===================================================================
--- php/php-src/branches/PHP_5_3/ext/openssl/tests/openssl_encrypt_crash.phpt   
                        (rev 0)
+++ php/php-src/branches/PHP_5_3/ext/openssl/tests/openssl_encrypt_crash.phpt   
2011-12-19 03:09:05 UTC (rev 321148)
@@ -0,0 +1,13 @@
+--TEST--
+openssl_encrypt() crash with old OpenSSL
+--SKIPIF--
+<?php if (!extension_loaded("openssl")) print "skip"; ?>
+--FILE--
+<?php
+openssl_encrypt('', 'AES-128-CBC', 'foo');
+var_dump("done");
+?>
+--EXPECTF--
+
+Warning: openssl_encrypt(): Using an empty Initialization Vector (iv) is 
potentially insecure and not recommended in %s on line %d
+string(4) "done"
\ No newline at end of file

Added: php/php-src/branches/PHP_5_4/ext/openssl/tests/openssl_encrypt_crash.phpt
===================================================================
--- php/php-src/branches/PHP_5_4/ext/openssl/tests/openssl_encrypt_crash.phpt   
                        (rev 0)
+++ php/php-src/branches/PHP_5_4/ext/openssl/tests/openssl_encrypt_crash.phpt   
2011-12-19 03:09:05 UTC (rev 321148)
@@ -0,0 +1,13 @@
+--TEST--
+openssl_encrypt() crash with old OpenSSL
+--SKIPIF--
+<?php if (!extension_loaded("openssl")) print "skip"; ?>
+--FILE--
+<?php
+openssl_encrypt('', 'AES-128-CBC', 'foo');
+var_dump("done");
+?>
+--EXPECTF--
+
+Warning: openssl_encrypt(): Using an empty Initialization Vector (iv) is 
potentially insecure and not recommended in %s on line %d
+string(4) "done"
\ No newline at end of file

Added: php/php-src/trunk/ext/openssl/tests/openssl_encrypt_crash.phpt
===================================================================
--- php/php-src/trunk/ext/openssl/tests/openssl_encrypt_crash.phpt              
                (rev 0)
+++ php/php-src/trunk/ext/openssl/tests/openssl_encrypt_crash.phpt      
2011-12-19 03:09:05 UTC (rev 321148)
@@ -0,0 +1,13 @@
+--TEST--
+openssl_encrypt() crash with old OpenSSL
+--SKIPIF--
+<?php if (!extension_loaded("openssl")) print "skip"; ?>
+--FILE--
+<?php
+openssl_encrypt('', 'AES-128-CBC', 'foo');
+var_dump("done");
+?>
+--EXPECTF--
+
+Warning: openssl_encrypt(): Using an empty Initialization Vector (iv) is 
potentially insecure and not recommended in %s on line %d
+string(4) "done"
\ No newline at end of file

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to