dirtraversal.phpt 1.0 KB

123456789101112131415161718192021222324
  1. --TEST--
  2. test directory traversal security vulnerability
  3. --SKIPIF--
  4. --FILE--
  5. <?php
  6. require_once dirname(__FILE__) . '/setup.php.inc';
  7. $me = dirname(__FILE__) . '/testit';
  8. $tar = new Archive_Tar(dirname(__FILE__) . '/hamidTARtester2.tar');
  9. $tar->listContent();
  10. $phpunit->assertErrors(array(
  11. array('package' => 'PEAR_Error', 'message' => 'Malicious .tar detected, file "/../../../../../../../../../../../../../../AAAAAAAAAAAAAAAAA/BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.txt" will not install in desired directory tree')
  12. ), 'after 1');
  13. $tar->extract();
  14. $phpunit->assertErrors(array(
  15. array('package' => 'PEAR_Error', 'message' => 'Malicious .tar detected, file "/../../../../../../../../../../../../../../AAAAAAAAAAAAAAAAA/BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.txt" will not install in desired directory tree')
  16. ), 'after 2');
  17. echo 'tests done';
  18. ?>
  19. --CLEAN--
  20. <?php
  21. @rmdir('AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa');
  22. ?>
  23. --EXPECT--
  24. tests done