Files
grub/grub-core/lib/libtasn1/tests/Test_overflow.c
T
Daniel Axtens 9a26abbc36 libtasn1: Import libtasn1-4.19.0
Import a very trimmed-down set of libtasn1 files:

  curl -L -O https://ftp.gnu.org/gnu/libtasn1/libtasn1-4.19.0.tar.gz
  tar xvzf libtasn1-4.19.0.tar.gz
  rm -rf grub-core/lib/libtasn1
  mkdir -p grub-core/lib/libtasn1/lib
  mkdir -p grub-core/lib/libtasn1/tests
  cp libtasn1-4.19.0/{README.md,COPYING} grub-core/lib/libtasn1
  cp libtasn1-4.19.0/lib/{coding.c,decoding.c,element.c,element.h,errors.c,gstr.c,gstr.h,int.h,parser_aux.c,parser_aux.h,structure.c,structure.h} grub-core/libtasn1/lib
  cp libtasn1-4.19.0/lib/includes/libtasn1.h grub-core/lib/libtasn1
  cp libtasn1-4.19.0/tests/{CVE-2018-1000654-1_asn1_tab.h,CVE-2018-1000654-2_asn1_tab.h,CVE-2018-1000654.c,object-id-decoding.c,object-id-encoding.c,octet-string.c,reproducers.c,Test_overflow.c,Test_simple.c,Test_strings.c} grub-core/lib/libtasn1/tests
  rm -rf libtasn1-4.19.0*

Signed-off-by: Daniel Axtens <dja@axtens.net>
Signed-off-by: Gary Lin <glin@suse.com>
Reviewed-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Tested-by: Stefan Berger <stefanb@linux.ibm.com>
2024-11-28 21:50:53 +01:00

169 lines
3.7 KiB
C

/*
* Copyright (C) 2012-2022 Free Software Foundation, Inc.
*
* This file is part of LIBTASN1.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
*/
/* Written by Simon Josefsson */
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <limits.h>
#include "libtasn1.h"
int
main (int argc, char **argv)
{
/* Test that values larger than long are rejected. This has worked
fine with all versions of libtasn1. */
int verbose = 0;
if (argc > 1)
verbose = 1;
{
unsigned char der[] = "\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF";
long l;
int len;
l = asn1_get_length_der (der, sizeof der, &len);
if (l == -2L)
{
if (verbose)
puts ("OK: asn1_get_length_der bignum");
}
else
{
printf ("ERROR: asn1_get_length_der bignum (l %ld len %d)\n", l, len);
return 1;
}
}
/* Test that values larger than int but smaller than long are
rejected. This limitation was introduced with libtasn1 2.12. */
if (LONG_MAX > INT_MAX)
{
unsigned long num = ((long) UINT_MAX) << 2;
unsigned char der[20];
int der_len;
long l;
int len;
asn1_length_der (num, der, &der_len);
l = asn1_get_length_der (der, der_len, &len);
if (l == -2L)
{
if (verbose)
puts ("OK: asn1_get_length_der intnum");
}
else
{
printf ("ERROR: asn1_get_length_der intnum (l %ld len %d)\n", l,
len);
return 1;
}
}
/* Test that values larger than would fit in the input string are
rejected. This problem was fixed in libtasn1 2.12. */
{
unsigned long num = 64;
unsigned char der[20];
int der_len;
long l;
int len;
asn1_length_der (num, der, &der_len);
der_len = sizeof (der);
l = asn1_get_length_der (der, der_len, &len);
if (l == -4L)
{
if (verbose)
puts ("OK: asn1_get_length_der overflow-small");
}
else
{
printf ("ERROR: asn1_get_length_der overflow-small (l %ld len %d)\n",
l, len);
return 1;
}
}
/* Test that values larger than would fit in the input string are
rejected. This problem was fixed in libtasn1 2.12. */
{
unsigned long num = 1073741824;
unsigned char der[20];
int der_len;
long l;
int len;
asn1_length_der (num, der, &der_len);
der_len = sizeof (der);
l = asn1_get_length_der (der, der_len, &len);
if (l == -4L)
{
if (verbose)
puts ("OK: asn1_get_length_der overflow-large1");
}
else
{
printf ("ERROR: asn1_get_length_der overflow-large1 (l %ld len %d)\n",
l, len);
return 1;
}
}
/* Test that values larger than would fit in the input string are
rejected. This problem was fixed in libtasn1 2.12. */
{
unsigned long num = 2147483649;
unsigned char der[20];
int der_len;
long l;
int len;
asn1_length_der (num, der, &der_len);
der_len = sizeof (der);
l = asn1_get_length_der (der, der_len, &len);
if (l == -2L)
{
if (verbose)
puts ("OK: asn1_get_length_der overflow-large2");
}
else
{
printf ("ERROR: asn1_get_length_der overflow-large2 (l %ld len %d)\n",
l, len);
return 1;
}
}
return 0;
}