[rt.openssl.org #3939] [PATCH] Tests for CVE-2015-1788

[richsalz]

Migrated from rt.openssl.org#3939 (status was 'new')

Requestors:

• jpixton@gmail.com

Attachments:

• tests.patch
• tests.patch

From jpixton@gmail.com on 2015-07-12 11:44:44:

Hi Folks,

With the report for CVE-2015-1788 I submitted a patch to improve
testing in this area (including a regression test for the specific
issue).

As far as I can see this hasn't made its way into the repo. So here it
is again to ensure it isn't forgotten.

Cheers,
Joe

From jpixton@gmail.com on 2015-07-12 13:05:23:

Apologies, that patch was HTMLised by github. Attached is the actual patch.

On 12 July 2015 at 12:44, The default queue via RT <rt@openssl.org> wrote:
>
> Greetings,
>
> This message has been automatically generated in response to the
> creation of a trouble ticket regarding:
>         "[PATCH] Tests for CVE-2015-1788",
> a summary of which appears below.
>
> There is no need to reply to this message right now.  Your ticket has been
> assigned an ID of [openssl.org #3939].
>
> Please include the string:
>
>          [openssl.org #3939]
>
> in the subject line of all future correspondence about this issue. To do so,
> you may reply to this message.
>
>                         Thank you,
>                         rt@openssl.org
>
> -------------------------------------------------------------------------
> Hi Folks,
>
> With the report for CVE-2015-1788 I submitted a patch to improve
> testing in this area (including a regression test for the specific
> issue).
>
> As far as I can see this hasn't made its way into the repo. So here it
> is again to ensure it isn't forgotten.
>
> Cheers,
> Joe
>

[richsalz]

this looks good. what do you think @davidben , @levitte @snhenson (look at the second patch :)

[levitte]

I can certainly make new style test recipe from that.

[mattcaswell]

This was merged. 6d0b5ee and 691e302