34 lines
944 B
Diff
34 lines
944 B
Diff
From f994e267519215d51fa762e3114f1019dd8e2722 Mon Sep 17 00:00:00 2001
|
|
From: Hiroshi SHIBATA <hsbt@ruby-lang.org>
|
|
Date: Fri, 24 Mar 2023 17:11:36 +0900
|
|
Subject: [PATCH 1/5] Test for quadratic backtracking on invalid time
|
|
|
|
https://hackerone.com/reports/1485501
|
|
---
|
|
test/test_time.rb | 9 +++++++++
|
|
1 file changed, 9 insertions(+)
|
|
|
|
diff --git a/test/test_time.rb b/test/test_time.rb
|
|
index ca20788..4f11048 100644
|
|
--- a/test/test_time.rb
|
|
+++ b/test/test_time.rb
|
|
@@ -62,6 +62,15 @@ class TestTimeExtension < Test::Unit::TestCase # :nodoc:
|
|
assert_equal(true, t.utc?)
|
|
end
|
|
|
|
+ def test_rfc2822_nonlinear
|
|
+ pre = ->(n) {"0 Feb 00 00 :00" + " " * n}
|
|
+ assert_linear_performance([100, 500, 5000, 50_000], pre: pre) do |s|
|
|
+ assert_raise(ArgumentError) do
|
|
+ Time.rfc2822(s)
|
|
+ end
|
|
+ end
|
|
+ end
|
|
+
|
|
def test_encode_rfc2822
|
|
t = Time.utc(1)
|
|
assert_equal("Mon, 01 Jan 0001 00:00:00 -0000", t.rfc2822)
|
|
--
|
|
2.33.0
|
|
|