From 1deb54c95d508f9adce1dddb073f0b0e4f8e7ba1 Mon Sep 17 00:00:00 2001 From: David Oberhollenzer Date: Sat, 14 Aug 2021 12:37:02 +0200 Subject: Add a test case for the path traversal bug Signed-off-by: David Oberhollenzer --- tests/rdsquashfs/pathtraversal.sh.in | 12 ++++++++++++ tests/rdsquashfs/pathtraversal.sqfs | Bin 0 -> 4096 bytes 2 files changed, 12 insertions(+) create mode 100644 tests/rdsquashfs/pathtraversal.sh.in create mode 100644 tests/rdsquashfs/pathtraversal.sqfs (limited to 'tests/rdsquashfs') diff --git a/tests/rdsquashfs/pathtraversal.sh.in b/tests/rdsquashfs/pathtraversal.sh.in new file mode 100644 index 0000000..6dd9fab --- /dev/null +++ b/tests/rdsquashfs/pathtraversal.sh.in @@ -0,0 +1,12 @@ +#!/bin/sh + +RDSQFS="@abs_top_builddir@/rdsquashfs" +REFFILE="@abs_top_srcdir@/tests/rdsquashfs/pathtraversal.sqfs" +GOTCHA="/tmp/gotcha.txt" + +if "$RDSQFS" -u / -p . "$REFFILE"; then + if [ -e "$GOTCHA" ]; then + echo "Found $GOTCHA which should not be there" + exit 1 + fi +fi diff --git a/tests/rdsquashfs/pathtraversal.sqfs b/tests/rdsquashfs/pathtraversal.sqfs new file mode 100644 index 0000000..0c33bb3 Binary files /dev/null and b/tests/rdsquashfs/pathtraversal.sqfs differ -- cgit v1.2.3