diff options
author | eregon <eregon@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2019-02-21 15:38:59 +0000 |
---|---|---|
committer | eregon <eregon@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2019-02-21 15:38:59 +0000 |
commit | da7976235fbc2986925969646071bebe3702e49f (patch) | |
tree | 83bbf6a8e03cf990369feabe6c1c9d45c69f4c85 /spec/ruby/security | |
parent | b8e389a0f3226c90e96e02e6396686a3bef6a456 (diff) |
Update to ruby/spec@7a16e01
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@67112 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'spec/ruby/security')
-rw-r--r-- | spec/ruby/security/cve_2018_6914_spec.rb | 54 |
1 files changed, 29 insertions, 25 deletions
diff --git a/spec/ruby/security/cve_2018_6914_spec.rb b/spec/ruby/security/cve_2018_6914_spec.rb index a40225799d..1eab3b84cc 100644 --- a/spec/ruby/security/cve_2018_6914_spec.rb +++ b/spec/ruby/security/cve_2018_6914_spec.rb @@ -1,55 +1,59 @@ require_relative '../spec_helper' require 'tempfile' +require 'tmpdir' describe "CVE-2018-6914 is resisted by" do - before :all do - @traversal_path = Array.new(Dir.pwd.split('/').count, '..').join('/') + Dir.pwd + '/' - @traversal_path.delete!(':') if /mswin|mingw/ =~ RUBY_PLATFORM + before :each do + @dir = tmp("CVE-2018-6914") + Dir.mkdir(@dir) + touch "#{@dir}/bar" + + @traversal_path = Array.new(@dir.count('/'), '..').join('/') + @dir + '/' + @traversal_path.delete!(':') if platform_is(:windows) + + @tempfile = nil + end + + after :each do + @tempfile.close! if @tempfile + rm_r @dir end it "Tempfile.open by deleting separators" do - begin - expect = Dir.glob(@traversal_path + '*').count - t = Tempfile.open([@traversal_path, 'foo']) - actual = Dir.glob(@traversal_path + '*').count - actual.should == expect - ensure - t.close! - end + expect = Dir.glob(@traversal_path + '*').size + @tempfile = Tempfile.open([@traversal_path, 'foo']) + actual = Dir.glob(@traversal_path + '*').size + actual.should == expect end it "Tempfile.new by deleting separators" do - begin - expect = Dir.glob(@traversal_path + '*').count - t = Tempfile.new(@traversal_path + 'foo') - actual = Dir.glob(@traversal_path + '*').count - actual.should == expect - ensure - t.close! - end + expect = Dir.glob(@traversal_path + '*').size + @tempfile = Tempfile.new(@traversal_path + 'foo') + actual = Dir.glob(@traversal_path + '*').size + actual.should == expect end it "Tempfile.create by deleting separators" do - expect = Dir.glob(@traversal_path + '*').count + expect = Dir.glob(@traversal_path + '*').size Tempfile.create(@traversal_path + 'foo') do - actual = Dir.glob(@traversal_path + '*').count + actual = Dir.glob(@traversal_path + '*').size actual.should == expect end end it "Dir.mktmpdir by deleting separators" do - expect = Dir.glob(@traversal_path + '*').count + expect = Dir.glob(@traversal_path + '*').size Dir.mktmpdir(@traversal_path + 'foo') do - actual = Dir.glob(@traversal_path + '*').count + actual = Dir.glob(@traversal_path + '*').size actual.should == expect end end it "Dir.mktmpdir with an array by deleting separators" do - expect = Dir.glob(@traversal_path + '*').count + expect = Dir.glob(@traversal_path + '*').size Dir.mktmpdir([@traversal_path, 'foo']) do - actual = Dir.glob(@traversal_path + '*').count + actual = Dir.glob(@traversal_path + '*').size actual.should == expect end end |