PsychoticNinja/JLU5-SupyPlugins
1
0
Fork 0
mirror of https://github.com/jlu5/SupyPlugins.git synced 2025-05-05 09:50:54 -05:00
Code Issues Projects Releases Wiki Activity

SedRegex: add test for ReDoS timeout

Browse Source
This commit is contained in:
James Lu 2019-10-17 22:13:51 -07:00
parent e5af479939
commit 81debc45ec
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
SedRegex/test.py
View File

@ -173,6 +173,14 @@ class SedRegexTestCase(ChannelPluginTestCase):
m = self.getMsg(' ') m = self.getMsg(' ')
self.assertIn('Segmentation fault (core dumped)', str(m)) self.assertIn('Segmentation fault (core dumped)', str(m))
def testReDoSTimeout(self):
# From https://snyk.io/blog/redos-and-catastrophic-backtracking/
for idx in range(500):
self.feedMsg("ACCCCCCCCCCCCCCCCCCCCCCCCCCCCX")
self.feedMsg(r"s/A(B|C+)+D/this should abort/")
m = self.getMsg(' ', timeout=1)
self.assertIn('timed out', str(m))
# TODO: test ignores # TODO: test ignores
# vim:set shiftwidth=4 tabstop=4 expandtab textwidth=79: # vim:set shiftwidth=4 tabstop=4 expandtab textwidth=79: