[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PATCH 3/4] check-qjson: Add test for JSON nesting depth li
From: |
Markus Armbruster |
Subject: |
[Qemu-devel] [PATCH 3/4] check-qjson: Add test for JSON nesting depth limit |
Date: |
Thu, 29 Oct 2015 13:44:42 +0100 |
This would have prevented the regression mentioned in the previous
commit.
Signed-off-by: Markus Armbruster <address@hidden>
---
tests/check-qjson.c | 29 +++++++++++++++++++++++++++++
1 file changed, 29 insertions(+)
diff --git a/tests/check-qjson.c b/tests/check-qjson.c
index 1cfffa5..2579d79 100644
--- a/tests/check-qjson.c
+++ b/tests/check-qjson.c
@@ -1484,6 +1484,34 @@ static void unterminated_literal(void)
g_assert(obj == NULL);
}
+static char *make_nest(char *buf, size_t cnt)
+{
+ int i;
+
+ for (i = 0; i < cnt - 1; i++) {
+ buf[i] = '[';
+ buf[2 * cnt - i - 1] = ']';
+ }
+ buf[cnt - 1] = '{';
+ buf[cnt] = '}';
+ buf[2 * cnt] = 0;
+ return buf;
+}
+
+static void limits_nesting(void)
+{
+ enum { max_nesting = 1024 }; /* see qobject/json-streamer.c */
+ char buf[2 * (max_nesting + 1) + 1];
+ QObject *obj;
+
+ obj = qobject_from_json(make_nest(buf, max_nesting));
+ g_assert(obj != NULL);
+ qobject_decref(obj);
+
+ obj = qobject_from_json(make_nest(buf, max_nesting + 1));
+ g_assert(obj == NULL);
+}
+
int main(int argc, char **argv)
{
g_test_init(&argc, &argv, NULL);
@@ -1519,6 +1547,7 @@ int main(int argc, char **argv)
g_test_add_func("/errors/invalid_array_comma", invalid_array_comma);
g_test_add_func("/errors/invalid_dict_comma", invalid_dict_comma);
g_test_add_func("/errors/unterminated/literal", unterminated_literal);
+ g_test_add_func("/errors/limits/nesting", limits_nesting);
return g_test_run();
}
--
2.4.3
[Qemu-devel] [PATCH 1/4] json-streamer: Apply nesting limit more sanely, Markus Armbruster, 2015/10/29
[Qemu-devel] [PATCH 3/4] check-qjson: Add test for JSON nesting depth limit,
Markus Armbruster <=
[Qemu-devel] [PATCH 2/4] json-streamer: Don't crash when input exceeds nesting limit, Markus Armbruster, 2015/10/29