← Back to branch summary

~ubuntu-branches/ubuntu/utopic/curl/utopic-updates

« back to all changes in this revision

Viewing changes to tests/data/test8

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2014-09-11 08:15:47 UTC
  • Revision ID: package-import@ubuntu.com-20140911081547-kvwvsrk4yadi7ghl
Tags: 7.37.1-1ubuntu2
* SECURITY UPDATE: incorrect cookie handling via partial literal IP
  addresses
  - debian/patches/CVE-2014-3613.patch: only use full host matches for
    hosts used as IP address in lib/cookie.c, added tests to
    tests/data/test1105, tests/data/test31, tests/data/test8.
  - CVE-2014-3613
* SECURITY UPDATE: incorrect cookie handling for TLDs
  - debian/patches/CVE-2014-3620.patch: reject incoming cookies set for
    TLDs in lib/cookie.c, added test to tests/data/test61.
  - CVE-2014-3620

Show diffs side-by-side

added added

removed removed

Lines of Context:
tests/data/test8
42
42
Set-Cookie: cookie=yes; path=/we;
43
43
Set-Cookie: cookie=perhaps; path=/we/want;
44
44
Set-Cookie: nocookie=yes; path=/WE;
45
 
Set-Cookie: blexp=yesyes; domain=.0.0.1; domain=.0.0.1; expiry=totally bad;
 
45
Set-Cookie: blexp=yesyes; domain=%HOSTIP; domain=%HOSTIP; expiry=totally bad;
 
46
Set-Cookie: partialip=nono; domain=.0.0.1;
46
47
 
47
48
</file>
48
49
<precheck>