svn commit: r1775702 - /httpd/test/framework/trunk/t/security/CVE-2008-2364.t

[co...@apache.org]

Author: covener
Date: Thu Dec 22 19:11:53 2016
New Revision: 1775702

URL: http://svn.apache.org/viewvc?rev=1775702&view=rev
Log:
block on 2.2 for now

last 2.2 release, we ignored the failures. 
It has at least 1 dep that is separate from security work.


Modified:
    httpd/test/framework/trunk/t/security/CVE-2008-2364.t

Modified: httpd/test/framework/trunk/t/security/CVE-2008-2364.t
URL: http://svn.apache.org/viewvc/httpd/test/framework/trunk/t/security/CVE-2008-2364.t?rev=1775702&r1=1775701&r2=1775702&view=diff
==============================================================================
--- httpd/test/framework/trunk/t/security/CVE-2008-2364.t (original)
+++ httpd/test/framework/trunk/t/security/CVE-2008-2364.t Thu Dec 22 19:11:53 2016
@@ -6,21 +6,30 @@ use Apache::TestRequest;
 use Apache::TestUtil;
 use Apache::TestConfig ();
 
-plan tests => 3, need_module 'proxy';
+my $tests = 3;
+my $server_suppresses_interim = 1;
+if (!have_min_apache_version("2.4.10")) { 
+  $tests = 1;
+  $server_suppresses_interim = 0;
+}
+
+plan tests => $tests, need_module 'proxy';
 
 Apache::TestRequest::module("proxy_http_reverse");
 Apache::TestRequest::user_agent(requests_redirectable => 0);
 
 my $r = GET("/reverse/");
 ok t_cmp($r->code, 200, "reverse proxy to index.html");
-
 if (have_cgi) {
-    $r = GET("/reverse/modules/cgi/nph-interim1.pl");
-    ok t_cmp($r->code, 200, "small number of interim responses - CVE-2008-2364");
-
-    $r = GET("/reverse/modules/cgi/nph-interim2.pl");
-    ok t_cmp($r->code, 502, "large number of interim responses - CVE-2008-2364");
-
+  if ($server_suppresses_interim) {
+        # XXX: This doesn't work in 2.2.x w/o at least r1588519 because LWP 
+        # sees the unexpected interim response and stops.
+        $r = GET("/reverse/modules/cgi/nph-interim1.pl");
+        ok t_cmp($r->code, 200, "small number of interim responses - CVE-2008-2364");
+
+        $r = GET("/reverse/modules/cgi/nph-interim2.pl");
+        ok t_cmp($r->code, 502, "large number of interim responses - CVE-2008-2364");
+  }
 } else {
     skip "skipping tests without CGI module" foreach (1..2);
 }