svn commit: r1799630 - /httpd/test/framework/trunk/t/security/CVE-2017-7659.t

[jc...@apache.org]

Author: jchampion
Date: Thu Jun 22 21:52:33 2017
New Revision: 1799630

URL: http://svn.apache.org/viewvc?rev=1799630&view=rev
Log:
CVE-2017-7659: add regression test

Added:
    httpd/test/framework/trunk/t/security/CVE-2017-7659.t

Added: httpd/test/framework/trunk/t/security/CVE-2017-7659.t
URL: http://svn.apache.org/viewvc/httpd/test/framework/trunk/t/security/CVE-2017-7659.t?rev=1799630&view=auto
==============================================================================
--- httpd/test/framework/trunk/t/security/CVE-2017-7659.t (added)
+++ httpd/test/framework/trunk/t/security/CVE-2017-7659.t Thu Jun 22 21:52:33 2017
@@ -0,0 +1,28 @@
+use strict;
+use warnings FATAL => 'all';
+
+use Apache::Test;
+use Apache::TestUtil;
+use Apache::TestRequest;
+
+plan tests => 2,
+     need(
+         need_module('http2')
+     );
+
+my $module = "h2c";
+Apache::TestRequest::module($module);
+
+my $sock = Apache::TestRequest::vhost_socket($module);
+ok $sock;
+
+# Thanks to Javier Jimenez for this test case.
+Apache::TestRequest::socket_trace($sock);
+$sock->print("p * HTTP/1.0\r\n"
+           . "Connection:H/\r\n"
+           . "Upgrade:h2c\r\n"
+           . "HTTP2-Settings:\r\n\r\n");
+
+# The server should not have crashed -- getc() should return *something*.
+ok $sock->getc();
+$sock->close();