curl/tests/data/test1289

<testcase>
<info>
<keywords>
HTTP
HTTP GET
globbing
</keywords>
</info>

#
# Server-side
<reply>
</reply>

# Client-side
<client>
<server>
http
</server>
<name>
globbing with overflow and bad syntxx
</name>
<command>
http://ur%20[0-60000000000000000000
</command>
</client>

# Verify data after the test has been "shot"
<verify>
# curl: (3) [globbing] bad range in column
<errorcode>
3
</errorcode>
</verify>
</testcase>
glob: do not continue parsing after a strtoul() overflow range Added test 1289 to verify. CVE-2017-1000101 Bug: https://curl.haxx.se/docs/adv_20170809A.html Reported-by: Brian Carpenter 2017-08-01 23:16:07 +08:00			`<testcase>`
			`<info>`
			`<keywords>`
			`HTTP`
			`HTTP GET`
			`globbing`
			`</keywords>`
			`</info>`

			`#`
			`# Server-side`
			`<reply>`
			`</reply>`

			`# Client-side`
			`<client>`
			`<server>`
			`http`
			`</server>`
			`<name>`
			`globbing with overflow and bad syntxx`
			`</name>`
			`<command>`
			`http://ur%20[0-60000000000000000000`
			`</command>`
			`</client>`

			`# Verify data after the test has been "shot"`
			`<verify>`
tidy-up: mostly whitespace nits - delete completed TODO from `./CMakeLists.txt`. - convert a C++ comment to C89 in `./CMake/CurlTests.c`. - delete duplicate EOLs from EOF. - add missing EOL at EOF. - delete whitespace at EOL (except from expected test results). - convert tabs to spaces. - convert CRLF EOLs to LF in GHA yaml. - text casing fixes in `./CMakeLists.txt`. - fix a codespell typo in `packages/OS400/initscript.sh`. Closes #11772 2023-08-31 21:28:49 +08:00			`# curl: (3) [globbing] bad range in column`
glob: do not continue parsing after a strtoul() overflow range Added test 1289 to verify. CVE-2017-1000101 Bug: https://curl.haxx.se/docs/adv_20170809A.html Reported-by: Brian Carpenter 2017-08-01 23:16:07 +08:00			`<errorcode>`
			`3`
			`</errorcode>`
			`</verify>`
			`</testcase>`