mirror of
https://github.com/ClickHouse/ClickHouse.git
synced 2024-11-19 22:22:00 +00:00
23 lines
511 B
Bash
23 lines
511 B
Bash
|
#!/bin/bash
|
||
|
|
TESTDIR="$(dirname "$0")"
|
||
|
|
|
||
|
|
CVEs="CVE-2002-0059 CVE-2004-0797 CVE-2005-1849 CVE-2005-2096"
|
||
|
|
|
||
|
|
for CVE in $CVEs; do
|
||
|
|
fail=0
|
||
|
|
for testcase in ${TESTDIR}/${CVE}/*.gz; do
|
||
|
|
../minigzip -d < "$testcase"
|
||
|
|
# we expect that a 1 error code is OK
|
||
|
|
# for a vulnerable failure we'd expect 134 or similar
|
||
|
|
if [ $? -ne 1 ]; then
|
||
|
|
fail=1
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
if [ $fail -eq 0 ]; then
|
||
|
|
echo " --- zlib not vulnerable to $CVE ---";
|
||
|
|
else
|
||
|
|
echo " --- zlib VULNERABLE to $CVE ---"; exit 1;
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
|