/
githubmirror
/
curl
Обзор
Документация
Войти
/
githubmirror
/
curl
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
master
tests/data/test2116
45 строк
913 B
Alhuda Khan
ftp: reject control bytes in ACCT and alternative-to-user
13 июл 2026, 09:46
Не верифицирован
13 июл 2026, 09:46
9494750
Код
Авторство
О чём код?
<?xml version="1.0" encoding="US-ASCII"?> <testcase> <info> <keywords> FTP --ftp-alternative-to-user </keywords> </info> # Server-side <reply> <servercmd> REPLY USER 530 go away </servercmd> </reply> # Client-side <client> <server> ftp </server> <name> FTP --ftp-alternative-to-user with embedded CRLF is rejected </name> # read the command from a config file so the raw CR LF reaches curl intact <file name="%LOGDIR/test%TESTNUMBER.config"> ftp-alternative-to-user = "USER me\r\nDELE %TESTNUMBER" </file> <command> ftp://%HOSTIP:%FTPPORT/%TESTNUMBER/ -K %LOGDIR/test%TESTNUMBER.config </command> </client> # Verify data after the test has been "shot" <verify> # 43 - CURLE_BAD_FUNCTION_ARGUMENT <errorcode> 43 </errorcode> # the replacement command is rejected before it is sent, so the injected DELE # command must never reach the server <protocol crlf="yes"> USER anonymous </protocol> </verify> </testcase>