Add test for CVE-2020-1967
authorBenjamin Kaduk <kaduk@mit.edu>
Fri, 10 Apr 2020 19:27:28 +0000 (12:27 -0700)
committerMatt Caswell <matt@openssl.org>
Tue, 21 Apr 2020 10:22:51 +0000 (11:22 +0100)
commit64eef86733fd40a5b7737dc586754c3fa3414b0c
tree720edb8d71c1882494df6f5737a36b5076e5c78e
parent23424be835dc10f0942c91952142d75345ef9de1
Add test for CVE-2020-1967

Add to test_sslsigalgs a TLSProxy test that injects a
"signature_algorithms_cert" extension that contains an unallocated
codepoint.

The test currently fails, since s_server segfaults instead of
ignoring the unrecognized value.

Since "signature_algorithms" and "signature_algorithms_cert" are very
similar, also add the analogous test for "signature_algorithms".

Reviewed-by: Matt Caswell <matt@openssl.org>
test/recipes/70-test_sslsigalgs.t