Add test for CVE-2020-1967
authorBenjamin Kaduk <kaduk@mit.edu>
Fri, 10 Apr 2020 19:27:28 +0000 (12:27 -0700)
committerMatt Caswell <matt@openssl.org>
Tue, 21 Apr 2020 12:32:35 +0000 (13:32 +0100)
commit3656c08ab4b1b892730cb5e808b6f4298b08a2e6
tree7d2ea637899b3f8265942ac8b272c94a5e0bb706
parentb0b0b6a41dd4418bab19cdd28c01ce248fee6af7
Add test for CVE-2020-1967

Add to test_sslsigalgs a TLSProxy test that injects a
"signature_algorithms_cert" extension that contains an unallocated
codepoint.

The test currently fails, since s_server segfaults instead of
ignoring the unrecognized value.

Since "signature_algorithms" and "signature_algorithms_cert" are very
similar, also add the analogous test for "signature_algorithms".

Reviewed-by: Matt Caswell <matt@openssl.org>
test/recipes/70-test_sslsigalgs.t