commit 95733c361de3a318d33765e17d336fbbcdce0d58
from: Sergey Bronnikov <estetus@gmail.com>
date: Fri Aug 02 18:52:10 2024 UTC

tests: add test for security-20

commit - 1e1d3706bb709ddff38380bab7893bd389a12d06
commit + 95733c361de3a318d33765e17d336fbbcdce0d58
blob - /dev/null
blob + 979e51f1e54d908eadbee45238dce48c9da77a8f (mode 644)
--- /dev/null
+++ tests/tarantool_box_GHSA-74jr-2fq7-vp42.lua
@@ -0,0 +1,21 @@
+-- https://github.com/tarantool/security/issues/20
+-- Disable panic "failed to eval/fetch replication_synchro_quorum" in src/box/box.cc.
+
+local luzer = require("luzer")
+
+local function TestOneInput(buf)
+    rawset(_G, 'res', false)
+    local ok = pcall(box.cfg, {replication_synchro_quorum = buf})
+    if ok == false then
+        return -1
+    end
+    assert(rawget(_G, 'res') == false)
+end
+
+local script_path = debug.getinfo(1).source:match("@?(.*/)")
+
+local args = {
+    max_total_time = 100 * 60,
+    corpus = script_path .. "/tarantool-corpus/box_GHSA-74jr-2fq7-vp42",
+}
+luzer.Fuzz(TestOneInput, nil, args)