Blame t/CVE-2015-1592.t

Packit 14c646
#!/usr/bin/perl
Packit 14c646
Packit 14c646
use strict;
Packit 14c646
use warnings;
Packit 14c646
use Test::More;
Packit 14c646
use Storable qw(freeze thaw);
Packit 14c646
plan tests => 1;
Packit 14c646
Packit 14c646
# this original worked with the packaged exploit, but that
Packit 14c646
# triggers virus scanners, so test for the behaviour instead
Packit 14c646
my $x = bless \(my $y = "mt-config.cgi"), "CGITempFile";
Packit 14c646
Packit 14c646
my $frozen = freeze($x);
Packit 14c646
Packit 14c646
{
Packit 14c646
    my $warnings = '';
Packit 14c646
    local $SIG{__WARN__} = sub { $warnings .= "@_" };
Packit 14c646
    thaw($frozen);
Packit 14c646
    like($warnings, qr/SECURITY: Movable-Type CVE-2015-1592 Storable metasploit attack/,
Packit 14c646
         'Detect CVE-2015-1592');
Packit 14c646
}