summaryrefslogtreecommitdiff
path: root/spec/ruby/security/cve_2013_4164_spec.rb
blob: 94578cc7ce62d034b57ce877530c383932defe0a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
require_relative '../spec_helper'

require 'json'

describe "String#to_f" do

  it "resists CVE-2013-4164 by converting very long Strings to a Float" do
    "1.#{'1'*1000000}".to_f.should be_close(1.1111111111111112, TOLERANCE)
  end

end

describe "JSON.parse" do

  it "resists CVE-2013-4164 by converting very long Strings to a Float" do
    JSON.parse("[1.#{'1'*1000000}]").first.should be_close(1.1111111111111112, TOLERANCE)
  end

end