From 69e5b965b0c0d506060c319fa9ee0358c1326e92 Mon Sep 17 00:00:00 2001 From: Alan Griffiths Date: Mon, 20 Jan 2020 16:29:53 +0000 Subject: [PATCH] Test for CVE-2018-20574 --- test/parser_test.cpp | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/test/parser_test.cpp b/test/parser_test.cpp index 686fb46..80703f0 100644 --- a/test/parser_test.cpp +++ b/test/parser_test.cpp @@ -38,3 +38,14 @@ TEST(ParserTest, CVE_2018_20573) { NiceMock handler; EXPECT_THROW(parser.HandleNextDocument(handler), YAML::ParserException); } + +TEST(ParserTest, CVE_2018_20574) { + std::string excessive_recursion; + for (auto i = 0; i != 21989; ++i) + excessive_recursion.push_back('{'); + std::istringstream input{excessive_recursion}; + Parser parser{input}; + + NiceMock handler; + EXPECT_THROW(parser.HandleNextDocument(handler), YAML::ParserException); +}