zeek/testing/btest/zeek-aux/zeek-archiver/command-injection-filenames.test
Tim Wojtulewicz d7ba381d12 Adapt zeek-aux btests to zeek structure
This updates Baselines, changes paths to scripts and log files, adds TEST-DOC
annotations, and various other cleanups that make the zeek-aux tests more like
the rest of the zeek tests.
2025-09-11 13:00:53 -07:00

12 lines
421 B
Text

# @TEST-DOC: Verify that commands injected via filenames do not execute.
# @TEST-EXEC: bash %INPUT
. "${SCRIPTS}/zeek-aux/zeek-archiver-common.sh"
log_in='test;uptime;__2020-07-16-09-43-10__2020-07-16-09-43-10__.log'
log_out='test;uptime;.09:43:10-09:43:10.log'
echo hello > "$(queue_dir)/${log_in}"
zeek-archiver -1 -v "$(queue_dir)" "$(archive_dir)"
test "$(gunzip <"$(archive_date_dir)/${log_out}.gz")" == "hello"