From fd23f4370d24d00352d1cc09b16687f16da6ae5b Mon Sep 17 00:00:00 2001 From: Tony Cook Date: Tue, 12 May 2026 14:47:31 +1000 Subject: [PATCH 1/2] perl/perl-security#147: test cases The suggested case from the ticket and an alternative. (cherry picked from commit e842efdafe7c51a687a4907e4887988fe6a025ef) CVE: CVE-2026-8376 Upstream-Status: Backport [https://github.com/Perl/perl5/commit/e842efdafe7c51a687a4907e4887988fe6a025ef] Signed-off-by: Theo Gaige (Schneider Electric) --- t/re/pat_psycho.t | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-) diff --git a/t/re/pat_psycho.t b/t/re/pat_psycho.t index 336039521d..73a7992372 100644 --- a/t/re/pat_psycho.t +++ b/t/re/pat_psycho.t @@ -10,7 +10,7 @@ use strict; use warnings; use 5.010; - +use Config; sub run_tests; @@ -31,7 +31,7 @@ BEGIN { skip_all('$PERL_SKIP_PSYCHO_TEST set') if $ENV{PERL_SKIP_PSYCHO_TEST}; -plan tests => 15; # Update this when adding/deleting tests. +plan tests => 17; # Update this when adding/deleting tests. run_tests() unless caller; @@ -211,6 +211,20 @@ EOF } + + SKIP: + { # sec #147 + $Config{ptrsize} == 4 + or skip "these only fail on x32 and use too much memory on x64", 2; + local $::TODO = "This crashes"; + # original case + fresh_perl_like('/\x{10000}{1073741824}/', + qr/Regexp out of space/, {}, "ssize_t overflow"); + + # synthesized but similar case + fresh_perl_like('/(?:\x{10001}\x{10000}){536870912}/', + qr/Regexp out of space/, {}, "ssize_t overflow again"); + } } # End of sub run_tests 1; -- 2.43.0