From: Nathan Moinvaziri <nathan@nathanm.com>
Date: Sat, 9 Apr 2022 20:43:53 +0000 (-0700)
Subject: Remove CVE testing from configure script.
X-Git-Tag: 2.1.0-beta1~265
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d0fc4e10b02c95bbc6ae5c169635d9ffb3f3665a;p=thirdparty%2Fzlib-ng.git

Remove CVE testing from configure script.
---

diff --git a/.gitattributes b/.gitattributes
index 3b35744b..49d4490d 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -3,4 +3,3 @@
 *.h text
 Makefile text
 configure text eol=lf
-testCVEinputs.sh text eol=lf
diff --git a/test/Makefile.in b/test/Makefile.in
index 119eb680..4cd1399e 100644
--- a/test/Makefile.in
+++ b/test/Makefile.in
@@ -13,7 +13,7 @@ TEST_LDFLAGS=-L.. ../$(LIBNAME).a
 QEMU_RUN=
 QEMU_VER:=$(shell command -v $(QEMU_RUN) --version 2> /dev/null)
 
-all: oldtests cvetests ghtests
+all: oldtests ghtests
 
 oldtests: #set by ../configure
 check_cross_dep:
@@ -49,11 +49,6 @@ testshared: check_cross_dep
 	fi; \
 	rm -f $$TMPSH $$HELLOSH
 
-cvetests: testCVEinputs
-
-testCVEinputs: check_cross_dep
-	@EXE=$(EXE) QEMU_RUN="${QEMU_RUN}" $(SRCDIR)/testCVEinputs.sh
-
 .PHONY: ghtests
 ghtests: testGH-361 testGH-364 testGH-751 testGH-1235
 
diff --git a/test/testCVEinputs.sh b/test/testCVEinputs.sh
deleted file mode 100755
index 84f6b31c..00000000
--- a/test/testCVEinputs.sh
+++ /dev/null
@@ -1,30 +0,0 @@
-#!/bin/bash
-TESTDIR="$(dirname "$0")"
-
-# check for QEMU if QEMU_RUN is set
-if [ ! -z "${QEMU_RUN}" ]; then
-    QEMU_VERSION=$(${QEMU_RUN} --version 2> /dev/null)
-    if [ -z "${QEMU_VERSION}" ]; then
-        echo "**** You need QEMU to run tests on non-native platform"
-        exit 1
-    fi
-fi
-
-CVEs="CVE-2002-0059 CVE-2004-0797 CVE-2005-1849 CVE-2005-2096"
-
-for CVE in $CVEs; do
-    fail=0
-    for testcase in ${TESTDIR}/${CVE}/*.gz; do
-    ${QEMU_RUN} ../minigzip${EXE} -d < "$testcase"
-    # we expect that a 1 error code is OK
-    # for a vulnerable failure we'd expect 134 or similar
-    if [ $? -ne 1 ] && [ $? -ne 0 ]; then
-        fail=1
-    fi
-    done
-    if [ $fail -eq 0 ]; then
-    echo "          --- zlib not vulnerable to $CVE ---";
-    else
-    echo "          --- zlib VULNERABLE to $CVE ---"; exit 1;
-    fi
-done