libcli/security: tests for signed zeros in sddl condtional ACEs

REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65122

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/libcli/security/tests/test_sddl_conditional_ace.c b/libcli/security/tests/test_sddl_conditional_ace.c
index 3ea9e23b2b81f02f218b4fe215b7c09d997c9462..fc9281d92f48722e922476f90917d00c4a9eded0 100644 (file)
--- a/libcli/security/tests/test_sddl_conditional_ace.c
+++ b/libcli/security/tests/test_sddl_conditional_ace.c
@@ -587,6 +587,8 @@ static void test_round_trips(void **state)
         * which then parses again into the same conditional ACE.
         */
        static const char *sddl[] = {
+               "(0>-0)",
+               "(0>+0)",
                ("(Member_of{SID(AA)})"),
                ("(a Contains @USER.b == @device.c)"),
                ("(a == @user.b == @resource.c)"),

diff --git a/selftest/knownfail.d/sddl-conditional-ace b/selftest/knownfail.d/sddl-conditional-ace
new file mode 100644 (file)
index 0000000..f253ee9
--- /dev/null
+++ b/selftest/knownfail.d/sddl-conditional-ace
@@ -0,0 +1 @@
+samba.unittests.sddl_conditional_ace.test_round_trips