"LENGTH_DIFF_OVER" signal is not handled properly.As a result of which,this test case failure is reported incorrectly.

Bug #1749604 reported by DIG VIJAY SINGH
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
syntribos
New
Undecided
Unassigned

Bug Description

LENGTH_DIFF_OVER is checked and registered in diff signals without checking for matching http status response code in method run_default_checks() in base_fuzz.py. Like check is there while registering this as issue but not at the point where it is registered as diff signal itself. This cause a problem suppose we have initiated fuzz like "BUFFER_OVERFLOW_HEADER" and it has 2 test cases.
1. Now take example if test case 1 has detected "LENGTH_DIFF_OVER" but response status code is different , so signal will remain registered for diff signal and due to status code mismatch it is not reported as issue which is correct.
2. Now in test case 2, where there is no length diff but the diff signal is already registered with "length diff" in test case 1, so suppose in case the response code matches then issue will be reported as length diff where it was actually not there.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.