Change the randomly generated benchmark input
The xz backdoor relied on obfuscated test files that contained malicious code instead of a real test. Since then, test and benchmark input that cannot be explained should be considered suspicious. Out of laziness, the input for the xl test (05) was generated through the `openssl rand -hex` command, which outputs random data as an hexadecimal string. Although I generated it myself and know there is nothing hidden in there, I cannot prove it to someone else. Therefore, I chose to stop using random data for this test and changed it to a readable "lorem ipsum" string of the same size, like the other tests. For more information about the xz backdoor and the context in which this commit take place, please read: CVE-2024-3094 https://www.openwall.com/lists/oss-security/2024/03/29/4 https://gynvael.coldwind.pl/?lang=en&id=782 https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27
This commit is contained in:
parent
b41772c045
commit
0aac6402eb
3 changed files with 1602 additions and 3 deletions
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
Loading…
Reference in a new issue