getcols.test.sas File Reference

testing getcols service - input validation (security) More...

Go to the source code of this file.

Detailed Description

The libds in the IWANT input table must be a well-formed LIBREF.DATASET. An invalid value aborts the service before it reaches proc contents. The abort shows up as a canceled child job (an aborted service registers no webout).

The payload in test 1 resolves to a REAL table when the request content is executed as macro code, so on a vulnerable service the job completes, and only the validating service cancels it - the assertion cannot pass against a service that does not validate.

SAS Macros

• mp_assert.sas
• mx_execute.sas
• mf_getuniquefileref.sas

Definition in file getcols.test.sas.