Adding autopkgtests for CVEs

[Chris Lamb <lamby@debian.org>]

Hi -lts,

I recently had some success adding an autopkgtest for a CVE and
thought I might share:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=874059;filename=874059.diff.txt;msg=29

You generate the uuencode input with "uuencode -m -".

Note that I added a "smoke test" for the non-CVE-related
codepaths; if I just tested whether the reproducer was rejected,
this could mask that I broke the regular operation of the package.


Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-