Assert current behavior

Author: garydgregory

src/test/java/org/apache/commons/codec/digest/Md5CryptTest.java

@@ -16,12 +16,14 @@
  */
 package org.apache.commons.codec.digest;
 
+import static org.junit.jupiter.api.Assertions.assertArrayEquals;
 import static org.junit.jupiter.api.Assertions.assertEquals;
 import static org.junit.jupiter.api.Assertions.assertNotNull;
 import static org.junit.jupiter.api.Assertions.assertThrows;
 import static org.junit.jupiter.api.Assertions.assertTrue;
 
 import java.nio.charset.StandardCharsets;
+import java.util.Arrays;
 import java.util.concurrent.ThreadLocalRandom;
 
 import org.junit.jupiter.api.Test;
@@ -83,4 +85,14 @@ public void testMd5CryptNullData() {
     public void testMd5CryptWithEmptySalt() {
         assertThrows(IllegalArgumentException.class, () -> Md5Crypt.md5Crypt("secret".getBytes(), ""));
     }
+    
+    @Test
+    public void testZeroOutInput() {
+        final byte[] buffer = new byte[200];
+        Arrays.fill(buffer, (byte) 'A');
+        Md5Crypt.md5Crypt(buffer);
+        // input password is 0-filled on return
+        assertArrayEquals(new byte[buffer.length], buffer);
+    }
+
 }

src/test/java/org/apache/commons/codec/digest/Sha256CryptTest.java

@@ -93,4 +93,14 @@ public void testSha256LargestThanBlocksize() {
         // input password is 0-filled on return
         assertArrayEquals(new byte[buffer.length], buffer);
     }
+    
+    @Test
+    public void testZeroOutInput() {
+        final byte[] buffer = new byte[200];
+        Arrays.fill(buffer, (byte) 'A');
+        Sha2Crypt.sha256Crypt(buffer);
+        // input password is 0-filled on return
+        assertArrayEquals(new byte[buffer.length], buffer);
+    }
+
 }

src/test/java/org/apache/commons/codec/digest/Sha512CryptTest.java

@@ -102,4 +102,14 @@ public void testSha256LargetThanBlocksize() {
         // input password is 0-filled on return
         assertArrayEquals(new byte[buffer.length], buffer);
     }
+
+    @Test
+    public void testZeroOutInput() {
+        final byte[] buffer = new byte[200];
+        Arrays.fill(buffer, (byte) 'A');
+        Sha2Crypt.sha512Crypt(buffer);
+        // input password is 0-filled on return
+        assertArrayEquals(new byte[buffer.length], buffer);
+    }
+
 }