diff --git a/test/data/pocIssue306 b/test/data/pocIssue306 new file mode 100644 index 00000000..1aa77e99 Binary files /dev/null and b/test/data/pocIssue306 differ diff --git a/tests/bugfixes/github/test_CVE_2018_10999.py b/tests/bugfixes/github/test_CVE_2018_10999.py new file mode 100644 index 00000000..2021a333 --- /dev/null +++ b/tests/bugfixes/github/test_CVE_2018_10999.py @@ -0,0 +1,17 @@ +# -*- coding: utf-8 -*- + +import system_tests + + +class TestCvePoC(metaclass=system_tests.CaseMeta): + + url = "https://github.com/Exiv2/exiv2/issues/306" + + filename = "$data_path/pocIssue306" + commands = ["$exiv2 -et " + filename] + retval = [1] + stdout = [""] + stderr = [ + """$exception_in_extract """ + filename + """: +$kerFailedToReadImageData +"""] diff --git a/tests/suite.conf b/tests/suite.conf index 45a10eaf..cac48e2a 100644 --- a/tests/suite.conf +++ b/tests/suite.conf @@ -25,3 +25,4 @@ kerNoImageInInputData: Input data does not contain a valid image addition_overflow_message: Overflow in addition exiv2_exception_message: Exiv2 exception in print action for file exiv2_overflow_exception_message: std::overflow_error exception in print action for file +exception_in_extract: Exiv2 exception in extract action for file