Added reproducers for #138, #139 & #140

the issues correspond to CVE-2017-14858, CVE-2017-14861 and
CVE-2017-14866 respectively

test/bugfixes-test.sh

@@ -800,6 +800,27 @@ source ./functions.source
     copyTestFile                      $filename
     runTest exiv2                     $filename
 
+    num=g138
+    printf "$num " >&3
+    filename=007-heap-buffer-over
+    echo '------>' Bug $filename '<-------' >&2
+    copyTestFile                      $filename
+    runTest exiv2                     $filename
+
+    num=g139
+    printf "$num " >&3
+    filename=009-stack-over
+    echo '------>' Bug $filename '<-------' >&2
+    copyTestFile                      $filename
+    runTest exiv2                     $filename
+
+    num=g140
+    printf "$num " >&3
+    filename=006-heap-buffer-over
+    echo '------>' Bug $filename '<-------' >&2
+    copyTestFile                      $filename
+    runTest exiv2                     $filename
+
 ) 3>&1 > $results 2>&1
 
 printf "\n"