From 72de0f96f35d05ba68b28f4fa82f51a1df2778ca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dan=20=C4=8Cerm=C3=A1k?= Date: Tue, 9 Jan 2018 21:27:20 +0100 Subject: [PATCH] Added reproducer for CVE-2018-4868 to the test suite --- test/data/exiv2-memorymmap-error | Bin 0 -> 84 bytes tests/bugfixes/github/test_CVE_2018_4868.py | 18 ++++++++++++++++++ 2 files changed, 18 insertions(+) create mode 100644 test/data/exiv2-memorymmap-error create mode 100644 tests/bugfixes/github/test_CVE_2018_4868.py diff --git a/test/data/exiv2-memorymmap-error b/test/data/exiv2-memorymmap-error new file mode 100644 index 0000000000000000000000000000000000000000..0bec43593d7c934e76d9dd1a55c6b85875bf8b08 GIT binary patch literal 84 zcmZQzVBpCLP*C9IYUg5LU=YbFFvV!Z literal 0 HcmV?d00001 diff --git a/tests/bugfixes/github/test_CVE_2018_4868.py b/tests/bugfixes/github/test_CVE_2018_4868.py new file mode 100644 index 00000000..434eec6b --- /dev/null +++ b/tests/bugfixes/github/test_CVE_2018_4868.py @@ -0,0 +1,18 @@ +# -*- coding: utf-8 -*- + +import system_tests + + +class TestCvePoC(system_tests.Case): + + url = "https://github.com/Exiv2/exiv2/issues/202" + cve_url = "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4868" + found_by = ["afl", "topsecLab", "xcainiao"] + + filename = "{data_path}/exiv2-memorymmap-error" + commands = ["{exiv2} " + filename] + stdout = [""] + stderr = ["""{exiv2_exception_msg} """ + filename + """: +{error_58_message} +"""] + retval = [1]