From c310e2c41fa16d6997c7aa297f19920b0d69c6c8 Mon Sep 17 00:00:00 2001 From: Kevin Backhouse Date: Wed, 23 Jun 2021 22:31:12 +0100 Subject: [PATCH] Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-mv9g-fxh2-m49m --- test/data/test_issue_ghsa_mv9g_fxh2_m49m.crw | Bin 0 -> 10078 bytes .../github/test_issue_ghsa_mv9g_fxh2_m49m.py | 13 +++++++++++++ 2 files changed, 13 insertions(+) create mode 100644 test/data/test_issue_ghsa_mv9g_fxh2_m49m.crw create mode 100644 tests/bugfixes/github/test_issue_ghsa_mv9g_fxh2_m49m.py diff --git a/test/data/test_issue_ghsa_mv9g_fxh2_m49m.crw b/test/data/test_issue_ghsa_mv9g_fxh2_m49m.crw new file mode 100644 index 0000000000000000000000000000000000000000..e90c53545162afeb5570cb8de1cbc611de8cef19 GIT binary patch literal 10078 zcmd5h1y~hZw|hFyLHrBMkHFbER?X#_05MD8NZ@ z8x8RS6a$22fZ!%58vqCkZNX2CAru;eB_m&>#8J@$6of{jFla0mgF$MZeuF{-35eZooyVS~`;!V3h^GiAVM^fTgSlQS)1O$bIMF`R|vU2hYiU-v- zG_|yKbj{2yEUm0ZO_|#UibF(4-5_szk5G1`C)2$W_E6A`OC`c+WOaT z-ywkBHV4VKE&9zK3d9};#2yp|gT|0!{apZr3Puu|0fXh0Bx5{aLhf{&iEnQN1+!X0 zR{2xPT~el>@y`C;I2L~CcLGZ!leR4SJA>-B4Ep%j7M1>Mi+&mO(;fg118Ovcd@wWv zPyt!Y=;11Hp5eEXj#lEAHLlmo-n0wZ<<_ZwGi=F3+CS>$(bzp|={rP&$*vt(QAuHS z=4jgqrrF7JWk31au${mVlgsk)zGiO8Ix+MLLMeBTQ;V8BI7*1BV_x80KUGJ}{#=yl|`i+6BDPaf8M(rSfP?)q_y`A-|mjclP}$r&Q~d3>O1zbjIE+D9$zu zOd0pONZGb0Ngr>1mDJlW(3~I5?`paHLZZn}-t zJMA;Q16Kau=IAV}Efkoz9DY~d+`yQi>sgxGsC*e2a$Tu$BTHA2mzXXHF24K&Kxb}P1{Z+R-Yj<6? zQn9sEl^E5!wHi*8W>u3v{;lW30e`lvB-1*2)gI$BCw8_!VDrs-eY*k86I5!O>R&O$ zW$xk@TrVNB>Dr8rA4J`IsFGuUc(i(~DGq&;wG>k85nm16WmTkCQ#^BY-mx}{BI?-U zq0ZF3P$P=^ z=BLmk9X&&ffn#0^n>BoomCU23{gPApWBL=+Qd^3##_aQ9Hwrz~zBb1hH#)}D7wvf=Kcc_iN-?&rwlX#+ezjraPVaz|_dD6{c@}rq zgk-l!7*OVCDj3MtT+UU{q&XbI{@`X7gihtO;wqSBjIBES2MgA}8iM%mG`E50HQ;*$ZR zH>;a1?O8h)>1oR*t?Ta%9>coYt7eVinUmRr@!^)oHRox2e0%0OydB9#W6BPGHEnhD zMT-hseDeJC=-K_=dg4w4Ju%#^LI*z*d1=t6Fu+*eHY?j&gL&2$VS4qXgy=zb9 zU*0d1sWHPcC+HC?*x8K+=%3qWL_Z9CJnhR7XV}x9}7Z zXyC#g>+*W|q8A2G=0%vR~*uAxho+9iQx#}7R&!Bp6cwQ{6+YQN=VB=_lS4OBQK z-2M5&b(y#n`g%vs57)TIqn4X(``X=kqRmeA`1;6;Y6v}w5pib6$U<{kUJHSGB`Sum zCWM!=Ri}6+E5p8Le0(NTls06`dGb=tz@B00z>V&+K@SDREl!H<{{n;6Cz<<06xFX!azFF#Mz+HrZ&dcYv}V|g`8 z>BfpOw>_`)QL5qLJSrAC(X%1tHc~1bD`hJ5bw|=X?o`r#%YG9gwR=i`64#ZA4ZD>7 zYVVy33S1iMTp34_`lLfkqeQM7>7YKDk}=b!giP;XuLW27U{vEHOvv6>Q`Kkb_g=KK z@S%IZT9{g^IW;8MzesPhXe9C?egmwcD#n*@x^EMC7lTIS)>0I@CS($p*I>)EZA(y9xJ&x!@Gc)d< z@9e!qOE^TOlbCp@M2Iuf-*IP(3U|~QM3B2mF13b!Owr;9wtK|1?`z|#&stmw8|%49 zlMd|Sa4d&b^xKhwrjzYadQ^gWsiV#B-)G9Mf9T`9crGX$D}B_4<;l#o^K+h1GjAdvbYoW8&@#mch=JtwS9VnUV4HDH5Nx9s?GH;{VG3kBwes8Sl@bi@GNiVR04ir@)%#{hT(`B{a zx`Lcirq8rZDLx7A%XCkuPn#Vyix%NEgjPzY7MJD4B59=_z~78OXO#IoP}Y7<$RJ-_u~W>vI{uz*`%>@iU(b zB|;X%U~-n6xb%my8{OTbo9pr`1-w1)FD+2uX{VDMM1z-=rR^G9 zq@wRgPrM*JM1SYdVQjDTqDerBBn-ZVEUT{DbmmP>ulv+dv7Rj`)1uU<$ytkQCENYL zWYVr9pv}TdH6`iDb4JZVe$$V2(2k4wB?Up(Vo$$JzH}_UBsA6lGLheR#zc-McD1!A(B? zGEYl)%>~cJa@pr(V#?UK^ukM4>sVbr`7)Z$^<<6ZC2gx{=8I0}j$2^InoIMz2jib{ zPDj~BygXg(E>5TRSu2(&ny9clu6x~$d%XJNiSIGN4981yXwSLg71~Pf5$BGbb(@`W zv9rv1P@+ebKN(cO_(RUDIne*w7Z$z;=v~2QZI`>woZZus5%;A-o8o02HekSEv2*5G z$M`pfj-tIU3KdL4?mjQf=C;F6+nLqsF;Dl)p(|--L=|lo%MSYp8}EF7Mzl1J+w^o= zKw=G_gyqXosAco4ee&_PiM~0-}rVfGiwzce-@V} zn41^NN^zGfNWc635^Z6*-xzn;yW<(Rw3l4h2WDM&1!hLh&{Q(3{q#-QoDwa_6PMmB+n3bMB)4?dWXo`?GdcdBvT~H@NyIN>+wAQFBeSIX6Z3 z+gUrTK1}AeU3n=ZaR;-amg!kt$6GV}Bp4sssvG=Fe(>??U`m|eg0Gfed26{QmOsAb z*$&P9DPc@?YQBnO3LtCMEIMK$kvD=jXeAUZoloPMYx3V1NDlpwn|4>eK)q1$-j7-8 z1OYYn2sSPQ_4ThR_0Iw#;&kqYQOrr}kzY{mxjHWYe68rS+5y43)RM=a=5*V~F6X}I zr{6NLFU%0*K)lmP+Y)Kxg?DE4i?%%s&RJ)w6pFQ(Rfbsd1 z`=Wcs-1+$#f0j}QqU&;O)A_K77O$z4yobl=-^M-)4k~dh6Zr6|y(F1E7aQMjN^>j( z@4kMeFKxN>%AEhK6Z?(Tc)G@H=gpi=kt=G&FC{qTWpq8Kxi3V_oP~$LTM7X3$w)u* z;VPsYVF4SGNI&?aSG?3n??`aa)atO5gp9=QgOyeQ1_ZW#w(E*MvW3@o*Wk7D&GEm= z&9w~xd!*po4pZYrUvt)lbSH~pFLm>hI`-w+XoH1o$D3F z04nQ49u)^Op}m%z#;%A&LL~)6qitb!035)_7Et}tiw7w~1A0eYxCv~NI4eg_x^$Y>yq2c$j{{`BA?I1hk4K%_DQ zza3!u_qzX{Ds$PEN;m|8(ckFb_4wJ&zzGHTFcah&SUwB^LqOAGksL#yAU(J1AcGO1 z&LCQkZE%5=Enksz{|P-miNAk#{Gm$RA842d@d61ENn03!hEd|UD~N9ah(v3my(uEm zYUnDm{TMa0E4maXiR7MWPKsklu8xjEPhci6?x;)f2cibNd(#W10I#-`C;5#LGf##m zW5jS_c2exaa$$He))Z`5UW^c?l;R_+5Jn6$fO$e8hGE1wlBFQ^7%^VBN+kc;|6X)H z8eoesKjrL4Uqp{#K4X*-x$iMwe$yCWXwiM>4NL__74ehGFQ1aWa||pA%fc5owcwL5 zDH;}Gb(j;#!hx_BOo|30Z~%^nIDsR45OE3$*a2nO7#$B?f*oN}djPD77dJ^Q0VpO~ z6G?3V=qDBvF5i z4pHT|{+fw*e)ZRkg<(?L|E#}%XWv1@zJ$NA@9riUk&L*3BofX*5wH&WCzfyOpc#oV z#5|%naSBu+h47b69Hj)+5)~N(A3m8Q znPHIjGcK9oHeEP%6w+JGW)RUAc7$G|!Z3fNL($2w8uS?P#5ITmF5ZwqTRuGiJwax< zMQ9H^u+fOR32Q_(y&e^%bUtmO%zM0)2w%e~@^@8z6)72*il+pWp=~ zS^+Wx(gRKsfdB=ds6+v3unaH5w15_{0K%51cY>Y39++$)GXDb~aN-xr0fjBp0Xm51 zw?`6g>zi!%xdCs$qCo5y!qD%i2YyF+^c$ELdW+21nGiR8^hXq02lj?ikP%!Cy(ZfI z$U?WnhEOFUI~iIcp8N;i<;O?V2yzYtL8n0!qyk(0&WmsJ%PN7 z0AK}Pfq%voKj8ll?fn^Re}4W;d-uT5@7C%eievJ3-FYvM) z9OrC|e&@*QWV~8XVN^^LCn_sol+pCmMY+x{`dnK@d_ow3pXhUmY!$c1KDyZh(t8jn z(1kt3=&$ozu%ct5kD@Ub{6V^*({=_NT%qU;jE2-{Ni# zwxt}?O92{fH?3}oFuFoww~Ga9PbAfU(oXg>J{SHmw!NWSiA$|j@KF&nK`E{C9wt&{ z(2-@>>=c2@VK}*XzdECwj+e%x@y03}FM~yT3EyJh9aJe{9|=}I!94DUIbm%K0nDPu zM8aM3tW`OqDrAegU1M~4(%tkP^_dsvaWjwXeSf|)TBn^Q$xRkZ?~@#s!!TfZeW5GJ zE}<{9W?$1~{o^{eB@XRbk&$WG9cdRH?R8=Mc6;inu=$kLCXVfUN^#>6TJr(rzGlba z*G>y;C2?s9qJyHNgV9B&uT(F&wutX>X;1Vq(0;h2R;+`&EVVp564{3f zy3l`rG+JW(G{4>jdSu1wN0U}OQX(O;jsc7&JqX|WLkLIa1?VsanIHbZ1I+TDc`78j zuv_s*iayL%FQix`;Wp4Ab2J92fkoEGukb!(F4?ms4GT8mO=QfG;E(nHkvINLH{=cv zDT2U1OQZ#SNEvAiZXyymkP-9O5=k1601HSn!uAixA2m4kw-RaoN@Ddt+xT}9c5YE8!8-J0YnO8e&_D}YR2$GoD3Yi5VP}9J$ta{JQu|v_!f)-r zL${E<4rw+ZgQmBrd|(ERZME+PJkS@U{UfCP0m{V0&X{mC)pu^+fyRl<$>HRZuvHgym_m$YWDKHh zKPB?#`j1KFP@li+aCDWi7b_uf!kkJn-QohjSc#x!h0S?B&Z@C;3r0U*w*$=5lnL|0 zy%L?;9DP}0eL>PY+ydK|qF7lK!?RCxB@^US8Zs^gyyZH?A!KjBUQX@RH{_@?sP0>n z_$e&j>~ghXe++Kuww0r~;c2gP3*CAGU3s;rSHW)h1zUzZfr2zEYiG-KjOxo-mJK&S z`~dGroL)@#$W_r2!WSpu$L+JZ&J#OLlMXr8i{y1izCK3a?@*o0H3>~zXj9KAjm+!h zU9{f&$oazhgNnlhw4#B}&X(%yDUCWynqA52*o(2$NppQ+xn~v&gnOqg+3vdVwMQ$t z4d`pf^mce>(a6pT>mJe*IG3@yARkn5PsOSh243N^JqJ`aFEIKVOEg@L&RuY#CESfC zbl=YDv$;z?E?2^MIw-o=V&4r5C7FDMa2Gk;BgQbrg}pcWOPtavS_TOfmX|Trtv-cC z0XHIU4JuJx@Gv{a@zLd~MMG&ziA1x&`n41$GEqGN@YK6sGpoWjVIkc1nyk@0|0iX( zbyvQN$7e1YxOlxD)(a5H`#569ZJ@XrN&AQkr8pWX!Q7dYXdistK4xCT;F?GO@Mgy8 zOT}v?```0~)8td^ppQ(b(#U6E@le9&Ub#le(fN>hu=km5gbRPV1GgSS&(MW|GV#;~ zCbf;;v_jtkp1J}Shj+HOlV!01f>Hrlm)YHGUeociN3XMAbrLT^joeX*jmx23O>pENo4^%`N0=*9_6IS zT;4p-l&x*9FO-#CuY3Y^!(K7QA9!b#?WMf*xzT-1n#qs3%`;!yT=qP6WFFVcdgz%g zC7Y0br0P50a5q;WKD^!Dfr@9+S54!~rLdi`rI96M==mnqr@rPk5tVKiLcDoKle3%e zn{zrp^}IHzUD}ofemMJ;@%lgQF82@@pgw0>n^LS_<5}$x^^ASN%H-9ZAd8yj8~slb z@IxM{jvo^)syR%uTQF4HvpA)erS6X!(O;VNXtZ&|H@aRu@lb{~gJuC$?RYcy>oSgj*#~IARgn4#(~8R>IeUMGW*-Q7-UzljeJ0xvVn}WyCCgC zVTx)peo9&(L|IMRvTgxsZ6W~*S>6Noi6Z|T$bKX|5Q4(DUIQyi(z;LD&k|uA_<2r3 zDx*PqCGCbuAZ)z-1VF?Xh5T1>Lj!<7FN>V7kZOpZA{DD4NsJz81QHQyFCcAm5)lqL zk0Mc&07%duK}r%C0FXvb@{kjvGrjbZ^nA#>ugE(YHhP5OU zMQI}xmV%_E2STAGNHRST4kK)fP$v;88>LBmquh M26;o`2tok-7p