From e492285d3adc3a79609963ff7e81f790fb06428f Mon Sep 17 00:00:00 2001 From: Kevin Backhouse Date: Sat, 17 Jul 2021 15:55:36 +0100 Subject: [PATCH] Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-g44w-q3vm-gwjq (cherry picked from commit 756f28197d39c4d2230f2e02ff214cbfd1cd032e) --- test/data/issue_ghsa_g44w_q3vm_gwjq_poc.jpg | Bin 0 -> 347 bytes .../github/test_issue_g44w_q3vm_gwjq.py | 20 ++++++++++++++++++ 2 files changed, 20 insertions(+) create mode 100644 test/data/issue_ghsa_g44w_q3vm_gwjq_poc.jpg create mode 100644 tests/bugfixes/github/test_issue_g44w_q3vm_gwjq.py diff --git a/test/data/issue_ghsa_g44w_q3vm_gwjq_poc.jpg b/test/data/issue_ghsa_g44w_q3vm_gwjq_poc.jpg new file mode 100644 index 0000000000000000000000000000000000000000..039b43d6be73fcf8d60b0f8c9c1c7c64a0bfdfb6 GIT binary patch literal 347 zcmex=JsfeFac1!9Kg z-3+WCnpnUHRJek1_UzeUBSe9`BaGHy_N}HFU>c-?p*@p<1xSI|k3jtJ)SMiJ%o2sn zVueJ7sl~aOIjNNjB^e+o2vF?+sfU8y)CCL-nN^8NsU;Z-AsP9(1;zP!dI~a3<_sK0 Z1_l;}MkYpofcAPYKwPEA@E;T01OO$Mc3J=c literal 0 HcmV?d00001 diff --git a/tests/bugfixes/github/test_issue_g44w_q3vm_gwjq.py b/tests/bugfixes/github/test_issue_g44w_q3vm_gwjq.py new file mode 100644 index 00000000..9a44a925 --- /dev/null +++ b/tests/bugfixes/github/test_issue_g44w_q3vm_gwjq.py @@ -0,0 +1,20 @@ +# -*- coding: utf-8 -*- + +from system_tests import CaseMeta, CopyTmpFiles, path, check_no_ASAN_UBSAN_errors + +class ImagePrintIFDStructureZeroCountAssert(metaclass=CaseMeta): + """ + Regression test for the bug described in: + https://github.com/Exiv2/exiv2/security/advisories/GHSA-g44w-q3vm-gwjq + """ + url = "https://github.com/Exiv2/exiv2/security/advisories/GHSA-g44w-q3vm-gwjq" + + filename = path("$data_path/issue_ghsa_g44w_q3vm_gwjq_poc.jpg") + commands = ["$exiv2 -p R $filename"] + stderr = ["""invalid type in tiff structure0 +Exiv2 exception in print action for file $filename: +$kerInvalidTypeValue +"""] + retval = [1] + + compare_stdout = check_no_ASAN_UBSAN_errors