diff --git a/test/data/issue_378_1-poc-heapoverflow b/test/data/issue_378_1-poc-heapoverflow new file mode 100644 index 00000000..01c67ca8 Binary files /dev/null and b/test/data/issue_378_1-poc-heapoverflow differ diff --git a/tests/bugfixes/github/test_CVE_2018_2018_14046.py b/tests/bugfixes/github/test_CVE_2018_2018_14046.py new file mode 100644 index 00000000..760d32e0 --- /dev/null +++ b/tests/bugfixes/github/test_CVE_2018_2018_14046.py @@ -0,0 +1,19 @@ +# -*- coding: utf-8 -*- + +import system_tests + + +class WebpDecodeChunksOutOfBoundsRead(metaclass=system_tests.CaseMeta): + + url = "https://github.com/Exiv2/exiv2/issues/378" + + filename = "$data_path/issue_378_1-poc-heapoverflow" + + commands = ["$exiv2 -pp $filename"] + stdout = [""] + stderr = [ + """$exiv2_exception_message $filename: +$kerCorruptedMetadata +""" + ] + retval = [1]