74 Commits (2e14d96bcd55e94e47abdf25a141bfc162331a49)

Author SHA1 Message Date
Robin Mills 2e14d96bcd Move test to github (from redmine) 6 years ago
sat3ll 2beefab719 Add Tamron SP 70-300mm f/4-5.6 Di VC USD (Model: A030) (Nikon Mount)
(cherry picked from commit 1640ac8d0ca8bbb975f7a986bf0537545423fffc)
6 years ago
clanmills b1ed1bf246 fix743_NikonSigmaArtLens 6 years ago
Kevin Backhouse b35c43e7c2 Remove call to atol, which might read off the end of the buffer. (#870) 6 years ago
Kevin Backhouse 9092b422e6 Prevent out-of-bounds read. (#868) 6 years ago
Kevin Backhouse 6068df4c01 Add better bounds checking in PngImage::printStructure(). (#862) 6 years ago
Kevin Backhouse 109d5df7ab Check bounds of jpg_img_off and jpg_img_len. (#858) 6 years ago
Kevin Backhouse 1c1436e94e Add bounds check of resourceSize. (#856) 6 years ago
Kevin Backhouse 80cd0d2990 Add bounds check on allocation size. (#854) 6 years ago
Kevin Backhouse fe538e9438 Check bounds in XMP SDK (#852)
* Check bounds of month and day.

* Add some more bounds checks.

* Fix test failure in clang.
6 years ago
Kevin Backhouse 81ae213c71 Check bounds of allocation size. (#848) 6 years ago
Kevin Backhouse 7798ae2557 Throw an exception if the data location is invalid. (#842) 6 years ago
Kevin Backhouse 8dc87a1214 Add bounds check. (#840) 6 years ago
Kevin Backhouse d3e69f6d2c Add bounds check on allocation size. 6 years ago
Kevin Backhouse c0ecc2ae36 Avoid integer overflow. 6 years ago
D4N d20a0a7b57 Update tests/bugfixes/github/test_issue_791.py
Co-Authored-By: kevinbackhouse <kev@semmle.com>
6 years ago
Kevin Backhouse caa4e6745a Avoid negative integer overflow when `filesize < io_->tell()`.
This fixes #791.
6 years ago
clanmills db870755b9 fix #818. Restore 0.25 behaviour of `$ exiv2 -g image ...` to apply grep to keys. 6 years ago
Kevin Backhouse 8cd95e2218 Avoid negative integer overflow when `chunkLength == 0`.
This fixes #789.
6 years ago
Kevin Backhouse 6fa2e31206 Avoid negative integer overflow when `iccOffset > chunkLength`.
This fixes #790.
6 years ago
D4N adfc01f2e0 Update tests/bugfixes/github/test_issue_742.py
Co-Authored-By: piponazo <piponazo@gmail.com>
(cherry picked from commit 39d8904696338d5bd4a9c7e9a96a798a791d0973)
6 years ago
Luis Diaz Mas f33d8daaa0 Add regression test for #742
(cherry picked from commit 885dd2a7437b946c975f2a37c9ccaecc1b91fc95)
6 years ago
Dan Čermák 7bd929de31
[tests] Add regression test for #756 6 years ago
Dan Čermák a557c7f477
[tests] Add regression test for second bug from #590 6 years ago
Luis Díaz Más dc04cc92eb Add test reproducer for #561 7 years ago
Luis Diaz Mas 9a84d4b64f Skip python tests using -pR 7 years ago
Luis Diaz Mas b07c480a0a Add regression test for #511 7 years ago
Luis Diaz Mas b6bc4262c4 Add regression test for #426 7 years ago
Luis Díaz Más 274b65a671 Add reproducer for #460 7 years ago
Luis Díaz Más 3f97960a1c Add reproducer for #457 7 years ago
Dan Čermák f6d775b400 [testsuite] Add reproducers for #263
This issue got resolved by #180 and #461.
7 years ago
Dan Čermák d224f897b0 [testsuite] Add reproducer for #216
The bug got resolved by PR #461 (slices).
7 years ago
Dan Čermák eeb520bf39 [testsuite] Add reproducer for second bug from #159
The bug described in the issue got resolved by PR #461 (slices).
7 years ago
Dan Čermák 1af8e2875e [testsuite] Add reproducers for CVE-2017-17724 & #209, #211 7 years ago
Roberto C. Sánchez c03f73268f Prevent SIGABRT on excessive subBox length in jp2image.cpp
This fixes CVE-2018-9145
7 years ago
Dan Čermák 19bb57ff25 Add reproducer for #262 to the test suite 7 years ago
Dan Čermák 75415693d8 [testsuite] Update testsuite after printStructure deletion 7 years ago
Luis Díaz Más 7d32da890b Add remaining pocs for the issue 428 and adapt the regression test 7 years ago
Luis Díaz Más f5b40f3e82 Fix more issues in PngChunk::readRawProfile 7 years ago
Luis Díaz Más a6a1c31140 Add integration test to reproduce the issue 7 years ago
Robin Mills 74bc0e0535 Changes for cross-platform getopt 7 years ago
Dan Čermák dadd1d19f9 Add reproducer for #400 to the test suite 7 years ago
Dan Čermák e67910a669 [tests] Change name of test for #365 and #366
Issues got a CVE assigned
7 years ago
Dan Čermák f522cbf460 [testsuite] Add reproducer for #378/CVE-2018-14046 to the testsuite 7 years ago
Dan Čermák b517f2e13b Add regression test for #366 to the testsuite 7 years ago
Dan Čermák 9b08354aca Add reproducer for #365 to the testsuite 7 years ago
Dan Čermák 7e1cd7d1b6 [testsuite] Fix name of regression test #283
issue got a CVE assigned
7 years ago
Dan Čermák 23e29e9527 [testsuite] Use system_tests.path() in some test cases 7 years ago
Luis Diaz Mas 8eca055058 Add POC + regression test.
Note that we override here the method check_no_ASAN_UBSAN_errors to also
analyze the last two lines of got_stderr.
7 years ago
Luis Diaz Mas 2fb00c8a16 Analyze minimum needed number of null separators in PngChunk::parseTXTChunk
This commit fixes the heap-buffer-overflow in PngChunk::parseTXTChunk.

According to the specification:
http://www.libpng.org/pub/png/spec/1.2/PNG-Chunks.html

There must be 2 null separators when we start to analyze the language tag.
7 years ago