8237 Commits (89e66ffd37893100a7bebbd6e4d23d2cc9d901b1)
 

Author SHA1 Message Date
Kevin Backhouse 093dca0281
Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-m479-7frc-gqqg 4 years ago
Kevin Backhouse 0208b508a0
Merge pull request #1773 from kevinbackhouse/fuzz
Add fuzz target
4 years ago
Kevin Backhouse fa52d7e2cb Better way to print the error message. 4 years ago
Kevin Backhouse 6685b8db4a Print message to stderr when EXIV2_DEBUG_MESSAGES is enabled. 4 years ago
Kevin Backhouse f724f4e2fc Don't crash if s > size. 4 years ago
Kevin Backhouse c310e2c41f Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-mv9g-fxh2-m49m 4 years ago
Kevin Backhouse 5d164005d4
Merge pull request #1771 from kevinbackhouse/codeql-unsafe-vector-access
CodeQL query to detect unsafe uses of std::vector::operator[]
4 years ago
Kevin Backhouse 86e7dbd3c1
Merge pull request #1775 from kevinbackhouse/MultToLargerType
Fix code scanning alert: "Multiplication result converted to larger type"
4 years ago
postscript-dev e821404d69
Merge branch 'update_sony2fp_tags' of https://github.com/postscript-dev/exiv2 into update_sony2fp_tags 4 years ago
postscript-dev 4a21b45e60
Update Sony2Fp makernote tag selector function
In C++20, std::string has a starts_with() function. Add a startsWith()
function now, which can be replaced when the project moves to C++20.

Suggested in https://github.com/Exiv2/exiv2/pull/1777
4 years ago
Peter 670c89b2bd
Merge branch 'Exiv2:main' into update_sony2fp_tags 4 years ago
postscript-dev 4ac8ac9ba0
Update Sony2Fp makernote tags (tag 9402)
Changes:
+ Add pretty printing for all tags
+ Add camera selector, to prevent incompatible models using tags
+ Update testing with new values

Source: Exiftool (https://exiftool.org/TagNames/Sony.html)
4 years ago
Kevin Backhouse e157fd63cb
Add -workers option to use all cores. 4 years ago
Kevin Backhouse 6798be637f
Merge pull request #1774 from Exiv2/mergify/bp/main/pr-1745
fix: avoid processing MOV (quicktime) files when BMFF is enabled (backport #1745)
4 years ago
Kevin Backhouse 7b3dd26c23
Merge pull request #1718 from opengisch/ios
Fix building for ios
4 years ago
Kevin Backhouse 51b5616fc0
Merge pull request #1772 from postscript-dev/add_SonyMisc1_tags
Add SonyMisc1 (Tag 0x9403) makernote tags
4 years ago
Kevin Backhouse b13585a697
Fix code scanning alert: "Multiplication result converted to larger type".
9284b58bfc/samples/Jzon.cpp (L61-L61)
4 years ago
postscript-dev eb22591cea
Fix formatting of sonyMisc1 makernote tags 4 years ago
Christoph Hasse 3e681c6730 fix: avoid processing MOV (quicktime) files when BMFF is enabled
(cherry picked from commit 1b6895927f293855e5bb437ad28f31da2c2cfe54)
4 years ago
Kevin Backhouse 7eef360295
Try with sudo. 4 years ago
Kevin Backhouse b4448fcd52
Fix indentation 4 years ago
Kevin Backhouse f4a0335d79
Add workflow_dispatch for manual trigger 4 years ago
Kevin Backhouse 95397cc17a
Action that runs fuzzer for short amount of time on PRs. 4 years ago
Kevin Backhouse a7602639ea
Add printing and writing to fuzzer. 4 years ago
Kevin Backhouse a3e4efe6b4
Rename fuzz target 4 years ago
Kevin Backhouse bf786f4cc6
Updates to make fuzzing work. 4 years ago
postscript-dev 87e72adba4
Add SonyMisc1 tag group to docs 4 years ago
postscript-dev 5d2d6037c7
Add python test for SonyMisc1 4 years ago
postscript-dev 2b8856dcea
Add SonyMisc1 (Tag 0x9403) makernote tags
Source: Exiftool (https://exiftool.org/TagNames/Sony.html)
4 years ago
Kevin Backhouse a2854f358a
CodeQL query to detect unsafe uses of std::vector::operator[]. 4 years ago
Kevin Backhouse 9284b58bfc
Merge pull request #1767 from kevinbackhouse/fix-issue-1763
Fix null iterator deref in printCsLensTypeByMetadata
4 years ago
Jeka Pats b2cdf2a535
Add libFuzzer integration + report bug
This commit places the basics for libFuzzer integration with one
fuzzer which fuzzes the readMetadata function. The fuzzer is
located at fuzz/read-metadata.

To add more fuzzers please add them to ./fuzz directory as
described in the README.

Also a memory corruption bug is found using this fuzzer which
might lead to additional bugs after fix is pushed.
4 years ago
Kevin Backhouse 033175e127
Don't deref end iterator. 4 years ago
Kevin Backhouse f8ae9297c7
Regression test for https://github.com/Exiv2/exiv2/issues/1763 4 years ago
Kevin Backhouse c7757d7c08
Merge pull request #1768 from kevinbackhouse/codeql-null-iterator-deref
Add custom CodeQL query for null iterator deref
4 years ago
Kevin Backhouse fb824ac052
Add custom CodeQL query for null iterator deref. 4 years ago
Kevin Backhouse 9b3ed3f956
Merge pull request #1756 from ffontaine/main
add BUILD_WITH_STACK_PROTECTOR option
4 years ago
Andrea Giudiceandrea 43fe7bbb98
Add Exif.Image.PageName tag (#1765)
* Add Exif.Image.PageName tag

* Add trailing punctuation mark to PageName and DocumentName tags description.

* Add XPosition and YPosition TIFF tags
4 years ago
Kevin Backhouse ff00771425 Better bounds checking in Jp2Image::printStructure
(cherry picked from commit 0fcdde80997913dde284ea98f06f9305d06cb160)
4 years ago
Kevin Backhouse e486a7313e Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-583f-w9pm-99r2
(cherry picked from commit 655495847bc39170bc4c06f9727483874fdc9c93)
4 years ago
Kevin Backhouse c2b52119d4 Check that findKey didn't return end(). 4 years ago
Kevin Backhouse 98fb218475 Throw exception if lens info wasn't found. 4 years ago
Kevin Backhouse ab0ce25fe0 Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-h9x9-4f77-336w 4 years ago
Fabrice Fontaine f31c0eba09 add BUILD_WITH_STACK_PROTECTOR option
Add BUILD_WITH_STACK_PROTECTOR to avoid the following build failure with
toolchains that don't support stack-protector:

/home/buildroot/autobuild/instance-3/output-1/host/opt/ext-toolchain/bin/../lib/gcc/mipsel-buildroot-linux-uclibc/9.3.0/../../../../mipsel-buildroot-linux-uclibc/bin/ld: utils.cpp:(.text._ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructIPcEEvT_S7_St20forward_iterator_tag[_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructIPcEEvT_S7_St20forward_iterator_tag]+0xd0): undefined reference to `__stack_chk_fail'

Indeed, support for -fstack-protector-strong can't be detected through
check_cxx_compiler_flag as some toolchains need to link with -lssp to
enable SSP support

Fixes:
 - http://autobuild.buildroot.org/results/ae4635899124c602c70d2b342a76f95c34aa4a3d

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
4 years ago
Kevin Backhouse d30c95d07e fix incorrect loop condition (#1752) 4 years ago
Kevin Backhouse 5ab3f2b0c5 Defensive coding to avoid 0x80000000/0xFFFFFFFF FPE. 4 years ago
Kevin Backhouse 11a26fb0d4 Prevent divide-by-zero crash. 4 years ago
Kevin Backhouse cdc0267afd Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-pvjp-m4f6-q984 4 years ago
Kevin Backhouse 8c4d67ca50 Defensive coding to avoid 0x80000000/0xFFFFFFFF FPE. 4 years ago
Kevin Backhouse 695d22c27a
feat: Codeql analysis (#1747)
* Create codeql-analysis.yml

* Add main branch.

* Update to latest boilerplate.

* Replace schedule with workflow_dispatch, so that it can be triggered manually.

Co-authored-by: Robin Mills <robin@clanmills.com>
4 years ago