5549 Commits (b51b6fc52da6005fe7a6095ed85810d41cdcf9db)
 

Author SHA1 Message Date
Dan Čermák a15f090f81 Modified test suite so that case sensitive keys are possible 7 years ago
Dan Čermák efe2ccdcb6 Replaced all hardcoded error codes with ker... constants 7 years ago
Dan Čermák d897997b29 Force error code usage to construct a Exiv2::BasicError
changed parameter code_'s type from int to ErrorCode => requires the
usage of the enum constants
7 years ago
Dan Čermák d3c3c036b8 Incorporated error codes into errList 7 years ago
Dan Čermák b80fa1b4ed Added error codes from src/error.cpp into an enumeration 7 years ago
D4N efee9a2b58
Merge pull request #205 from D4N/CVE-2017-1000127_reproducer
Added reproducer for CVE-2017-1000127
7 years ago
Dan Čermák ead7f309b0 Added reproducer for CVE-2017-1000127 7 years ago
Robin Mills 55001c8ddf
Merge pull request #222 from Exiv2/fix-220
Fix 220
7 years ago
clanmills 7d837d9c86 Changes to test/Makefile following Dan's review. 7 years ago
D4N 9cddfa514d
Merge pull request #207 from D4N/fix_cve_2018_4868
Fix CVE-2018-4868
7 years ago
Dan Čermák 72de0f96f3 Added reproducer for CVE-2018-4868 to the test suite 7 years ago
Dan Čermák fcb4257051 Add check for DataBuf.size_ in Jp2Image::readMetadata()
When parsing a subBox that is a ColorHeader, a length is extracted
from the input file and fed directly into DataBuf() (which calls
malloc). A crafted input file can provide arbitrarily (up to
max(uint32_t)-8) large values and result in excessive memory
allocation.

This commit adds a check for the new size of DataBuf so that it is not
larger than the remaining size of the file.

This fixes #202 aka CVE-2018-4868
7 years ago
Robin Mills 7f56236bb8
Merge pull request #212 from Kicer86/master
fix for crash in bigtiff (issue #208)
7 years ago
Robin Mills a1f1989cb5
Merge branch 'master' into master 7 years ago
clanmills 06e3570f10 Trivial Documentation Update 7 years ago
clanmills 552247c3d0 Update test/Makefile not to exit on error 7 years ago
clanmills c082537967 Fix #220 https://github.com/Exiv2/exiv2/issues/220 7 years ago
D4N 5f360a99af
Merge pull request #217 from D4N/fix_187
Fix for #187
8 years ago
Dan Čermák 80c4d95171 Add regression test for CVE 2017-17669 8 years ago
Dan Čermák e0ab5aaa87 Add error 14 text as a variable to the test suite 8 years ago
Dan Čermák 4429b962e1 Fix out of bounds read in src/pngchunk_int.cpp by @brianmay
- consider that key is advanced by 8 bytes if stripHeader is true
  => length is reduced by same amount
  Fixed by adding offset to the check in the loop
- Rewrote loop so that keysize is checked before the next
  iteration (preventing an out of bounds read)
8 years ago
Robin Mills df4113b765 changes to MemIo::reserve() for #200 (#213)
* changes to MemIo::reserve() for #200

* Changes following review by Dan (thanks, Dan).
8 years ago
Michał Walenciak d219e61586 be more error prone 8 years ago
Michał Walenciak 24348e85ca checks for valid reads 8 years ago
Michał Walenciak 421c6d6723 improvements for issue #208 8 years ago
D4N b7d76da9d5
Merge pull request #203 from Exiv2/fix_201
Fix #201
8 years ago
Michał Walenciak dba9fba725 test for issue #208 8 years ago
Michał Walenciak 1647908e00 fix for crash in bigtiff (issue #208) 8 years ago
Dan Čermák 9900f523fe Added reproducer for #201 to the test suite 8 years ago
Robin Mills 7d42da94d0 Removed wrong ExifData::const_iterator that shadowed the correct one 8 years ago
D4N 4be065595e
Merge pull request #155 from D4N/python_test_suite_wip
[WIP][RFC] Python test suite
8 years ago
Dan Čermák 27d7a5d968 Added new test suite to travis & Appveyor 8 years ago
Dan Čermák 5267123186 Ported tiff-test.sh 8 years ago
Dan Čermák 085c9715fc Added some example test cases to the new test suite 8 years ago
Dan Čermák 2e745b0b26 Added replacement for the current regression test suite 8 years ago
Luis Díaz Más 00f32316b2 Add missing header 8 years ago
Luis Díaz Más 22527f0927 Add reproducer for issue #188 8 years ago
Luis Díaz Más 14ff034fb4 Catch std::overflow_error exception in Print::run 8 years ago
Luis Diaz Mas d09c4bb7cd Fix arithmetic operation overflow 8 years ago
Luis Diaz Mas d1b4df5533 Show the Appveyor badge corresponding to the master branch 8 years ago
D4N 2c1d5288c2
Merge pull request #198 from Exiv2/fix_errno_failure_Fedora
Reset errno to 0 before unit test probing strerror(errno)
8 years ago
Dan Čermák 1de633ad37 Reset errno to 0 before unit test probing strerror(errno)
errno can be set to a non-zero value from a previously failed system
call, it is not reset by successful ones
=> have to do that manually or the unit test fails because it detects
   an "outdated" error message
8 years ago
D4N eec3f9a0c5
Merge pull request #194 from Exiv2/integer_overflow_checks
Add Integer addition overflow checks
8 years ago
Luis Díaz Más a1023c39ab Add safe_op.hpp to LIBEXIV2_PRIVATE_HDR (to be shown in IDEs) 8 years ago
Dan Čermák 7c00e9128d Fix compilation error with gcc < 5
- overflow builtins were added with gcc 5.0
8 years ago
Dan Čermák 3b3283e37d Added unit tests for new overflow checking addition functions 8 years ago
Dan Čermák ca7c699aa1 Added overflow safe addition function 8 years ago
Luis Díaz Más 39377b8c02 Fix strError tests on Mac 8 years ago
Luis Díaz Más 9b463708a4 Test runner return the gtest return value 8 years ago
Luis Díaz Más 3cf3635ae2 [travis] Fix unit tests on Mac.
- Use libc++ instead of libstdc++ in the conan profile
- Add CMAKE_OPTIONS for Mac
8 years ago