xymp
/
exiv2
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5,276 Commits
2 Branches
0 Tags
119 MiB
v0.27.3
main
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'c640ea8608'
${ noResults }
Commit Graph

5276 Commits (c640ea860891d9daa3b275539e328d08e3d421fe)
 

Author SHA1 Message Date
Dan Čermák c640ea8608 Added reproducer for #144 / CVE-2017-9953 to the testsuite 8 years ago
Luis Díaz Más a59900b53a
Merge pull request #136 from piponazo/cmakeDevOptions 
Cmake dev options
 8 years ago
Luis Diaz Mas 78ac8ebf9e Add extra flags to detect more issues 8 years ago
Luis Diaz Mas e52b3e77cf Remove definition -DWIN32_LEAN_AND_MEAN that is already present in config.h 8 years ago
Luis Díaz Más 3e94c270cb Do not treat CMAKE_C_FLAGS* variables. We do not have C code in the project 8 years ago
Luis Díaz Más 4ad4323685 Add new CMake options to use compiler flags to detect issues in the code (Gcc, Clang & MSVC) 8 years ago
D4N 9aed21c077
Merge pull request #133 from D4N/CVE-2017-14863_reproducer 
Added reproducer for #132 / CVE-2017-14863
 8 years ago
Dan Čermák ecfbd58695 Added test output to bugfixes-test.out 8 years ago
Dan Čermák ec55f74f68 Added reproducer for CVE-2017-14863 / #132 to the test suite 8 years ago
D4N f6af59e054
Merge pull request #135 from D4N/CVE-2017-14865_reproducer 
Added reproducer for #134 / CVE-2017-14865
 8 years ago
Dan Čermák 673e391797 Addapted bugfixes-test.out 8 years ago
Dan Čermák f7a403d8d9 Added reproducer for CVE-2017-14865 / #134 to the test suite 8 years ago
D4N 8a04b7683c
Merge pull request #130 from D4N/reproducer-for-54 
Added reproducer for #54 / CVE-2017-11592 to the test suite
 8 years ago
Dan Čermák f4f05001e9 Updated bugfixes-test.out 8 years ago
Dan Čermák 35cb91a9f3 Added reproducer for #54 / CVE-2017-11592 to the test suite 8 years ago
Dan Čermák 091d4edbdb Corrected bugfix test number #54 to #56 8 years ago
D4N 1c3f0dab5e
Merge pull request #128 from D4N/master 
Added reproducer for #76 /  CVE-2017-14857 to the testsuite
 8 years ago
Dan Čermák 72b75ddfe4 Updated bugfixes-test.out 8 years ago
Dan Čermák 87e0c6ec53 Added reproducer for #76 to the testsuite 8 years ago
Luis Díaz Más 319ccdbc71 Merge pull request #119 from a17r/ccache 
Add build switch to disable auto ccache
 8 years ago
Andreas Sturmlechner 7f515e6da7
Add build switch to enable auto ccache 
Make usage of ccache by build system opt-in.
 8 years ago
Luis Díaz Más 5e8a76667a Merge pull request #116 from piponazo/UnitTests 
Add Unit tests with Google Test
 8 years ago
Luis Diaz Mas 2e8376dccc Do not use Gtest imported target (Not available in minimum CMake version required) 8 years ago
Luis Díaz Más 8582c564e0 (AppVeyor) Move to project directory 8 years ago
Luis Díaz Más 142a9a9178 (AppVeyor) Disable unit tests until we found out the problem 8 years ago
Luis Díaz Más bf6670abb0 (AppVeyor) Install ninja & Use it as the CMake generator (speed up builds) 8 years ago
Luis Díaz Más f9fab45163 (AppVeyor) Trying to run unit tests properly from windows 8 years ago
Pix4d 3f53588de7 (Travis) Should run tests on mac 8 years ago
Luis Díaz Más a721ab343d (travis) Use 2 threads in the compilation 8 years ago
Luis Díaz Más b78aa69455 (travis) Do not install things bring with conan already 8 years ago
Luis Díaz Más 9482763061 Run unit tests in travis-ci and appveyor 8 years ago
Luis Díaz Más 752e7a6bea Add simple unit tests for DataBuf 8 years ago
Luis Díaz Más 72cf9166fe Add simple tests for exifTime 8 years ago
Luis Díaz Más 2bad771834 (CMake) Add GTEST_LINKED_AS_SHARED_LIBRARY definition 8 years ago
Luis Díaz Más 26189ad287 (CMake) Add a new CMake option to enable the new Unit Tests 8 years ago
Luis Díaz Más 89629f0056 (CMake) Bring GTest and GMock via conan 8 years ago
Luis Díaz Más cd38a570fa (CMake) Same output directories for binaries and libraries on all the platforms 8 years ago
Luis Díaz Más 00f5b2ab6d Merge pull request #114 from D4N/readme_improvements 
Adapted README.md to better render on Github
 8 years ago
Dan Čermák 942044e7d9 Adapted README.md to better render on github 8 years ago
Luis Díaz Más 38584d938b Merge pull request #118 from a17r/exiv2command 
Fix build with EXIV2_BUILD_EXIV2_COMMAND=OFF
 8 years ago
Luis Díaz Más 6c01726404 Merge branch 'master' into exiv2command 8 years ago
Andreas Sturmlechner 57883ee664
Fix build with EXIV2_BUILD_EXIV2_COMMAND=OFF 8 years ago
Luis Díaz Más 269370863e Merge pull request #117 from a17r/pobuildswitch 
Fix remaining occurrence of EXIV2_ENABLE_BUILD_PO
 8 years ago
Andreas Sturmlechner 3f39c23f2c
Fix remaining occurrence of EXIV2_ENABLE_BUILD_PO 8 years ago
D4N 549cac47af Merge pull request #110 from D4N/fix_CVE-2017-14864 
Fix for CVE-2017-14864, CVE-2017-14862 and CVE-2017-14859
 8 years ago
Dan Čermák de298b8e5d Added reproducers for #73, #74 and #75 to the test suite 8 years ago
Dan Čermák c686843e20 Added exception throw on Value pointer being null 
v can be null if the typeId is invalid => throw an exception notifying
the user that his file is corrupted instead of the assertion
 8 years ago
Dan Čermák 75940da0a6 Added check for overflows in calculation of size 8 years ago
Dan Čermák 8a586c74bb Fix for CVE-2017-14864, CVE-2017-14862 and CVE-2017-14859 
The invalid memory dereference in
Exiv2::getULong()/Exiv2::StringValueBase::read()/Exiv2::DataValue::read()
is caused further up the call-stack, by
v->read(pData, size, byteOrder) in TiffReader::readTiffEntry()
passing an invalid pData pointer (pData points outside of the Tiff
file). pData can be set out of bounds in the (size > 4) branch where
baseOffset() and offset are added to pData_ without checking whether
the result is still in the file. As offset comes from an untrusted
source, an attacker can craft an arbitrarily large offset into the
file.

This commit adds a check into the problematic branch, whether the
result of the addition would be out of bounds of the Tiff
file. Furthermore the whole operation is checked for possible
overflows.
 8 years ago
Dan Čermák 6c1ba331b9 Added arithmetic operation overflow error 8 years ago