Analyze minimum needed number of null separators in PngChunk::parseTXTChunk

This commit fixes the heap-buffer-overflow in PngChunk::parseTXTChunk.

According to the specification:
http://www.libpng.org/pub/png/spec/1.2/PNG-Chunks.html

There must be 2 null separators when we start to analyze the language tag.
This commit is contained in:
Luis Diaz Mas
2018-05-19 19:39:30 +02:00
committed by Luis Díaz Más
parent 234e5794f6
commit 2fb00c8a16
2 changed files with 6 additions and 1 deletions
+1 -1
View File
@@ -13,5 +13,5 @@ class TestCvePoC(metaclass=system_tests.CaseMeta):
stdout = [""]
stderr = [
"""$exception_in_extract """ + filename + """:
$kerFailedToReadImageData
$kerCorruptedMetadata
"""]