third_party/exiv2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-7569-phvm-vwc2

Browse Source 
(cherry picked from commit f0ff11f044b2c8ddf4792415beb91fd815c633a1)
This commit is contained in:
Kevin Backhouse 2021-04-23 11:43:59 +01:00 committed by mergify-bot
parent b0c16eb89d
commit 766111f48d
3 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
test/data/issue_ghsa_7569_phvm_vwc2_poc.exv Normal file
View File

Binary file not shown.

BIN
test/data/issue_ghsa_7569_phvm_vwc2_poc.jp2 Normal file
View File

Binary file not shown.

24
tests/bugfixes/github/test_issue_ghsa_7569_phvm_vwc2.py Normal file
View File

@ -0,0 +1,24 @@
# -*- coding: utf-8 -*-
from system_tests import CaseMeta, path
class Jp2ImageDoWriteMetadataOutOfBoundsRead(metaclass=CaseMeta):
"""
Regression test for the bug described in:
https://github.com/Exiv2/exiv2/security/advisories/GHSA-7569-phvm-vwc2
"""
url = "https://github.com/Exiv2/exiv2/security/advisories/GHSA-7569-phvm-vwc2"
filename1 = path("$data_path/issue_ghsa_7569_phvm_vwc2_poc.jp2")
filename2 = path("$data_path/issue_ghsa_7569_phvm_vwc2_poc.exv")
commands = ["$exiv2 in $filename1"]
stdout = [""]
stderr = [
"""Warning: Directory Thumbnail, entry 0x1000 has unknown Exif (TIFF) type 28928; setting type size 1.
Error: Directory Thumbnail: IFD entry 1 lies outside of the data buffer.
Warning: Directory Thumbnail, entry 0x1000 has unknown Exif (TIFF) type 28928; setting type size 1.
Error: Offset of directory Thumbnail, entry 0x1000 is out of bounds: Offset = 0x2020506a; truncating the entry
$filename1: Could not write metadata to file: $kerCorruptedMetadata
"""]
retval = [1]