Commit Graph

248 Commits

Author SHA1 Message Date
sat3ll
aef107a9ca
add test case
(cherry picked from commit 4329dfcc177e020eef39fdfc0909187e9470b6b9)
2019-08-28 13:53:12 +02:00
clanmills
93eea3c544 [tests] Add regression test for Tamron 70-200 G1 lens name
(cherry picked from commit e3477fc7714fe0f0b26752b65aedcb497cf5f81f)
2019-08-27 22:12:59 +00:00
Luis Díaz Más
a048325e18 Add regression test for #960 2019-07-15 22:35:38 +02:00
Kevin Backhouse
be875ce50f Add a second test for better code coverage. 2019-07-06 16:09:18 +01:00
Kevin Backhouse
cb7dc5a528 Check for integer overflows in mrwimage.cpp 2019-07-05 15:41:14 +01:00
Robin Mills
ab375fb074 Add support for FocusPosition in Sony RAW files (#906)
* Fix 582 Add support for FocusPosition in Sony RAW files
* Thanks to @boardhead sonyFpCrypt() works correctly. Removed debug code. Fixed typos.
* Update doc/templates/Makefile to process Sony2Fp
* Following review by @boardhead. Renamed sonyFpCrypt() as sonyTagDecipher().
* Fixed writing the tag thanks to @boardhead explaining encipher/decipher.
  Sadly, ArrayCfg/crpyt does not know if he's encrypting/decrypting.
  I've added a sniff in TiffEncoder::visitBinaryArrayEnd to avoid changing the API.
* Added URL to discussion concerning sonyTagCipher()
* make sonyTagCipher() a static function with no external visibility.
2019-06-26 21:36:59 +02:00
Robin Mills
2e14d96bcd Move test to github (from redmine) 2019-06-18 21:29:55 +02:00
Robin Mills
b02c80f7e4 fix646_NikonAF22 2019-06-18 21:29:55 +02:00
sat3ll
2beefab719 Add Tamron SP 70-300mm f/4-5.6 Di VC USD (Model: A030) (Nikon Mount)
(cherry picked from commit 1640ac8d0ca8bbb975f7a986bf0537545423fffc)
2019-05-27 07:35:31 +02:00
clanmills
b1ed1bf246 fix743_NikonSigmaArtLens 2019-05-21 11:30:33 +01:00
Kevin Backhouse
b35c43e7c2 Remove call to atol, which might read off the end of the buffer. (#870) 2019-05-17 12:45:42 +02:00
Kevin Backhouse
9092b422e6 Prevent out-of-bounds read. (#868) 2019-05-17 07:06:56 +02:00
Kevin Backhouse
6068df4c01 Add better bounds checking in PngImage::printStructure(). (#862) 2019-05-17 05:44:28 +02:00
Kevin Backhouse
109d5df7ab Check bounds of jpg_img_off and jpg_img_len. (#858) 2019-05-16 15:30:12 +02:00
Kevin Backhouse
1c1436e94e Add bounds check of resourceSize. (#856) 2019-05-16 11:24:18 +02:00
Kevin Backhouse
80cd0d2990 Add bounds check on allocation size. (#854) 2019-05-16 09:36:26 +02:00
Kevin Backhouse
fe538e9438 Check bounds in XMP SDK (#852)
* Check bounds of month and day.

* Add some more bounds checks.

* Fix test failure in clang.
2019-05-16 07:40:47 +02:00
Kevin Backhouse
81ae213c71 Check bounds of allocation size. (#848) 2019-05-15 13:00:41 +02:00
Kevin Backhouse
7798ae2557 Throw an exception if the data location is invalid. (#842) 2019-05-15 11:12:02 +02:00
Kevin Backhouse
8dc87a1214 Add bounds check. (#840) 2019-05-15 08:58:38 +02:00
Kevin Backhouse
d3e69f6d2c Add bounds check on allocation size. 2019-05-14 17:31:37 +02:00
Kevin Backhouse
c0ecc2ae36 Avoid integer overflow. 2019-05-13 22:46:25 +02:00
D4N
d20a0a7b57 Update tests/bugfixes/github/test_issue_791.py
Co-Authored-By: kevinbackhouse <kev@semmle.com>
2019-05-12 14:15:21 +02:00
Kevin Backhouse
caa4e6745a Avoid negative integer overflow when filesize < io_->tell().
This fixes #791.
2019-05-12 14:15:21 +02:00
clanmills
db870755b9 fix #818. Restore 0.25 behaviour of $ exiv2 -g image ... to apply grep to keys. 2019-05-11 07:35:26 +02:00
Kevin Backhouse
8cd95e2218 Avoid negative integer overflow when chunkLength == 0.
This fixes #789.
2019-05-06 06:27:10 +02:00
Kevin Backhouse
6fa2e31206 Avoid negative integer overflow when iccOffset > chunkLength.
This fixes #790.
2019-05-05 12:21:32 +02:00
D4N
adfc01f2e0 Update tests/bugfixes/github/test_issue_742.py
Co-Authored-By: piponazo <piponazo@gmail.com>
(cherry picked from commit 39d8904696338d5bd4a9c7e9a96a798a791d0973)
2019-04-07 18:06:42 +02:00
Luis Diaz Mas
f33d8daaa0 Add regression test for #742
(cherry picked from commit 885dd2a7437b946c975f2a37c9ccaecc1b91fc95)
2019-04-07 18:06:42 +02:00
Dan Čermák
7bd929de31
[tests] Add regression test for #756 2019-03-25 23:56:57 +01:00
Dan Čermák
a557c7f477
[tests] Add regression test for second bug from #590 2019-02-26 00:09:21 +01:00
Luis Diaz Mas
fce84fdfdf Adapt test after updating nikon lens database 2018-12-23 20:18:44 +01:00
Luis Díaz Más
dc04cc92eb Add test reproducer for #561 2018-11-26 16:39:00 +01:00
Luis Diaz Mas
9a84d4b64f Skip python tests using -pR 2018-11-22 18:19:08 +01:00
Luis Díaz Más
2ea9039879 Adapt fujifilm regression tests 2018-11-07 12:56:23 +01:00
Luis Diaz Mas
b07c480a0a Add regression test for #511 2018-11-06 14:40:36 +01:00
Luis Diaz Mas
b6bc4262c4 Add regression test for #426 2018-11-06 13:17:35 +01:00
Luis Díaz Más
274b65a671 Add reproducer for #460 2018-10-14 11:58:25 +02:00
Luis Díaz Más
3f97960a1c Add reproducer for #457 2018-10-13 11:37:57 +02:00
Dan Čermák
f6d775b400 [testsuite] Add reproducers for #263
This issue got resolved by #180 and #461.
2018-10-12 00:41:46 +02:00
Dan Čermák
d224f897b0 [testsuite] Add reproducer for #216
The bug got resolved by PR #461 (slices).
2018-10-12 00:41:46 +02:00
Dan Čermák
eeb520bf39 [testsuite] Add reproducer for second bug from #159
The bug described in the issue got resolved by PR #461 (slices).
2018-10-12 00:41:46 +02:00
Dan Čermák
1af8e2875e [testsuite] Add reproducers for CVE-2017-17724 & #209, #211 2018-10-11 14:06:16 +02:00
Roberto C. Sánchez
c03f73268f Prevent SIGABRT on excessive subBox length in jp2image.cpp
This fixes CVE-2018-9145
2018-10-10 11:52:39 +02:00
Dan Čermák
19bb57ff25 Add reproducer for #262 to the test suite 2018-09-13 11:18:29 +02:00
Dan Čermák
75415693d8 [testsuite] Update testsuite after printStructure deletion 2018-09-13 11:18:29 +02:00
Luis Díaz Más
7d32da890b Add remaining pocs for the issue 428 and adapt the regression test 2018-09-11 09:49:59 +02:00
Luis Díaz Más
f5b40f3e82 Fix more issues in PngChunk::readRawProfile 2018-09-11 09:49:59 +02:00
Luis Díaz Más
a6a1c31140 Add integration test to reproduce the issue 2018-09-11 09:49:59 +02:00
Robin Mills
74bc0e0535 Changes for cross-platform getopt 2018-09-01 20:19:45 +02:00
Dan Čermák
c7a3a57aff [testsuite] Port redmine issue #1137 (requires stdin passing) 2018-08-30 16:26:56 +02:00
Dan Čermák
872e158173 [testsuite] Port redmine issue 1043
This test used shell wildcards, which we work around by creating the
list of files to process manually.
2018-08-30 16:26:56 +02:00
Dan Čermák
bf43cbbccc [testsuite] Set env var TZ in redmine issue 1054 & remove skip
The manual export TZ=UTC in run.sh is thereby no longer needed
2018-08-30 16:26:27 +02:00
Dan Čermák
116f5fe5bd [testsuite] Port redmine issue 1074 using the binary output feature 2018-08-30 12:33:31 +02:00
Dan Čermák
dadd1d19f9 Add reproducer for #400 to the test suite 2018-08-21 13:46:53 +02:00
Luis Diaz Mas
3d35b93fc0 Skip test 1054 unless timezone is UTC 2018-07-31 18:18:14 +02:00
Luis Diaz Mas
145f8fc456 Port redmine issues from the bash test suite to the python one.
* Port redmine issue 1024
 * Port redmine issue 1026
 * Port redmine issue 1040
 * Port redmine issue 1044
 * Port redmine issue 1053
 * Port redmine issue 1054 (not finished yet; I found some issues there)
 * Port redmine issue 1058
 * Port redmine issue 1062
 * Port redmine issue 1080
 * Port redmine issue 1108
 * Port redmine issue 1112
 * Port redmine issue 1114
 * Port redmine issue 1122
 * Port redmine issue 1140
 * Port redmine issue 1144
 * Port redmine issue 1145
 * Port redmine issue 1153
 * Port redmine issue 1155
 * Port redmine issue 1166
 * Port redmine issue 1167
 * Port redmine issue 1170
 * Replace escaped chars in 1054
 * Add brackets in exiv2json::main()
 * Link all sample apps against exiv2lib
 * Changes in 1054
 * test 1054: fix dates depending on Local time
 * Do not run make with VERBOSE=1
 * Use system_tests.path
 * Fix windows issues with quotes
 * Use system_tests.path
 * Use itertools to simplify test code
2018-07-31 18:18:14 +02:00
Dan Čermák
e67910a669 [tests] Change name of test for #365 and #366
Issues got a CVE assigned
2018-07-30 00:32:07 +02:00
Dan Čermák
f522cbf460 [testsuite] Add reproducer for #378/CVE-2018-14046 to the testsuite 2018-07-16 23:40:23 +02:00
Dan Čermák
b517f2e13b Add regression test for #366 to the testsuite 2018-06-11 22:55:49 +02:00
Dan Čermák
9b08354aca Add reproducer for #365 to the testsuite 2018-06-11 22:55:49 +02:00
Dan Čermák
39b7151b2e [testsuite] Port redmine issues 831 to 937 to the new testsuite 2018-06-06 13:59:34 +02:00
Dan Čermák
7e1cd7d1b6 [testsuite] Fix name of regression test #283
issue got a CVE assigned
2018-06-06 13:31:53 +02:00
Luis Diaz Mas
5bd26ee82b Port redmine issues 1179-1305
- Authorship: Luis Díaz Más & Dan Čermák
2018-06-01 07:56:13 +02:00
Dan Čermák
d7f4453dbd [testsuite] Remove usage of $cat via hooks 2018-05-29 10:21:13 +02:00
Dan Čermák
23e29e9527 [testsuite] Use system_tests.path() in some test cases 2018-05-29 10:21:13 +02:00
Luis Diaz Mas
8eca055058 Add POC + regression test.
Note that we override here the method check_no_ASAN_UBSAN_errors to also
analyze the last two lines of got_stderr.
2018-05-26 09:59:37 +02:00
Luis Díaz Más
b8b94dc67a Escape characters properly once we started using python literals 2018-05-24 11:06:18 +02:00
Luis Díaz Más
48078e9c8b Fix tests on windows by using os.path.join 2018-05-24 11:06:18 +02:00
Luis Díaz Más
72faa7331d Fix issues with python strings & literals 2018-05-24 11:06:18 +02:00
Dan Čermák
f55cdce761 [testsuite] Port redmine issues 498-825 2018-05-24 11:06:18 +02:00
Dan Čermák
2356984274 [testsuite] Ported redmine bugfixes 426-495 2018-05-24 11:06:18 +02:00
Luis Diaz Mas
2fb00c8a16 Analyze minimum needed number of null separators in PngChunk::parseTXTChunk
This commit fixes the heap-buffer-overflow in PngChunk::parseTXTChunk.

According to the specification:
http://www.libpng.org/pub/png/spec/1.2/PNG-Chunks.html

There must be 2 null separators when we start to analyze the language tag.
2018-05-23 10:57:13 +02:00
Luis Diaz Mas
234e5794f6 Add tests for #306 2018-05-23 10:57:13 +02:00
Daniel Zucchetto
cb5135f772 Add test for Canon M100 ModelID 2018-05-21 23:35:39 +02:00
Robin Mills
4239ff6734 Test for Tamron SP AF 150-600mm F/5-6.3 VC USD G2 (A022) for Nikon 2018-05-06 12:00:20 +01:00
Dan Čermák
11cd1eabf8 [testsuite] Addapt tests to new test suite structure 2018-04-23 10:17:36 +02:00
Luis Diaz Mas
ffab622633 Add reproducer for #247 2018-04-02 17:46:29 +02:00
Luis Diaz Mas
08aa27ae37 Add reproducers for #253 and #246 2018-04-01 09:21:20 +02:00
Dan Čermák
1f32207271 [testsuite] rename test_issue_208 -> test_CVE_2017_17722
the issue got a CVE assigned
2018-03-28 10:07:41 +02:00
Dan Čermák
3b01d5205a [testsuite] Port all regression tests for github issues 2018-03-28 10:07:41 +02:00
Dan Čermák
3cbb031442 [testsuite] Unified CVE test cases 2018-03-28 10:07:41 +02:00
Dan Čermák
e597e5b811 [testsuite] Fixed CVE number 2018-03-28 10:07:41 +02:00
Dan Čermák
c754ca6d14 [testsuite] Corrected class name, issue had no CVE assigned 2018-03-28 10:07:41 +02:00
Dan Čermák
71f9a24027 [testsuite] Unified variable names 2018-03-28 10:07:32 +02:00
Dan Čermák
48982697b0 Add reproducer for CVE-2017-1000126 to the test suite 2018-03-27 23:46:13 +02:00
Dan Čermák
59b148aee9 Add regression test for CVE-2017-18005 2018-03-20 21:30:06 +01:00
Dan Čermák
cabf756553 Add reproducer for #170 to the test suite 2018-02-22 16:42:51 +01:00
Dan Čermák
73ac02d7f2 Added test for Sigma lenses 2018-02-21 12:57:45 +01:00
Dan Čermák
3965a44df2 Replace error variable names in test suite with enum error codes 2018-02-18 10:44:05 +01:00
Dan Čermák
ead7f309b0 Added reproducer for CVE-2017-1000127 2018-02-07 11:16:23 +01:00
Dan Čermák
72de0f96f3 Added reproducer for CVE-2018-4868 to the test suite 2018-02-01 17:55:22 +01:00
Robin Mills
a1f1989cb5
Merge branch 'master' into master 2018-02-01 14:55:07 +00:00
Dan Čermák
80c4d95171 Add regression test for CVE 2017-17669 2018-01-27 14:51:40 +01:00
Michał Walenciak
421c6d6723 improvements for issue #208 2018-01-14 08:24:26 +01:00
Michał Walenciak
dba9fba725 test for issue #208 2018-01-13 15:52:50 +01:00
Dan Čermák
9900f523fe Added reproducer for #201 to the test suite 2018-01-06 00:26:09 +01:00
Dan Čermák
085c9715fc Added some example test cases to the new test suite 2018-01-05 00:43:43 +01:00