Sanity check.

See Bug: 13788
horde · Feb 9, 2015 · 8ac25d7 · 8ac25d7
1 parent 5131f30
commit 8ac25d7
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/framework/Image/lib/Horde/Image/Exif/Bundled.php b/framework/Image/lib/Horde/Image/Exif/Bundled.php
@@ -196,7 +196,11 @@ protected function _readData($path)
         }
 
         // 2 bytes of 0x002a
-        $tag = bin2hex($in->substring(0, 2));
+        if (bin2hex($in->substring(0, 2)) != '002a') {
+            $result['Errors'] = $result['Errors'] + 1;
+            $result['Error'][$result['Errors']] = 'Unexpected value.';
+            return $result;
+        }
 
         // Then 4 bytes of offset to IFD0 (usually 8 which includes all 8 bytes
         // of TIFF header)