Skip to content

Infinite loop inside Exiv2::PsdImage::readMetadata (psdimage.cpp) #426

Closed
@hongxuchen

Description

@hongxuchen

There seems an infinite loop inside Exiv2::PsdImage::readMetadata at https://github.com/Exiv2/exiv2/blob/disable-printStructure/src/psdimage.cpp#L200-L233 (5940c6f).

It checks while (resourcesLength > 0) at line 200, resourcesLength is updated at line 232. However sometimes resourceNameLength + resourceSize may be 0xfffffff4, and it will be truncated to 0 when adding 12, making the subtraction to have no effect.

A concrete input is available h01 and h02.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions