An issue was discovered in Exiv2::Image::printIFDStructure function in image.cpp, as distributed in master and version 0.27. There is a stack exhaustion problem caused by the in printIFDStructure function making recursive calls to itself.
Here is the POC file. Please use the “./exiv2 -pR $POC” to reproduce the bug. POC.zip
However, -pR is a debugging only function, that has known issues and is for that reason disabled in release builds. I.e. you should be only using it on a "good" file with a debug build. We plan on removing it completely and will therefore not fix any issues inside it.
Hi there,
An issue was discovered in Exiv2::Image::printIFDStructure function in image.cpp, as distributed in master and version 0.27. There is a stack exhaustion problem caused by the in printIFDStructure function making recursive calls to itself.
Here is the POC file. Please use the “./exiv2 -pR $POC” to reproduce the bug.
POC.zip
The ASAN dumps the stack trace as follows:
The text was updated successfully, but these errors were encountered: