You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
An issue was discovered in Exiv2::Image::printIFDStructure function in image.cpp, as distributed in master and version 0.27. There is a stack exhaustion problem caused by the in printIFDStructure function making recursive calls to itself.
Here is the POC file. Please use the “./exiv2 -pR $POC” to reproduce the bug. POC.zip
However, -pR is a debugging only function, that has known issues and is for that reason disabled in release builds. I.e. you should be only using it on a "good" file with a debug build. We plan on removing it completely and will therefore not fix any issues inside it.
Hi there,
An issue was discovered in Exiv2::Image::printIFDStructure function in image.cpp, as distributed in master and version 0.27. There is a stack exhaustion problem caused by the in printIFDStructure function making recursive calls to itself.
Here is the POC file. Please use the “./exiv2 -pR $POC” to reproduce the bug.
POC.zip
The ASAN dumps the stack trace as follows:
The text was updated successfully, but these errors were encountered: