mirror of
https://github.com/php/php-src.git
synced 2026-04-22 15:38:49 +02:00
Christoph M. Becker
5621c5faf8
Even if the length of a maker note does not match our expectations (either because the maker note is corrupted, or because our expectations do not quite match reality), there is no need to let parsing fail; we can still go on parsing the other meta information.
45 lines
1.0 KiB
PHP
45 lines
1.0 KiB
PHP
--TEST--
|
|
Bug #78910: Heap-buffer-overflow READ in exif (OSS-Fuzz #19044)
|
|
--FILE--
|
|
<?php
|
|
|
|
var_dump(exif_read_data('data:image/jpg;base64,TU0AKgAAAAwgICAgAAIBDwAEAAAAAgAAACKSfCAgAAAAAEZVSklGSUxN'));
|
|
|
|
?>
|
|
--EXPECTF--
|
|
Notice: exif_read_data(): Read from TIFF: tag(0x927C, MakerNote ): Illegal format code 0x2020, switching to BYTE in %s on line %d
|
|
|
|
Warning: exif_read_data(): Process tag(x927C=MakerNote ): Illegal format code 0x2020, suppose BYTE in %s on line %d
|
|
|
|
Warning: exif_read_data(): IFD data too short: 0x0000 offset 0x000C in %s on line %d
|
|
|
|
Warning: exif_read_data(): Error in TIFF: filesize(x002A) less than start of IFD dir(x46494C4F) in %s on line %d
|
|
array(8) {
|
|
["FileDateTime"]=>
|
|
int(0)
|
|
["FileSize"]=>
|
|
int(42)
|
|
["FileType"]=>
|
|
int(8)
|
|
["MimeType"]=>
|
|
string(10) "image/tiff"
|
|
["SectionsFound"]=>
|
|
string(13) "ANY_TAG, IFD0"
|
|
["COMPUTED"]=>
|
|
array(2) {
|
|
["IsColor"]=>
|
|
int(0)
|
|
["ByteOrderMotorola"]=>
|
|
int(1)
|
|
}
|
|
["Make"]=>
|
|
array(2) {
|
|
[0]=>
|
|
int(1179994697)
|
|
[1]=>
|
|
int(1179208781)
|
|
}
|
|
["MakerNote"]=>
|
|
NULL
|
|
}
|