Blame tests/bugfixes/github/test_CVE_2017_11592.py
|
Packit |
01d647 |
# -*- coding: utf-8 -*-
|
|
Packit |
01d647 |
|
|
Packit |
01d647 |
import system_tests
|
|
Packit |
01d647 |
|
|
Packit |
01d647 |
|
|
Packit |
01d647 |
class TestCvePoC(metaclass=system_tests.CaseMeta):
|
|
Packit |
01d647 |
|
|
Packit |
01d647 |
url = "https://github.com/Exiv2/exiv2/issues/56"
|
|
Packit |
01d647 |
|
|
Packit |
01d647 |
filename = "$data_path/POC9"
|
|
Packit |
01d647 |
commands = ["$exiv2 $filename"]
|
|
Packit |
01d647 |
stdout = [
|
|
Packit |
01d647 |
"""File name : $filename
|
|
Packit |
01d647 |
File size : 523 Bytes
|
|
Packit |
01d647 |
MIME type : image/tiff
|
|
Packit |
01d647 |
Image size : 0 x 0
|
|
Packit |
01d647 |
Camera make :
|
|
Packit |
01d647 |
Camera model :
|
|
Packit |
01d647 |
Image timestamp :
|
|
Packit |
01d647 |
Image number :
|
|
Packit |
01d647 |
Exposure time :
|
|
Packit |
01d647 |
Aperture :
|
|
Packit |
01d647 |
Exposure bias :
|
|
Packit |
01d647 |
Flash :
|
|
Packit |
01d647 |
Flash bias :
|
|
Packit |
01d647 |
Focal length :
|
|
Packit |
01d647 |
Subject distance:
|
|
Packit |
01d647 |
ISO speed :
|
|
Packit |
01d647 |
Exposure mode :
|
|
Packit |
01d647 |
Metering mode :
|
|
Packit |
01d647 |
Macro mode :
|
|
Packit |
01d647 |
Image quality :
|
|
Packit |
01d647 |
Exif Resolution :
|
|
Packit |
01d647 |
White balance :
|
|
Packit |
01d647 |
Thumbnail : None
|
|
Packit |
01d647 |
Copyright :
|
|
Packit |
01d647 |
Exif comment :
|
|
Packit |
01d647 |
|
|
Packit |
01d647 |
"""
|
|
Packit |
01d647 |
]
|
|
Packit |
01d647 |
stderr = [
|
|
Packit |
01d647 |
"""Error: Upper boundary of data for directory Image, entry 0x02bc is out of bounds: Offset = 0x00000001, size = 5852, exceeds buffer size by 5330 Bytes; truncating the entry
|
|
Packit |
01d647 |
Error: Directory Thumbnail: Next pointer is out of bounds; ignored.
|
|
Packit |
01d647 |
Error: Directory Thumbnail, entry 0x02bc has invalid size 4294967295*2; skipping entry.
|
|
Packit |
01d647 |
"""
|
|
Packit |
01d647 |
]
|
|
Packit |
01d647 |
retval = [0]
|