Recent changes to bugshttps://sourceforge.net/p/libexif/bugs/2020-05-18T20:13:41.522000ZRecent changes to bugs#130 libexif-0.6.21 Heap Buffer Overflow due to a programming mistake2020-05-18T20:13:41.522000Z2020-05-18T20:13:41.522000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.netd4cdb142ba0e420e3e7b46b28f68b5bd776090eb<div class="markdown_content"><ul>
<li><strong>status</strong>: open --> closed-fixed</li>
<li><strong>assigned_to</strong>: Marcus Meissner</li>
</ul></div>#130 libexif-0.6.21 Heap Buffer Overflow due to a programming mistake2020-05-18T20:12:58.451000Z2020-05-18T20:12:58.451000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.net5085930e04cd050be82916c7673d95aa1b35763f<div class="markdown_content"><p>This is fixed in 0.6.22</p></div>#132 Heap Out-of-Bounds Memory Access2019-07-12T11:23:25.086000Z2019-07-12T11:23:25.086000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.net2c5c55b970351f04fc4c48675f1095c0b07a13cb<div class="markdown_content"><ul>
<li><strong>status</strong>: open-accepted --> closed-fixed</li>
<li><strong>private</strong>: Yes --> No</li>
</ul></div>#134 Timeout (78443587)2019-03-14T18:25:01.192000Z2019-03-14T18:25:01.192000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.netda47c2173ba93c4aeda5392634d684ac242ab745<div class="markdown_content"><ul>
<li><strong>status</strong>: open-accepted --> closed-fixed</li>
</ul></div>#134 Timeout (78443587)2019-03-14T18:24:46.672000Z2019-03-14T18:24:46.672000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.neta366737c80157d4f4bbec8ed67be008166234937<div class="markdown_content"><p>The fix mentioned in the previous comment was submitted as commit 6aa11df5.</p></div>#133 Timeout (37792047)2019-03-14T18:24:04.366000Z2019-03-14T18:24:04.366000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.net29e0d0b1802ee332cd9c447d476a70e82ae97958<div class="markdown_content"><ul>
<li><strong>status</strong>: open-accepted --> closed-fixed</li>
</ul></div>#133 Timeout (37792047)2019-03-14T18:23:15.046000Z2019-03-14T18:23:15.046000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.net9236108e06e71fdbbb633ede083a819058b22c6e<div class="markdown_content"><p>The fix mentioned in the previous comment was submitted as commit 6aa11df5/</p></div>#53 exif crashes when removing thumbnail from jpeg image2018-06-30T19:37:02.067000Z2018-06-30T19:37:02.067000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.net27607aae24000b11234da9a19b5bac440a537d92<div class="markdown_content"><ul>
<li><strong>status</strong>: open --> closed-fixed</li>
<li><strong>assigned_to</strong>: Dan Fandrich</li>
<li><strong>Group</strong>: --> </li>
</ul></div>#53 exif crashes when removing thumbnail from jpeg image2018-06-30T19:36:27.438000Z2018-06-30T19:36:27.438000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.net6d9d209bd16d6ea4f27634e9f2525215b9457e52<div class="markdown_content"><p>I'm attaching a file that seems to show the issue here, although it doesn't give me a SIGSEGV (yet) but does show a lot of Conditional jump or move depends on uninitialised value(s) errors under valgrind.</p>
<p>The underlying issue was solved in commit 72e9fb36 by ensuring the size parameter is initialized to 0.</p></div>#74 int to short sign extension bug (MSVC C++) libexif 0.6.152018-06-30T16:01:55.710000Z2018-06-30T16:01:55.710000ZDan Fandrichhttps://sourceforge.net/u/dfandrich/https://sourceforge.net8827ed4d33296276c35d7287aba4f78c37ce0705<div class="markdown_content"><p>Here is the proposed patch in unified diff form.</p>
<p>Rather than 0xffff & does it work with an explicit cast to the enum type? And is that change really necessary on entry->components since both sides are unsigned?</p></div>