From f7a403d8d995d683b1cde7cadf211d7f7907a69d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dan=20=C4=8Cerm=C3=A1k?= Date: Sat, 21 Oct 2017 00:00:26 +0200 Subject: [PATCH] Added reproducer for CVE-2017-14865 / #134 to the test suite --- test/bugfixes-test.sh | 8 ++++++++ test/data/004-heap-buffer-over | Bin 0 -> 352222 bytes 2 files changed, 8 insertions(+) create mode 100644 test/data/004-heap-buffer-over diff --git a/test/bugfixes-test.sh b/test/bugfixes-test.sh index c7f119fb44..fd0db7c3e1 100755 --- a/test/bugfixes-test.sh +++ b/test/bugfixes-test.sh @@ -772,6 +772,14 @@ source ./functions.source copyTestFile $filename runTest exiv2 $filename + num=g134 + printf "$num " >&3 + filename=004-heap-buffer-over + echo '------>' Bug $filename '<-------' >&2 + copyTestFile $filename + runTest exiv2 $filename + + ) 3>&1 > $results 2>&1 printf "\n" diff --git a/test/data/004-heap-buffer-over b/test/data/004-heap-buffer-over new file mode 100644 index 0000000000000000000000000000000000000000..13e8dbc6019c107526839bd3fba6f171ba9f67c8 GIT binary patch literal 352222 zcmeI5OKe@od4Ml1yG~Rjk@IXGO>We*dC}tV36h~`>tUrTELV}!CPo7^G<78rCV5%% zDwc}?7Mir#rtPlC!d+!opz8q5t|(A+-xdYB%`Uqxx`_He=ASd?l2UaQO5)=?CeNAq z-}9Y0b1x~+<&`U)uXH+{_jNwm`BmrHPUoj%((B0Sgk4^c_L#Sm3ZAjH*o~#J6WQiD z>HS7-KO^lIG>(QyY3##UK9)LTAIt4$rTy{TenD(L5%$kqANy2CqN%UM|8!~p!PsXa zj%dD=+nQ^#Bj?U%rFCs=%Gw{5_SV?hY?CC{wZ`{Th)~yguE%va-6inWQgF(tJvDX>vMErZoHYG?O|@FWpHitEo3gZ>F1R z^X%zg{w$sDu3bNyzLhq5X{DRe`sPl$bN2Mg_5Pc^B<+pfU}fTT_fERAu{B6%PoGQu z)a!oxN=g^fcCVYxOs3T|J=dL)e0D5N+*#R5SH$i5%3$SU8l>fuT{)7TmhPmjbYZ)< z(iEJe;6d8CwKS2$Pj#uk{mp)VJ=~Tiwy)nv7t_w__F5XO^*5K3#p*64k*D5H+Fsil ztfkGa+O53VPlL0kPfJd-N;0PIoedq<_0_YdZw;h?iHWV-Y5hz;-JH0-I+50UDQymR zCMM5JPI$5AB=J|1)UvTMkc=y-Hz7%GEQw3Hk+wHd8CNc_x3ik0kfa4#?zFTmmR`6N z*p~vOF9qHfj#{8ss243TrLDM?QfC@yotrynlHBEVX0^XDA?lQNQh!S-P3g4r5$`0G zhG)9aU+-`0JzAb#QV*XSG7b@6>0j5Pm5Y8aZT)#)$@jP9W?s0u-M=9ymMuW{)e9GE z_sdE3a({cvC+~@?9ZOC4-(Qouw$nt^q)1X8`kxMN-I9U?ik2$h0zt-Mu-5v??phKk za@X>W%?0{hlUZ@)il_zwMCOMBNivxxWNxR8jfp}-DqE5XDD(4T+D_l=UB9%Q3#E^t=`$w*JRS%-d^pUE(M3%m2`P?XRxxlnl4{lzI}U5qRUgXkS@vNGkxyj zMR}H{(#(ZR>HKthWmej9Xu9xA>Sy!a5xMSSfA#jp|D=KF#Qu7knYobCxpSAqUt@kg zU6_$ex-@_3-0aL`npu+hrZENE?Ty~1`sJ9-T(e0pb1hGFpKHA&4~fmeco-C`bInwB zuE{JKq#HNRp8i@)v$Ud%$(bb6Of?fyrZd&4+3ql>wk~7P$NnI_hVqQqPj3sr|tZ#&C ze>3@vR^KJ9U6+LZx~&vxb8WCZwIprHcC9B5fr{m6UmJ**9tuUqCQh%d3}m`oT)WxZ z8KkM%x$&vlB;WJnQ)yv*YHmvJyR=i9nx7e;otDP*$o%^U5%+nJu69iN__nV$OE^z5A6dC|?K^h%mNCr{z|b8|8^(#*83 z*?Fw5Nzu8oczm^VE&E2gER(zUt+nfeTXILT!{xMc(`9*-Zf?joR&J(O(`L%{Ny%Im zVNZlN)2-!`N<R4o2^L3Opa{kl9vvN$L-H^^qWFFpTKS8dALoYL#PKhpx-H0zgi zkxpyN^Gh;uq$MMAja!Mg&E)m8JfCD1%96B}EsBAxs}e&k{ApNUvne34Y=O~)*&-DS zU45Fv{iM8l#!e*Vc|HwxuJ+RFD;ryDR-3O$$sd3VX=7`<_m?|5*=OSc=&NjJM;?ua zkJ?MLtFn&ES}X%zy}X%v+gsbo9-mE_l`@gPD>chA-rq=rZMBf6LPEJkGeOgmRVKG! zYdz`BxVmt@^~Ed4l2N_>nocp^185jW9{bcZGCt*mnS8= zJ}RP1E89gU@pOjiA#+I=&5QB!Do&12>C57pU+wHwP5Sa0r7yd_zz68OfNNBJ;g!Q* z(B!Sfnbov0(YqrLo=o&uY3%mtsHCtYL;Uu|HCg@Sl|>2`t6nIQD&)su?Uz2zi$OeU{|Nv6KYY=-%`JkM*g z;(bp7%VHyM59ZR`%=k=Nm`iq^w8daDO@BX4$+97f*ObYpMLuiG*n-$k&&`Xyp66w; zn33g0mIYZjru8L9&S`dPT%2cRxtN)kg=9L3Y+TlzB#Vrk7xXL(kVxh=UTBGfOjpPCwnrD9k(qo)rl8$1c~@Wyyif9O>*Z8mYm%%+GSzfe`E-v<%<19lZx_Q_ z)AG%o98!AzW%hY>X|m+PO0aOwZz;pc#G%_|?1CIBXRD39oh5c@PWBLH1HE|DuUTC3 ziBbj-7UtRLyp@$c&RSIYwR~zzQ%HmuNlT}ZEq}{B7g}n{O7CmV+zLVT>jA2d>ciM# zxI@;sR}tkPVJC8}bg$xKByJi3%D6(1Bbi)fF3;L9imqKlsHU1Ey_~&Vu~#jkDPC2} za$8PGpAB+>xi8OKz9*_~Vz{TK3Yj`YJK`1>HLKOqc3U}Tx#KEQ3sJ|@wmVs?N)Zu; z>MNDG+`RHVDVCPNPIbJdU8%fTIY_foS3V_4kwqz$chPxc&tNsN#@>@Qq1;OQ4W2zp zbGJ}P&jofCM-x;c%hw)>nM57or)j^Dh3+n$U#QfDdXeb*<;|iA8-E+>=Gm!n6>IZ$ ziTP?At5;>&!7jzw8)lgH#$T}M}yTIUg|k%jY9ZbwJWd?aS4wnf!6HCz@)IM1j(cWlm0OLXdH0!iWu%@BtM zG3k)XyY8#)NNxeOFT!xqrWe!A?|RK4QZ$CqU1Q=t zcjNaQYL~08Y*JHclcuq(WaeBvbID#_u1+p@J92t|(~sioDXQ9nG2(=wqbX@DlK14C zx^Ii%_pH^f%UdT=Tub@ zp=}b!ofA!-3Skp&m2FX3BMMc6sxY&U`;c|nUhM40;P5ch9Ms*S^Nu#Mx_xnr%Cl)| z%Mv&9&8_SDB3k-@O7mT*%(Q9Co)|Wv!=U^50G3C1!Hm>ajfZ^9zpSCI?soQ0fovn%?M1>6y$cM zZfvwpJxY|KuN*zF+Z4SynMOok4-=23x3et%F3JXxPrDH+8{`sfM3qRIZn&!;73)2T zP$i~2Xx9((uQP|juCBFnl_LA(8!{BZjrWL>^A(!f4_}*m{-!N^idm$|l18A4_>LfE ztS;727nf+OI`jv0JBpd~>b5GQuh(d+yc{kJRq2HwuTW+lvT8Ic`X~98t4LiDW-cv> zS|O@h6r%m7r^ZMlN-tl$)AX`w%R;TI(z1zqs#z22C)RbD%RS7G8&Tz>!!q}La@&wd z&%Z=qX7w^?0z0WTH}q09tsOQIb?>VeqPCW#2@;`)+{_@Xnocdzkc(A0S!aRjk*GhE)vRwW>R9ecBbHVP z*;JsSELNd4i& zVib1LDp917lQag!G6FPN!Y=~IHJaHdEFxPLOA^!QshF6q7KkR_hOBbaMrH=#X4jBt z89Ea8XqoKlv`TIdpbn7D+7V-s+M}jMR5Ge>_OHT()J36)tGd`dX-)MKM;n!?wM}Be zM&qrf-xx-9`NroGE6Xs**PPD`j7e>}OOV5buiX=WYKvQozet<%&CBf?>xdZRj{Bll zw>tTGb*#fyHAkRRW}~M#LX)F}*srRLj22o(QfDx$>K3`KcK;jgOxYw7Dtr+H54@qE8j5JYfGH7#1NH4Gq=px&E?$k%bBxG z+(YZvUB!n%nE6}Y=vjGjidve4Vy2dQiSKOO+&MQ0FQM34VX}D&E3-#;~^-`O>m*rU-R%WlJHc6#aoxm2WcCM_O1ZJhD2x)EO=Bh?s zTDjpj-aDG7=-n~SCYFmAKeE%c)4c5$CKo$FMD?jX+x# zHHXeqIPP(|icxK5UfCsr<*P`o(k7V&sf_bNUya6<#l#xrq>Ze~m!XX9uG^H~nT6*^ zB1RLfYTZ9@5a@R2JWs^8Uh9c>ecMW{HAG3U$NdTIFsB@^y>gW#C8EY|sx10eLygTL zyyEIsQdAY87&lc%iT~Ojj2Vde?#lBpRc9%*-@YeB)he{H&u)6j!LrT+W?^Mz%_fOE znzuK#NcoPDS~GmaEe>m`sR?pVFD|fa>b{u6)QS?p>-BDUWxs6GNL3&`{e9{?$$y_J z|8LcqE%~48{Po1xX17)m5vq!n6RX6f<{SnEW1|#RJn?0G9=C}xq-fOnw!3BOenAX1 zpZ4>)WYi=fZw6$>x#r?iS*q-TM-HH|t@%J>tDwpj#$K28yqN`h@$V38<@FOE@*K&G zo6$x5p{rP#VdZ3kdJqk+aE@8)eM{V&vVYj>Rqb;o6PvMT4l^5x$IaT>QoQ$I6}}&j zMxDdT@KAbgf?CVLgd!{Dl3QA`I4U=ytza z{)wQrE%7Z-D^55@Y>n5tOIDJlwbWi=uda>ChkxFD~$k!(=L=kr9^-!6s<6>4W%|(VJn`#7I%H7R+da8`A zYx#fJy(dRJlkGuO1)6(xig+=Sta5Q>S2a~9-)0imN?kX@Cd=Yi?sh9or;0j8w2QKi z=54QZw|rkEBpC@OxWF|Mfsu@vUEmstz(~f-t^$H3v!}1#esg_o zRrcv#?do3Ix7G&T3$j5or8By5RIa*1YVq2|OF5SGbaU)rYjI-Y?YG}P^Y-+a{`SoY z*~zgmk)|f5rd||_7kA!~oql&-+}!z{vft9;=x(6AA5r%mF6tiFya~6N1GXDzQMW~v zOtQVzHX7UZR@Lav*7jabl`h%_HQ(f>rP~(3TG-4k+jixuS9_Z`WtZEKLzWJE$Tm0G z_O-3szVbG=Qn-zH>wq9+x^F9c)Uu{h zx4)`8g=G@?HZZH4J)}BI%8^U1)x)mU_S3ywYxS^elk|^tcWMlFNIdK%yHjHisP0BT2uH@$ zsw|i7)3#a_;>j3wwUF)8doLEE*u7SWa8dTSuibd(;>tj_@!jvRk0_`uE7}@EKZIbA zKZM|ZF+}cRYU91)^d6=b3*weTG0F!iJj{sVLl@L`D9$yRK$|ypy6FgWFWc!>;!626>xjq^e}Y z=C&f`eW<#fw5e}c(|GD2>ccjSE}H!t&Bj!*$Ri!rG?Co1^@P=dY5zY2WE=jIJ@OrG z-LZT-_w6C`k1?@#YFoFrp@X1+9N4zxvb*V=a5w5>LF>oE?=;ZFo4 zztg`lxTp^XVCO*Gr(AS}rA0Fgg@>0vYbGLb&YAN~;^^)bcM}DfY*SYv{sd_0K zdVjv3-DdvmXVjrsBpCwo;4Zix%x6dot|1@~?t<&Ve1^1-5tn}2o@aZENt)r1q+#(8 zEpR;qq{akX4U30pf$Je4H74L{SUf}vTn_=MF#%V@;vrh#dI(63$;l(F1V%Duc7bao0wWn8 z*V(n#-d_D%#P>fQsJy=$nxjDA0b5dz!tfXa1Rwx`BS7H4kH8oh0t6nBz_XpskDu?z z+1{>x|8Jh}{AcQP{_O`Mc(0LU`$Y15C&_ojN$J^Q z|M#ksm~Wc@Go6pf_3yO(!RI@lmFqvq_o>Q0r4uENs5C{%^oWDZZeFd%)2JHTFW&z3 zVvp+m!A@taVKi2?pBX#RIgv{{A?@J)8&&&-V&Ca}xRQUYYJa@g$luwB_CI$zpBj5E z$Lw@Yj=fUapQ(JmRJ9$`sN=&P0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U< z00Izz00ba#xCy**xXY({2tWV=5P$##AOHafKmY;|fB*y_009U<00Izz00bZa0SG_< z0uX=z1Rwwb2tWV=5P$##o+N=!KFMU{f&c^{009U<00Izz00bZa0SG_<0uX=z1Rwwb z2tWV=5P$##AOL|wNZ><GW9)<$}2tWV=5P$##AOHafKmY;|fB*y_@W=$-ePmA@Apn7WBk-wx zi$ov@K;UT;xcsyWAU^~k009U<00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHaf z+>Zd;>h4DdIRqd80SG_<0uX=z1Rwwb2tWV=5EzxfYoj_~4*>{3U{3;5drA>P00Izz z00bZa0SG_<0uX=z1Rwwb2tWV=5P$##4heye9+EmK69N!`00bZa0SG_<0uX=z1Rwwb z2tWV=5P$##AOHafJRt(7o=_grKmY;|fB*y_009U<00Izz00bZa0SG_<0uX=z1Rwwb z2tWV=5P-l_C(wE76;Qx|Ch&;^T^+?i00Izz00bbgPXxZWPjLuyYzRyqn~^e52teRb z34GyE9r1$z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U<00Iy=CIr55OvcGDApijg zKmY;|fWR>#z#gSzbh8;M1Rwwb2teSN6S#iN$ItK~009U<00Izz00ba#7zs=q#-gbi z0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U<00Izz00bZa0SG_<0uX=z1Rwwb z2tWV=5P$##AOHafKmY;|fB*y_009UbO#**?G>65gAOHafKmY=Vhrp@BQ!14n7y?%g zOeIIBkbC#;y?b;_cSE5~urj2QwDfB*y_009U<00Izz z00bZafhR%Wi%%j6IUoQ52tWV=5P-l_BJi$k!hK4qNecl8Kwu;SOCwoh3;_s000Izz z00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_aCiya<^OCuyf=@^Apijg zKmY;|fB*y_009U<;2{Zo_#y2ug8&2|009U<00Izz00bZa0SG|g01)8A=nlY5poIM- zaB4q;5eotkfB*y_009U<00Izz00bZa0SG_<0uXq-1nxfG@I;3I1R$^v1n#j^?E^(Z zKmY;|fB*y_009U<00Izz00ba#%m_>#v+*8>;dVO5VU&y!0uX=z1Rwwb2tWV=5P$## zAOHafKmY;|fB*y_009U<00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;| zfB*y_009U<00Izz00bZafg?%a%QC9pI+7z}P!NCs1Rwwb2tWV=5P$##AOHafK;UQ+ zm_C}rVpI@-00bZa0SG_<0ub1nz<=#6Mk)lp2n7g000Izz00fRbflnWM0suG#0ti3= z0uX=z1Rwwb2tWV=5I6z^UOfV1U;$eo_6#I|00bZa z0SG_<0tcPInS)*+^+5mv5P$##AOHafKmY;|fB*y_0D%V)_}qh(=pX)=#OOi=ns(*LI45~fB*y_009U<00Izz00bZa0SG_<0uX=z z1R(Hq34Gw`rYAcDo*sec?%jLt>18J~1Rwwb2tWV=5P$##AOHafKmY=}2%Op_K>z^= zKmY;|fB*y_009U<00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_ z009U<00Izz00bcL1PJt=Kn_ws00Izr1Oi`q1Rq==009U<00Izz00bZa0SG_<0uX?} z<0jDM4}v~!#KeaH1Rwwb2tWV=5P$##Ah53lI{X~BuRI9`0SKh?Fn|CAAOHafKmY;| zfB*y_009U<00Izz00bbgZv;B;?pvsX66hKJZRVid3hICW1Rwx`Q3(9UD8|@A00Izz z00bZa0SG_<0uX=z1Rwwb2tWV=5P(37K&LatKNGfy(5VRgNqtmunh<~h1R$`Bz`b1( z1Q37#1R!u63GlyR9>=@Rm>~cG2tWV=5P$##AOHaf983a}2eT}yg1~_#aO%KTMqv;z8y;;@f^ z`XK-T2tWV=5P$##AOHafKmY;|fB*y_009U<00Izz00bZafrCTfs|TkPDuDn5AOHaf z96