Regression test for GHSA-8949-hhfh-j7rj

Exiv2 · Apr 22, 2021 · c372f26 · c372f26
1 parent b3de96f
commit c372f26
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 0 deletions.
diff --git a/test/data/issue_ghsa_8949_hhfh_j7rj_poc.exv b/test/data/issue_ghsa_8949_hhfh_j7rj_poc.exv
diff --git a/test/data/issue_ghsa_8949_hhfh_j7rj_poc.jp2 b/test/data/issue_ghsa_8949_hhfh_j7rj_poc.jp2
diff --git a/tests/bugfixes/github/test_issue_ghsa_8949_hhfh_j7rj.py b/tests/bugfixes/github/test_issue_ghsa_8949_hhfh_j7rj.py
@@ -0,0 +1,22 @@
+# -*- coding: utf-8 -*-
+
+from system_tests import CaseMeta, path
+
+
+class Jp2ImageEncodeJp2HeaderOutOfBoundsRead(metaclass=CaseMeta):
+    """
+    Regression test for the bug described in:
+    https://github.com/Exiv2/exiv2/security/advisories/GHSA-8949-hhfh-j7rj
+    """
+    url = "https://github.com/Exiv2/exiv2/security/advisories/GHSA-8949-hhfh-j7rj"
+
+    filename1 = path("$data_path/issue_ghsa_8949_hhfh_j7rj_poc.jp2")
+    filename2 = path("$data_path/issue_ghsa_8949_hhfh_j7rj_poc.exv")
+    commands = ["$exiv2 in $filename1"]
+    stdout = [""]
+    stderr = [
+"""Error: XMP Toolkit error 201: XML parsing failure
+Warning: Failed to decode XMP metadata.
+$filename1: Could not write metadata to file: $kerCorruptedMetadata
+"""]
+    retval = [1]