Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
exiv2: Autospec creation for update from version 0.27.4 to version 0.…
…27.5 Antonio Rojas (1): Fix build with gtest 1.11 Attila Oláh (1): Fix compilation with -Wunused-variable Christoph Hasse (3): fix: avoid processing MOV (quicktime) files when BMFF is enabled fix: incorrectly triggered enforce check during preview extraction in LoaderTiff::getData(), closes #1829 workaround for softprops/action-gh-release#139 David Houlder (2): Canon cr3 previews (#1958) Performance boost: don't read boxes we're not interested in Heiko Bauke (1): fix out of range access, minor performance improvement John55h (1): Update canonmn_int.cpp Kevin Backhouse (112): Regression test for GHSA-mv9g-fxh2-m49m Don't crash if s > size. Print message to stderr when EXIV2_DEBUG_MESSAGES is enabled. fix: use vector::at() rather than operator[] (#1735) fix: zero initialize local variables. (#1737) fix: stricter date parsing in value.cpp (#1720) Regression test for GHSA-pvjp-m4f6-q984 Prevent divide-by-zero crash. Defensive coding to avoid 0x80000000/0xFFFFFFFF FPE. fix: fix incorrect loop condition (#1752) Regression test for GHSA-h9x9-4f77-336w Throw exception if lens info wasn't found. Check that findKey didn't return end(). Regression test for GHSA-583f-w9pm-99r2 Better bounds checking in Jp2Image::printStructure Regression test for GHSA-hqjh-hpv8-8r9p Extra checking to prevent the loop counter from wrapping around. Defensive coding changes to avoid integer overflow in loop conditions. Better fix for potential integer overflow in `bytes.size() - 3`. Type of escapeStart should be size_t. Regression test for GHSA-v5g7-46xf-h728 Check that `type` isn't an empty string. Safer std::vector indexing. Better way to print the error message. Regression test for GHSA-m479-7frc-gqqg dirLength == 0 can cause an infinite loop. Defensive programming in Image::printIFDStructure Regression test for GHSA-9jh3-fcc3-g6hv Make sure that read is complete to prevent infinite loop. Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-g44w-q3vm-gwjq &bytes[0] will crash if bytes has zero elements. Skip unittest because -pR is disabled in release builds so the test fails. Remove redundant check. Regression test for GHSA-mvc4-g5pv-4qqq bufRead needs to be adjusted after seek() Improved handling of jpg segments to avoid out-of-bound reads. Fix compiler warning. Update src/jpgimage.cpp poc from GHSA-9jh3-fcc3-g6hv can now be parsed without error. Add comment to explain bounds-check. Fix build error when EXIV2_DEBUG_MESSAGES is enabled. Fix warning: comparison of integer expressions of different signedness Regression test for Exiv2/exiv2#1812 Check size before allocation to avoid out-of-memory errors. Regression test for Exiv2/exiv2#1815 Add bounds-check to prevent out-of-bounds read in memcmp. Regression test for Exiv2/exiv2#1817 Use DataBuf, rather than new[], for automatic delete when an exception is throw. Regression test for Exiv2/exiv2#1819 Check that the string isn't empty Add static_cast to fix build error on Windows. Add comment to explain the bounds-check. Regression test for Exiv2/exiv2#1827 Check value is in range before casting from double to uint32_t, to avoid undefined behavior. Update src/tags_int.cpp Regression test for Exiv2/exiv2#1830 Safer casting from double to long. Replace assertion with an error message. Regression test for Exiv2/exiv2#1838 Check that the float is within the range of an int before casting. Regression test for Exiv2/exiv2#1841 Use DataBuf rather than raw malloc. Replace assertion with an error message. Test for Exiv2/exiv2#1821 Regression test for Exiv2/exiv2#1845 Replace assertion with an error message. Regression test for Exiv2/exiv2#1793 Add `pbox_end` param to `BmffImage::boxHandler` to enforce box nesting. Support for 64-bit box lengths looked broken. address + box_length == box_end Extra protection against large allocations. Fix compiler warnings. Fix format specifier. Backport other minor fixes from main. Fix compiler warning. Don't use `auto` on 0.27-maintenance. Back-port Actions and fuzzer to the 0.27-maintenance branch Fix for Exiv2/exiv2#1856 Set -DEXIV2_ENABLE_BMFF=ON in the Actions workflows. Fix mistake in macOS release workflow. Update version: 0.27.5.1 (0.27.5 RC1) Add doc to release build. Remove failing Conan steps from macOS workflow. Update releasenotes.txt Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37363 Add test to improve code coverage. Don't use C++11 features. Fix expat link error on Windows. Only build XMLValidator when XMP is enabled. Regression test for Exiv2/exiv2#1881 Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37492 Add second test file for better code coverage. Regression test for Exiv2/exiv2#1887 Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37889 Standardize on conan 1.39.0 Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38887 Add regression test to Exiv2/exiv2#1918 Regression test for Exiv2/exiv2#1901 Comment out bogus code. Add more checks to prevent integer overflow. Throw an exception on integer overflow. Fix indentation Fix build error on Fedora. We can't use decltype on the 0.27-maintenance branch. Add second test to improve code coverage. Add third test to improve code coverage. Add workaround for conan outage. Revert "Fix for Exiv2/exiv2#1856" Fix indentation Only include expat.h when XMP is enabled. DataBuf::read_uint methods don't exist on the 0.27-maintenance branch. Add bounds checking. Luis Díaz Más (4): msvc: fix compiler warning on x86 cmake: ignore PDBs warnings on Win/Debug/Static buils Increase the timeout from 20 to 60 seconds increase timeout Miloš Komarčević (8): Merge pull request #1548 from Exiv2/add_exif_gamma Check if embedded RAF image is really a TIFF Clarify comment on old vs new RAF Check I/O read result on RAF inspection Add test Limit CR3 previews to JPEG only Limit CR3 previews to JPEG only Expose unsupported CR3 previews as binary Robin Mills (13): Fix Ubuntu 20.04/Release/Sanitizer test breaker update_docs_for_0.27.5.1 Good catch, @hassec. I noticed that change and thought "oh, somebody has update the man page. I didn't know it searched the current directory." I added that code 5+ years ago and forgotten what it does. Right. My bad. I've fixed it. fix_1516_include_path update_docs_again update_27.5_docs_again Costmetic change to trigger CI. The CI is using cmake 3.10. I've back-ported code from main/src/CMakeLists.txt bump_revision_27.5.2 exiv2_v0.27.5RC3 Build Trigger. Another build trigger. Exiv2 v0.27.5
- Loading branch information