Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
exiv2: Autospec creation for update from version 0.27.4 to version 0.…
…27.5
Antonio Rojas (1):
Fix build with gtest 1.11
Attila Oláh (1):
Fix compilation with -Wunused-variable
Christoph Hasse (3):
fix: avoid processing MOV (quicktime) files when BMFF is enabled
fix: incorrectly triggered enforce check during preview extraction in LoaderTiff::getData(), closes #1829
workaround for softprops/action-gh-release#139
David Houlder (2):
Canon cr3 previews (#1958)
Performance boost: don't read boxes we're not interested in
Heiko Bauke (1):
fix out of range access, minor performance improvement
John55h (1):
Update canonmn_int.cpp
Kevin Backhouse (112):
Regression test for GHSA-mv9g-fxh2-m49m
Don't crash if s > size.
Print message to stderr when EXIV2_DEBUG_MESSAGES is enabled.
fix: use vector::at() rather than operator[] (#1735)
fix: zero initialize local variables. (#1737)
fix: stricter date parsing in value.cpp (#1720)
Regression test for GHSA-pvjp-m4f6-q984
Prevent divide-by-zero crash.
Defensive coding to avoid 0x80000000/0xFFFFFFFF FPE.
fix: fix incorrect loop condition (#1752)
Regression test for GHSA-h9x9-4f77-336w
Throw exception if lens info wasn't found.
Check that findKey didn't return end().
Regression test for GHSA-583f-w9pm-99r2
Better bounds checking in Jp2Image::printStructure
Regression test for GHSA-hqjh-hpv8-8r9p
Extra checking to prevent the loop counter from wrapping around.
Defensive coding changes to avoid integer overflow in loop conditions.
Better fix for potential integer overflow in `bytes.size() - 3`.
Type of escapeStart should be size_t.
Regression test for GHSA-v5g7-46xf-h728
Check that `type` isn't an empty string.
Safer std::vector indexing.
Better way to print the error message.
Regression test for GHSA-m479-7frc-gqqg
dirLength == 0 can cause an infinite loop.
Defensive programming in Image::printIFDStructure
Regression test for GHSA-9jh3-fcc3-g6hv
Make sure that read is complete to prevent infinite loop.
Regression test for https://github.com/Exiv2/exiv2/security/advisories/GHSA-g44w-q3vm-gwjq
&bytes[0] will crash if bytes has zero elements.
Skip unittest because -pR is disabled in release builds so the test fails.
Remove redundant check.
Regression test for GHSA-mvc4-g5pv-4qqq
bufRead needs to be adjusted after seek()
Improved handling of jpg segments to avoid out-of-bound reads.
Fix compiler warning.
Update src/jpgimage.cpp
poc from GHSA-9jh3-fcc3-g6hv can now be parsed without error.
Add comment to explain bounds-check.
Fix build error when EXIV2_DEBUG_MESSAGES is enabled.
Fix warning: comparison of integer expressions of different signedness
Regression test for Exiv2/exiv2#1812
Check size before allocation to avoid out-of-memory errors.
Regression test for Exiv2/exiv2#1815
Add bounds-check to prevent out-of-bounds read in memcmp.
Regression test for Exiv2/exiv2#1817
Use DataBuf, rather than new[], for automatic delete when an exception is throw.
Regression test for Exiv2/exiv2#1819
Check that the string isn't empty
Add static_cast to fix build error on Windows.
Add comment to explain the bounds-check.
Regression test for Exiv2/exiv2#1827
Check value is in range before casting from double to uint32_t, to avoid undefined behavior.
Update src/tags_int.cpp
Regression test for Exiv2/exiv2#1830
Safer casting from double to long.
Replace assertion with an error message.
Regression test for Exiv2/exiv2#1838
Check that the float is within the range of an int before casting.
Regression test for Exiv2/exiv2#1841
Use DataBuf rather than raw malloc.
Replace assertion with an error message.
Test for Exiv2/exiv2#1821
Regression test for Exiv2/exiv2#1845
Replace assertion with an error message.
Regression test for Exiv2/exiv2#1793
Add `pbox_end` param to `BmffImage::boxHandler` to enforce box nesting.
Support for 64-bit box lengths looked broken.
address + box_length == box_end
Extra protection against large allocations.
Fix compiler warnings.
Fix format specifier.
Backport other minor fixes from main.
Fix compiler warning.
Don't use `auto` on 0.27-maintenance.
Back-port Actions and fuzzer to the 0.27-maintenance branch
Fix for Exiv2/exiv2#1856
Set -DEXIV2_ENABLE_BMFF=ON in the Actions workflows.
Fix mistake in macOS release workflow.
Update version: 0.27.5.1 (0.27.5 RC1)
Add doc to release build.
Remove failing Conan steps from macOS workflow.
Update releasenotes.txt
Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37363
Add test to improve code coverage.
Don't use C++11 features.
Fix expat link error on Windows.
Only build XMLValidator when XMP is enabled.
Regression test for Exiv2/exiv2#1881
Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37492
Add second test file for better code coverage.
Regression test for Exiv2/exiv2#1887
Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37889
Standardize on conan 1.39.0
Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38887
Add regression test to Exiv2/exiv2#1918
Regression test for Exiv2/exiv2#1901
Comment out bogus code.
Add more checks to prevent integer overflow.
Throw an exception on integer overflow.
Fix indentation
Fix build error on Fedora.
We can't use decltype on the 0.27-maintenance branch.
Add second test to improve code coverage.
Add third test to improve code coverage.
Add workaround for conan outage.
Revert "Fix for Exiv2/exiv2#1856"
Fix indentation
Only include expat.h when XMP is enabled.
DataBuf::read_uint methods don't exist on the 0.27-maintenance branch.
Add bounds checking.
Luis Díaz Más (4):
msvc: fix compiler warning on x86
cmake: ignore PDBs warnings on Win/Debug/Static buils
Increase the timeout from 20 to 60 seconds
increase timeout
Miloš Komarčević (8):
Merge pull request #1548 from Exiv2/add_exif_gamma
Check if embedded RAF image is really a TIFF
Clarify comment on old vs new RAF
Check I/O read result on RAF inspection
Add test
Limit CR3 previews to JPEG only
Limit CR3 previews to JPEG only
Expose unsupported CR3 previews as binary
Robin Mills (13):
Fix Ubuntu 20.04/Release/Sanitizer test breaker
update_docs_for_0.27.5.1
Good catch, @hassec. I noticed that change and thought "oh, somebody has update the man page. I didn't know it searched the current directory." I added that code 5+ years ago and forgotten what it does. Right. My bad. I've fixed it.
fix_1516_include_path
update_docs_again
update_27.5_docs_again
Costmetic change to trigger CI.
The CI is using cmake 3.10. I've back-ported code from main/src/CMakeLists.txt
bump_revision_27.5.2
exiv2_v0.27.5RC3
Build Trigger.
Another build trigger.
Exiv2 v0.27.5- Loading branch information
