From: Lutz M. <lu...@us...> - 2007-12-14 19:54:05
|
Update of /cvsroot/libexif/libexif/libexif In directory sc8-pr-cvs6.sourceforge.net:/tmp/cvs-serv13154/libexif Modified Files: exif-loader.c Log Message: 2007-12-14 Lutz Mueller <lu...@us...> Bug pointed out by Meder Kydyraliev, Google Security Team: * libexif/exif-loader.c: (exif_loader_write) Ignore buffers of zero length. Index: exif-loader.c =================================================================== RCS file: /cvsroot/libexif/libexif/libexif/exif-loader.c,v retrieving revision 1.25 retrieving revision 1.26 diff -u -p -d -r1.25 -r1.26 --- exif-loader.c 26 Jun 2007 02:30:32 -0000 1.25 +++ exif-loader.c 14 Dec 2007 19:53:53 -0000 1.26 @@ -176,6 +176,8 @@ exif_loader_write (ExifLoader *eld, unsi break; } + if (!len) + return 1; exif_log (eld->log, EXIF_LOG_CODE_DEBUG, "ExifLoader", "Scanning %i byte(s) of data...", len); |