Skip to content

Conversation

Shin-Yan
Copy link

@Shin-Yan Shin-Yan commented Sep 7, 2023

Summary

fix the heap UAF problem caused by free(Sections[a].Data) by adding a check called CheckOrientationPtrs()

Test with the Poc

jhead-new/jhead -norot Poc_SQ187_jhead_test.jpg

Nonfatal Error : 'Poc_SQ187_jhead_test.jpg' Suspicious offset of first Exif IFD value

Nonfatal Error : 'Poc_SQ187_jhead_test.jpg' Illegally sized Exif subdirectory (12336 entries)

Nonfatal Error : 'Poc_SQ187_jhead_test.jpg' Bad components count 30303030

Nonfatal Error : 'Poc_SQ187_jhead_test.jpg' Undefined rotation value 1291856384 in Exif

Nonfatal Error : 'Poc_SQ187_jhead_test.jpg' Bad components count 30303030

Nonfatal Error : 'Poc_SQ187_jhead_test.jpg' Bad components count 30303030

Nonfatal Error : 'Poc_SQ187_jhead_test.jpg' Bad components count 30303030

Nonfatal Error : 'Poc_SQ187_jhead_test.jpg' Illegal subdirectory link in Exif header
Modified: Poc_SQ187_jhead_test.jpg

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant