Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

null dereference in QuickTimeVideo::userDataDecoder #2376

Closed
kevinbackhouse opened this issue Oct 8, 2022 · 0 comments · Fixed by #2378
Closed

null dereference in QuickTimeVideo::userDataDecoder #2376

kevinbackhouse opened this issue Oct 8, 2022 · 0 comments · Fixed by #2378
Assignees
Labels
bug OSS-Fuzz Bug reported by https://google.github.io/oss-fuzz/

Comments

@kevinbackhouse
Copy link
Collaborator

Reported by OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51751

There is a null dereference here:

xmpData_[exvGettext(tv->label_)] = Exiv2::toString(buf.data());

The problem is that tv can be null.

quicktimevideo.cpp is a new file, so this bug doesn't affect any released versions of exiv2.

poc: https://user-images.githubusercontent.com/4358136/194719331-b9106875-7031-427b-8e78-407620bf7ba6.mp4

To reproduce:

exiv2 poc.mp4

(Causes exiv2 to crash.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug OSS-Fuzz Bug reported by https://google.github.io/oss-fuzz/
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant