Hello,

I can't reproduce the crash.

I get a lot of "Nonfatal Error : 'SEGV-ProcessGpsInfo-gpsinfo-122' Maximum Exif 
directory nesting exceeded (corrupt Exif header)"
but NO crash.

How can I reproduce the problem?

Thanks

On Wed, 5 Aug 2020 12:13:01 +0800 Anshunkang Zhou <seviez...@gmail.com> wrote:
> Package: jhead
> Version: 1:3.04-2
> Severity: important
> 
> Dear Maintainer,
> 
> I found a segmentation fault in the latest version of jhead, detailed
> information is as follows, the poc is in the mail attachment.
> 
> ## System info
> 
> Ubuntu x86_64, gcc , jhead (latest 1:3.04-2)
> 
> ## Configure
> 
> CFLAGS="-g -fsanitize=address" LDFLAGS="-fsanitize=address" make
> 
> ## Command line
> 
> ./jhead -ft -exifmap -de -purejpg -di -dx @@
> 
> ## Output
> 
> ```
> Segmentation fault
> ```
> 
> ## AddressSanitizer output
> 
> ```
> ASAN:SIGSEGV
> =================================================================
> ==27891==ERROR: AddressSanitizer: SEGV on unknown address
> 0x61a00003f288 (pc 0x00000042cb79 bp 0x000000000002 sp 0x7ffefb7a18f0
> T0)
>     #0 0x42cb78 in ProcessGpsInfo /home/seviezhou/jhead/gpsinfo.c:122
>     #1 0x42411f in ProcessExifDir /home/seviezhou/jhead/exif.c:866
>     #2 0x423e0e in ProcessExifDir /home/seviezhou/jhead/exif.c:852
>     #3 0x4255e1 in process_EXIF /home/seviezhou/jhead/exif.c:1041
>     #4 0x4103ad in ReadJpegSections /home/seviezhou/jhead/jpgfile.c:287
>     #5 0x4117ce in ReadJpegSections /home/seviezhou/jhead/jpgfile.c:126
>     #6 0x4117ce in ReadJpegFile /home/seviezhou/jhead/jpgfile.c:379
>     #7 0x408e4e in ProcessFile /home/seviezhou/jhead/jhead.c:905
>     #8 0x402e40 in main /home/seviezhou/jhead/jhead.c:1756
>     #9 0x7ff98ecdf83f in __libc_start_main
> (/lib/x86_64-linux-gnu/libc.so.6+0x2083f)
>     #10 0x406c88 in _start (/home/seviezhou/jhead/jhead+0x406c88)
> 
> AddressSanitizer can not provide additional info.
> SUMMARY: AddressSanitizer: SEGV /home/seviezhou/jhead/gpsinfo.c:122
> ProcessGpsInfo
> ==27891==ABORTING
> ```

Reply via email to