Regression test for GHSA-496f-x7cq-cq39

Author: kevinbackhouse

test/data/issue_ghsa_496f_x7cq_cq39_poc.jpg

@@ -0,0 +1,20 @@
+# -*- coding: utf-8 -*-
+
+from system_tests import CaseMeta, CopyTmpFiles, path, check_no_ASAN_UBSAN_errors
+@CopyTmpFiles("$data_path/issue_ghsa_496f_x7cq_cq39_poc.jpg")
+
+class EpsImageDeleteSegV(metaclass=CaseMeta):
+    """
+    Regression test for the bug described in:
+    https://github.com/Exiv2/exiv2/security/advisories/GHSA-496f-x7cq-cq39
+    """
+    url = "https://github.com/Exiv2/exiv2/security/advisories/GHSA-496f-x7cq-cq39"
+
+    filename = path("$tmp_path/issue_ghsa_496f_x7cq_cq39_poc.jpg")
+    commands = ["$exiv2 rm $filename"]
+    stdout = [""]
+    stderr = [
+        """$exception_in_erase """ + filename + """:
+$kerCorruptedMetadata
+"""]
+    retval = [1]

tests/bugfixes/github/test_issue_ghsa_496f_x7cq_cq39.py

@@ -121,6 +121,7 @@ def get_valid_files(data_dir):
         "issue_ghsa_hrw9_ggg3_3r4r_poc.jpg",
         "issue_ghsa_g9xm_7538_mq8w_poc.mov",
         "issue_ghsa_38h4_fx85_qcx7_poc.tiff",
+        "issue_ghsa_496f_x7cq_cq39_poc.jpg",
         "pocIssue283.jpg",
         "poc_1522.jp2",
         "xmpsdk.xmp",