Skip to content

c2patool 0.22.0 fails to validate older media #1413

@hackerfactor

Description

@hackerfactor

Sample file:
https://fotoforensics.com/analysis.php?id=dc1be89f99cd320c5f7dbee556277e82ddd30b03.103760&fmt=orig

c2patool 0.19.0 correctly lists the manifest.
c2patool 0.22.0 fails to list the manifest. Instead, it sends an error to stderr:

[2025-09-13T19:59:31Z ERROR c2pa::status_tracker] Validation error: LogItem {
        kind: Failure,
        label: "self#jumbf=/c2pa/urn:uuid:88eb2bb3-d5f9-4516-9265-b65277b4b861/c2pa.assertions/c2pa.actions.v2",
        description: "Actions missing action array",
        crate_name: "c2pa",
        crate_version: "0.63.0",
        file: "sdk/src/claim.rs",
        function: "verify_actions",
        line: 2006,
        err_val: Some(
            "ValidationRule(\"No Action array in Actions\")",
        ),
        validation_status: Some(
            "assertion.action.malformed",
        ),
        ingredient_uri: None,
    }
Error: validation rule was violated: No Action array in Actions

The expected result:
If the manifest has a problem, it should be in the stdout json's "failure[]" section. It should not abort and dump output to stderr.

This error is not related to the file being a forgery. (I have plenty of non-forgery examples that fail the same way.) The problem is related to only supporting C2PA v2.2 and failing to process anything older.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions