2007-12-14 Lutz Mueller <lutz@users.sourceforge.net>

	Bug pointed out by Meder Kydyraliev, Google Security Team:

	* libexif/exif-loader.c: (exif_loader_write) Ignore buffers of
	zero length.

diff --git a/ChangeLog b/ChangeLog
index ad9f8dc..e6b0f50 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,10 @@
+2007-12-14  Lutz Mueller <lutz@users.sourceforge.net>
+
+       Bug pointed out by Meder Kydyraliev, Google Security Team:
+
+       * libexif/exif-loader.c: (exif_loader_write) Ignore buffers of
+       zero length.
+
 2007-12-07  Jan Patera <patera@users.sourceforge.net>
 
        * Added support for Fuji makernotes

diff --git a/libexif/exif-loader.c b/libexif/exif-loader.c
index 7384388..a8b8170 100644 (file)
--- a/libexif/exif-loader.c
+++ b/libexif/exif-loader.c
@@ -176,6 +176,8 @@ exif_loader_write (ExifLoader *eld, unsigned char *buf, unsigned int len)
                break;
        }
 
+       if (!len)
+               return 1;
        exif_log (eld->log, EXIF_LOG_CODE_DEBUG, "ExifLoader",
                  "Scanning %i byte(s) of data...", len);