Dan Fandrich [Fri, 18 May 2018 08:08:48 +0000 (10:08 +0200)]
Skip uninteresting APPn markers when searching for EXIF block.
libexif rejects images where any APPn marker other than APP0 appears
before APP1. The EXIF spec says that this is not allowed, but there are
a lot of images where it happens anyway (e.g., from Photoshop).
Patch from Google.
Dan Fandrich [Fri, 11 May 2018 16:25:22 +0000 (18:25 +0200)]
Use a unique log message for an Exif header found at the start.
This occurs if exif_data_load_data is given just an Exif data block vs.
a JPEG block that must be scanned for the APP1 marker.
Dan Fandrich [Fri, 20 Apr 2018 16:05:19 +0000 (18:05 +0200)]
Reduce maximum recursion depth in exif_data_load_data_content
This only needs to be a small, single digit integer for normal files,
and reducing the maximum closer to this reduces the time and space
needed to detect pathological cases.
Dan Fandrich [Wed, 31 Jan 2018 21:31:11 +0000 (22:31 +0100)]
Fixed a handful of strange character encoding issues in comments
Dan Fandrich [Wed, 27 Dec 2017 22:59:43 +0000 (23:59 +0100)]
Replaced obsolete references to CVS and SourceForge.
Also, switched links to https: where available.
Marcus Meissner [Wed, 26 Jul 2017 15:30:19 +0000 (17:30 +0200)]
also switch byte order, and also test saving
Marcus Meissner [Wed, 26 Jul 2017 08:13:56 +0000 (10:13 +0200)]
check data size before reading daat
Marcus Meissner [Wed, 26 Jul 2017 07:35:45 +0000 (09:35 +0200)]
check for good sizes in the byteorder swap function in the makernote code.
fixes
https://sourceforge.net/p/libexif/bugs/128/
Marcus Meissner [Tue, 25 Jul 2017 22:04:17 +0000 (00:04 +0200)]
abort earlier
Marcus Meissner [Tue, 25 Jul 2017 21:44:44 +0000 (23:44 +0200)]
fixes some (not all) buffer overreads during decoding pentax makernote entries.
This should fix:
https://sourceforge.net/p/libexif/bugs/125/ CVE-2016-6328
Marcus Meissner [Tue, 25 Jul 2017 21:38:56 +0000 (23:38 +0200)]
On saving makernotes, make sure the makernote container tags has a type
with 1 byte components.
Fixes (at least):
https://sourceforge.net/p/libexif/bugs/130
https://sourceforge.net/p/libexif/bugs/129
Marcus Meissner [Mon, 24 Jul 2017 13:20:58 +0000 (15:20 +0200)]
add a test-fuzzer that can be used to be called by AFL that tries to
do various exif decoding on the passed file.
Dan Fandrich [Fri, 26 May 2017 14:16:41 +0000 (07:16 -0700)]
Fixed an unused variable warning
Dan Fandrich [Fri, 26 May 2017 13:13:14 +0000 (06:13 -0700)]
Fixed the internal MakerNote tag structs to use the correct enum type.
Patch by Google.
Dan Fandrich [Fri, 26 May 2017 11:22:17 +0000 (04:22 -0700)]
Fixed some type warnings in log messages by explicitly casting to unsigned
Dan Fandrich [Fri, 26 May 2017 09:50:34 +0000 (02:50 -0700)]
Removed some extraneous #define DEBUG
Dan Fandrich [Fri, 26 May 2017 08:41:02 +0000 (01:41 -0700)]
Use the standard assert() function instead of rolling our own
Dan Fandrich [Thu, 1 Sep 2016 22:40:20 +0000 (15:40 -0700)]
Recent updates
Dan Fandrich [Thu, 1 Sep 2016 22:38:43 +0000 (15:38 -0700)]
configure.ac: Made some changes to void warnings with modern automake versions
Dan Fandrich [Thu, 1 Sep 2016 21:53:52 +0000 (14:53 -0700)]
Mention updated Swedish translation
Dan Fandrich [Thu, 1 Sep 2016 21:52:02 +0000 (14:52 -0700)]
Mention translation updates
Dan Fandrich [Thu, 1 Sep 2016 21:51:25 +0000 (14:51 -0700)]
Added Malay translation from launchpad.net
Dan Fandrich [Thu, 1 Sep 2016 21:47:05 +0000 (14:47 -0700)]
Cleaned up non-TP translations to match the latest strings:
be.po bs.po sq.po sr.po tr.po zh_CN.po
Dan Fandrich [Thu, 1 Sep 2016 21:34:05 +0000 (14:34 -0700)]
Updated non-TP translations from launchpad.net's "yakkety"
translations: en_AU.po
Dan Fandrich [Thu, 1 Sep 2016 21:26:19 +0000 (14:26 -0700)]
po/ms.po: Added Malay translation from launchpad.net
Dan Fandrich [Thu, 1 Sep 2016 20:57:20 +0000 (13:57 -0700)]
Updated non-TP translations from launchpad.net's "yakkety"
translations:
bs.po en_GB.po pt.po pt_BR.po ru.po
Dan Fandrich [Thu, 1 Sep 2016 20:20:31 +0000 (13:20 -0700)]
po/sv.po: Updated Swedish translation by Sebastian Rasmussen
Dan Fandrich [Thu, 1 Sep 2016 20:08:20 +0000 (13:08 -0700)]
Fixed a typo in translatable text (fix #123 thanks to Sebastian)
Marcus Meissner [Sat, 2 Apr 2016 13:04:08 +0000 (15:04 +0200)]
updated vietnamese
Marcus Meissner [Sat, 2 Apr 2016 13:03:45 +0000 (15:03 +0200)]
updated spanish
Marcus Meissner [Sat, 2 Apr 2016 13:03:05 +0000 (15:03 +0200)]
updated german
Marcus Meissner [Sat, 2 Apr 2016 13:02:40 +0000 (15:02 +0200)]
updated svensk
Marcus Meissner [Mon, 26 May 2014 06:24:17 +0000 (08:24 +0200)]
added AC_SYS_LARGEFILE just in case we ever get jpegs larger than 2GB
Dan Fandrich [Sun, 5 Jan 2014 10:13:43 +0000 (02:13 -0800)]
po/es.po: Updated Spanish translation by Antonio Ceballos
Dan Fandrich [Sat, 13 Jul 2013 20:36:59 +0000 (13:36 -0700)]
po/da.po: Updated Danish translation by Joe Hansen
po/de.po: Updated German translation by Christian Kirbach
po/fr.po: Updated French translation by Frédéric Marchal
po/uk.po: Updated Ukrainian translation by Yuri Chornoivan
Dan Fandrich [Sat, 13 Jul 2013 20:35:48 +0000 (13:35 -0700)]
FNumber => F-Number
Dan Fandrich [Sat, 13 Jul 2013 20:34:50 +0000 (13:34 -0700)]
Fixed a C89 compatibility issue (bug #117 reported by
Guenter Knauf)
Dan Fandrich [Sat, 23 Feb 2013 20:18:14 +0000 (12:18 -0800)]
po/pl.po: Updated Polish translation by Jakub Bogusz
Dan Fandrich [Fri, 13 Jul 2012 20:12:39 +0000 (13:12 -0700)]
I suppose I should take some credit (for better or for worse)
Dan Fandrich [Thu, 12 Jul 2012 20:32:43 +0000 (13:32 -0700)]
Prepare for continued development
Dan Fandrich [Thu, 12 Jul 2012 19:25:21 +0000 (12:25 -0700)]
Prepare for continued development
Dan Fandrich [Thu, 12 Jul 2012 20:24:14 +0000 (13:24 -0700)]
Mention the fixed security issues in the NEWS file
Dan Fandrich [Thu, 12 Jul 2012 17:48:14 +0000 (10:48 -0700)]
Released 0.6.21
Dan Fandrich [Thu, 12 Jul 2012 17:44:42 +0000 (10:44 -0700)]
List the various security fixes just checked in
Dan Fandrich [Thu, 12 Jul 2012 17:29:05 +0000 (10:29 -0700)]
Fixed some possible division-by-zeros in Olympus-style makernotes
This fixes bug #3434545, a.k.a. CVE-2012-2837
Dan Fandrich [Thu, 12 Jul 2012 17:28:26 +0000 (10:28 -0700)]
Fix a buffer overflow on corrupted JPEG data
An unsigned data length might wrap around when decremented
below zero, bypassing sanity checks on length.
This code path can probably only occur if exif_data_load_data()
is called directly by the application on data that wasn't parsed
by libexif itself.
This solves the other part of CVE-2012-2836
Dan Fandrich [Thu, 12 Jul 2012 17:27:27 +0000 (10:27 -0700)]
Fix a buffer overflow on corrupt EXIF data.
This fixes bug #3434540 and fixes part of CVE-2012-2836
Dan Fandrich [Thu, 12 Jul 2012 17:26:01 +0000 (10:26 -0700)]
Fixed a buffer overflow problem in exif_entry_get_value
If the application passed in a buffer length of 0, then it would
be treated as the buffer had unlimited length.
This fixes CVE-2012-2841
Dan Fandrich [Thu, 12 Jul 2012 17:13:03 +0000 (10:13 -0700)]
Fixed an out of bounds read on corrupted input.
The EXIF_TAG_COPYRIGHT tag ought to be, but perhaps is not,
NUL-terminated.
This fixes CVE-2012-2812
Dan Fandrich [Thu, 12 Jul 2012 17:12:24 +0000 (10:12 -0700)]
Don't read past the end of a tag when converting from UTF-16
This fixes CVE-2012-2813
Dan Fandrich [Thu, 12 Jul 2012 17:11:30 +0000 (10:11 -0700)]
Fixed an off-by-one error in exif_convert_utf16_to_utf8()
This can cause a one-byte NUL write past the end of the buffer.
This fixes CVE-2012-2840
Dan Fandrich [Thu, 12 Jul 2012 17:10:34 +0000 (10:10 -0700)]
Fixed some buffer overflows in exif_entry_format_value()
This fixes CVE-2012-2814
Jan Patera [Wed, 11 Jul 2012 05:05:47 +0000 (07:05 +0200)]
Exif version 2.3 (defined by JEITA CP-3451B and CIPA DC 008-2010) is now recognized
Dan Fandrich [Mon, 9 Jul 2012 20:53:08 +0000 (13:53 -0700)]
po/da.po: Updated Danish translation by Joe Hansen
po/de.po: Updated German translation by Christian Kirbach
po/pl.po: Updated Polish translation by Jakub Bogusz
po/sk.po: Updated Slovak translation by Ivan Masár
po/uk.po: Updated Ukrainian translation by Yuri Chornoivan
po/vi.po: Updated Vietnamese translation by Trần Ngọc Quân
Mention that uk.po must now be updated through translationproject.org
Dan Fandrich [Mon, 25 Jun 2012 18:58:58 +0000 (11:58 -0700)]
po/en_CA.po: Updated Canadian English translation
Dan Fandrich [Mon, 25 Jun 2012 18:55:44 +0000 (11:55 -0700)]
Updated non-TP translations to the latest strings in the source code
Dan Fandrich [Mon, 25 Jun 2012 18:38:53 +0000 (11:38 -0700)]
Minor wording change
Dan Fandrich [Mon, 25 Jun 2012 07:41:55 +0000 (00:41 -0700)]
po/bs.po: Removed some erroneous embedded \r\n in the translations
Dan Fandrich [Mon, 25 Jun 2012 07:28:25 +0000 (00:28 -0700)]
Added new translations from launchpad.net's "precise" translations:
po/en_AU.po: Added English (Australian) translation by Joel Pickett
po/uk.po: Added Ukrainian translation by Yuri Chornoivan
Dan Fandrich [Mon, 25 Jun 2012 07:20:35 +0000 (00:20 -0700)]
Updated non-TP translations from launchpad.net's "precise"
translations:
be.po bs.po en_GB.po pt.po pt_BR.po ru.po sq.po sr.po tr.po zh_CN.po
Dan Fandrich [Mon, 25 Jun 2012 07:04:53 +0000 (00:04 -0700)]
Updated links, minor edits
Dan Fandrich [Mon, 25 Jun 2012 06:58:24 +0000 (23:58 -0700)]
Added new Canon lens.
Dan Fandrich [Tue, 15 May 2012 22:31:57 +0000 (15:31 -0700)]
po/vi.po: Updated Vietnamese translation by Trần Ngọc Quân
Dan Fandrich [Tue, 8 Nov 2011 07:39:13 +0000 (23:39 -0800)]
Updated Launchpad link
Dan Fandrich [Tue, 8 Nov 2011 07:38:51 +0000 (23:38 -0800)]
po/de.po: Updated German translation by Christian Kirbach
Dan Fandrich [Fri, 26 Aug 2011 08:02:22 +0000 (01:02 -0700)]
po/cs.po: Updated Czech translation by Jan Patera
po/da.po: Updated Danish translation by Joe Hansen
po/nl.po: Updated Dutch translation by Erwin Poeze
po/pl.po: Updated Polish translation by Jakub Bogusz
po/sk.po: Updated Slovak translation by Ivan Masár
po/sv.po: Updated Swedish translation by Daniel Nylander
Dan Fandrich [Fri, 26 Aug 2011 07:29:43 +0000 (00:29 -0700)]
A few in-code documentation improvements
Dan Fandrich [Tue, 12 Jul 2011 07:04:16 +0000 (00:04 -0700)]
Made mnote_fuji_tag_get_description and
mnote_canon_tag_get_descripton more robust should any NULL
descriptions be added to the table (bug #3307219)
Dan Fandrich [Thu, 12 May 2011 18:26:07 +0000 (11:26 -0700)]
Added new Canon lens. Reported by Adrian von Bidder via Debian.
Dan Fandrich [Mon, 18 Apr 2011 23:46:33 +0000 (16:46 -0700)]
Added a NULL pointer check to attempt to keep Coverity Scan happy
Dan Fandrich [Thu, 17 Feb 2011 06:25:07 +0000 (22:25 -0800)]
Changed "knots" to more clear "nautical miles" (Ubuntu Launchpad bug
https://bugs.launchpad.net/bugs/712115 reported by Daniel Thibault).
Dan Fandrich [Thu, 20 Jan 2011 03:42:26 +0000 (19:42 -0800)]
Added another Canon lens to the Canon MakerNotes (patch from drochner in the
NetBSD pkgsrc)
Dan Fandrich [Thu, 16 Dec 2010 05:59:15 +0000 (21:59 -0800)]
Prepare for continued development
Dan Fandrich [Thu, 16 Dec 2010 06:24:32 +0000 (22:24 -0800)]
Removed UNICODE BOM at head of file
Dan Fandrich [Thu, 16 Dec 2010 05:55:25 +0000 (21:55 -0800)]
Released 0.6.20
Jan Patera [Wed, 15 Dec 2010 06:01:34 +0000 (07:01 +0100)]
Updated Czech translation
Dan Fandrich [Tue, 14 Dec 2010 06:41:42 +0000 (22:41 -0800)]
po/bs.po: Added Bosnian translation from launchpad.net
po/tr.po: Added Turkish translation from launchpad.net
Dan Fandrich [Tue, 14 Dec 2010 06:33:54 +0000 (22:33 -0800)]
Updated non-TP translations from launchpad.net:
be.po en_GB.po pt_BR.po pt.po ru.po sq.po sr.po zh_CN.po
Dan Fandrich [Tue, 14 Dec 2010 05:54:40 +0000 (21:54 -0800)]
po/da.po: Updated Danish translation by Joe Hansen
Dan Fandrich [Fri, 10 Dec 2010 20:33:52 +0000 (12:33 -0800)]
Changed the display of rational numbers to estimate the number of
significant figures (based on the size of the denominator) and show
that number of decimal places. This simplifies the output in the
case of integers (e.g. resolution), and shows all the available
accuracy in the case of rationals (e.g. latitude & longitude).
Dan Fandrich [Wed, 1 Dec 2010 22:20:41 +0000 (14:20 -0800)]
Reuse exif_mnote_data_olympus_identify_variant() to detect the MakerNote
type while actually parsing the tag.
Dan Fandrich [Wed, 3 Nov 2010 00:09:46 +0000 (17:09 -0700)]
Fixed name of digikam
Dan Fandrich [Wed, 20 Oct 2010 06:46:35 +0000 (23:46 -0700)]
Updates to reflect recent changes
Dan Fandrich [Fri, 15 Oct 2010 06:30:22 +0000 (23:30 -0700)]
Fixed some invalid format specifiers and typecasts
Dan Fandrich [Fri, 8 Oct 2010 06:50:19 +0000 (23:50 -0700)]
Remove obsolete strncasecmp macro
Dan Fandrich [Fri, 8 Oct 2010 04:20:04 +0000 (21:20 -0700)]
Refactored MakerNote detection code to put detection of each type
into the module handling that type
Dan Fandrich [Thu, 23 Sep 2010 20:56:41 +0000 (13:56 -0700)]
exif_entry_dump() now displays the correct tag name for GPS tags by taking
the IFD into account when looking up the name. Fixes bug #3073307.
Dan Fandrich [Wed, 11 Aug 2010 02:11:14 +0000 (19:11 -0700)]
Removed redundant sentence. Fixes Ubuntu bug #197306
Jan Patera [Fri, 23 Jul 2010 06:50:46 +0000 (08:50 +0200)]
Canon EOS 5D Mark II writes Aperture values as invalid values 0x80000000/1
which makes pow() throw floating-point exceptions.
Dan Fandrich [Thu, 17 Jun 2010 05:33:53 +0000 (22:33 -0700)]
Updated da, it, nl translations from Translation Project
Dan Fandrich [Thu, 6 May 2010 20:43:54 +0000 (13:43 -0700)]
Removed non-ASCII characters from the few source files that had them
Dan Fandrich [Tue, 23 Mar 2010 20:53:36 +0000 (13:53 -0700)]
Updated Danish translation by Joe Hansen
Dan Fandrich [Fri, 19 Feb 2010 06:41:18 +0000 (22:41 -0800)]
po/da.po: Updated Danish translation by Joe Hansen
po/de.po: Updated German translation by Marcus Meissner
po/ja.po: Updated Japanese translation by Tadashi Jokagi
po/pl.po: Updated Polish translation by Jakub Bogusz
po/vi.po: Updated Vietnamese translation by Clytie Siddall
Dan Fandrich [Sat, 6 Feb 2010 00:21:33 +0000 (16:21 -0800)]
Updated translation
Dan Fandrich [Sat, 6 Feb 2010 00:15:22 +0000 (16:15 -0800)]
Made the case of text output be more consistent. Now, tag titles
have each word capitalized (like a title) and tag values
are always lower case, except the first word which is capitalized
(more like a sentence).
Dan Fandrich [Fri, 29 Jan 2010 19:26:54 +0000 (11:26 -0800)]
Commented out some overly-verbose debug messages
Dan Fandrich [Mon, 25 Jan 2010 21:58:50 +0000 (13:58 -0800)]
configure.ac: Turned on the --enable-silent-rules configure option
Dan Fandrich [Fri, 8 Jan 2010 23:17:02 +0000 (15:17 -0800)]
Factored out interpret_maker_note
Jan Patera [Tue, 5 Jan 2010 21:02:51 +0000 (22:02 +0100)]
1) MNOTE_NIKON_TAG_LENSTYPE: added one more value
2) MNOTE_OLYMPUS_TAG_DIGIZOOM: fixed div by zero
Dan Fandrich [Thu, 31 Dec 2009 04:37:59 +0000 (20:37 -0800)]
po/da.po: Updated Danish translation by Joe Hansen
po/sk.po: Updated Slovak translation by Ivan Masár
po/sv.po: Updated Swedish translation by Daniel Nylander