Ensure the MakerNote data pointers are initialized with NULL. 94/235594/2 accepted/tizen_6.0_unified accepted/tizen_6.0_unified_hotfix tizen_6.0 tizen_6.0_hotfix accepted/tizen/6.0/unified/20201030.110329 accepted/tizen/6.0/unified/hotfix/20201102.233921 accepted/tizen/6.0/unified/hotfix/20201103.050952 accepted/tizen/unified/20200609.153652 submit/tizen/20200608.074032 submit/tizen_6.0/20201029.205502 submit/tizen_6.0_hotfix/20201102.192902 submit/tizen_6.0_hotfix/20201103.115102 tizen_6.0.m2_release
authorDan Fandrich <dan@coneharvesters.com>
Sat, 16 May 2020 17:29:21 +0000 (19:29 +0200)
committerJeongmo Yang <jm80.yang@samsung.com>
Mon, 8 Jun 2020 03:44:34 +0000 (12:44 +0900)
commitb3fd1b4c572667275713f2e7adae0fad548d311f
tree4cdfe65b2fe3979096fdac30bb644f927053407e
parent5819a64fcec0610e4ab984887e141c1a619d8687
Ensure the MakerNote data pointers are initialized with NULL.

This ensures that an uninitialized pointer isn't dereferenced later in
the case where the number of components (and therefore size) is 0.

This fixes the second issue reported at
https://sourceforge.net/p/libexif/bugs/125/

CVE-2020-13113

Change-Id: I93a19b0d66ef34b22a4485a492be92836711eb0a
Signed-off-by: Jeongmo Yang <jm80.yang@samsung.com>
libexif/canon/exif-mnote-data-canon.c
libexif/fuji/exif-mnote-data-fuji.c
libexif/olympus/exif-mnote-data-olympus.c
libexif/pentax/exif-mnote-data-pentax.c
packaging/libexif.spec