Libvips: vipsheader hangs on AFL generated input

Created on 29 Jul 2019  ·  4Comments  ·  Source: libvips/libvips

base64 encoded image content: UEYgNiAgMCAjRgEAGwAAAAMACzxa//8AABQAgP//ABEIAPsBIBvtIooA+vA=

bug in development

Most helpful comment

OK, fixed in 8.8, this will be in 8.8.2. Thank you very much for reporting this dumbness!

All 4 comments

command line:
./.libs/vipsheader <input_image>

Hello @Kyle-Kyle ,

I see this too with:

$ echo UEYgNiAgMCAjRgEAGwAAAAMACzxa//8AABQAgP//ABEIAPsBIBvtIooA+vA= | base64 -d > x
$ vipsheader x

It looks like it's trying to read the ppm header and failing. Thanks for reporting this!

OK, fixed in 8.8, this will be in 8.8.2. Thank you very much for reporting this dumbness!

libvips compiled using the --without-ppm flag is not affected by this.

Was this page helpful?
0 / 5 - 0 ratings