Pillow/Tests/check_png_dos.py

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

66 lines
1.6 KiB
Python
Raw Permalink Normal View History

from __future__ import annotations
2024-01-20 14:23:03 +03:00
2014-12-30 04:10:27 +03:00
import zlib
from io import BytesIO
from PIL import Image, ImageFile, PngImagePlugin
2014-12-31 03:57:24 +03:00
TEST_FILE = "Tests/images/png_decompression_dos.png"
2015-04-24 02:26:52 +03:00
2024-01-19 13:50:27 +03:00
def test_ignore_dos_text() -> None:
2020-03-28 04:51:28 +03:00
ImageFile.LOAD_TRUNCATED_IMAGES = True
2020-03-28 04:51:28 +03:00
try:
im = Image.open(TEST_FILE)
im.load()
finally:
ImageFile.LOAD_TRUNCATED_IMAGES = False
2024-03-02 05:12:17 +03:00
assert isinstance(im, PngImagePlugin.PngImageFile)
2020-03-28 04:51:28 +03:00
for s in im.text.values():
assert len(s) < 1024 * 1024, "Text chunk larger than 1M"
2020-03-28 04:51:28 +03:00
for s in im.info.values():
assert len(s) < 1024 * 1024, "Text chunk larger than 1M"
2024-01-19 13:50:27 +03:00
def test_dos_text() -> None:
2020-03-28 04:51:28 +03:00
try:
im = Image.open(TEST_FILE)
im.load()
except ValueError as msg:
assert msg, "Decompressed Data Too Large"
return
2024-03-02 05:12:17 +03:00
assert isinstance(im, PngImagePlugin.PngImageFile)
2020-03-28 04:51:28 +03:00
for s in im.text.values():
assert len(s) < 1024 * 1024, "Text chunk larger than 1M"
2014-12-30 04:10:27 +03:00
2024-01-19 13:50:27 +03:00
def test_dos_total_memory() -> None:
2020-03-28 04:51:28 +03:00
im = Image.new("L", (1, 1))
compressed_data = zlib.compress(b"a" * 1024 * 1023)
2014-12-30 04:10:27 +03:00
2020-03-28 04:51:28 +03:00
info = PngImagePlugin.PngInfo()
2015-04-24 02:26:52 +03:00
2020-03-28 04:51:28 +03:00
for x in range(64):
info.add_text(f"t{x}", compressed_data, zip=True)
info.add_itxt(f"i{x}", compressed_data, zip=True)
2014-12-30 04:10:27 +03:00
2020-03-28 04:51:28 +03:00
b = BytesIO()
im.save(b, "PNG", pnginfo=info)
b.seek(0)
2015-04-24 02:26:52 +03:00
2020-03-28 04:51:28 +03:00
try:
im2 = Image.open(b)
except ValueError as msg:
2024-01-19 13:50:27 +03:00
assert "Too much memory" in str(msg)
2020-03-28 04:51:28 +03:00
return
2018-03-03 12:54:00 +03:00
2020-03-28 04:51:28 +03:00
total_len = 0
2024-03-02 05:12:17 +03:00
assert isinstance(im2, PngImagePlugin.PngImageFile)
2020-03-28 04:51:28 +03:00
for txt in im2.text.values():
total_len += len(txt)
assert total_len < 64 * 1024 * 1024, "Total text chunks greater than 64M"