Pillow/Tests/check_j2k_dos.py
wiredfool 347a1d8d95 J2k DOS fix -- CVE-2014-3598
Found and reported by Andrew Drake of dropbox.com
2014-08-19 08:25:40 -07:00

12 lines
385 B
Python

# Tests potential DOS of Jpeg2kImagePlugin with 0 length block.
# Run from anywhere that PIL is importable.
from PIL import Image
from io import BytesIO
if bytes is str:
Image.open(BytesIO(bytes('\x00\x00\x00\x0cjP\x20\x20\x0d\x0a\x87\x0a\x00\x00\x00\x00hang')))
else:
Image.open(BytesIO(bytes('\x00\x00\x00\x0cjP\x20\x20\x0d\x0a\x87\x0a\x00\x00\x00\x00hang', 'latin-1')))