mirror of
				https://github.com/python-pillow/Pillow.git
				synced 2025-10-31 07:57:27 +03:00 
			
		
		
		
	* In some circumstances with some versions of libtiff (4.1.0+), there could be a 4 byte out of bound write when decoding a YCbCr tiff. * The Pillow code dates to 6.0.0 * Found and reported through Tidelift
		
			
				
	
	
		
			42 lines
		
	
	
		
			1.1 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
			
		
		
	
	
			42 lines
		
	
	
		
			1.1 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
| # Reproductions/tests for crashes/read errors in TiffDecode.c
 | |
| 
 | |
| # When run in Python, all of these images should fail for
 | |
| # one reason or another, either as a buffer overrun,
 | |
| # unrecognized datastream, or truncated image file.
 | |
| # There shouldn't be any segfaults.
 | |
| #
 | |
| # if run like
 | |
| # `valgrind --tool=memcheck pytest test_tiff_crashes.py 2>&1 | grep TiffDecode.c`
 | |
| # the output should be empty. There may be Python issues
 | |
| # in the valgrind especially if run in a debug Python
 | |
| # version.
 | |
| 
 | |
| import pytest
 | |
| 
 | |
| from PIL import Image
 | |
| 
 | |
| from .helper import on_ci
 | |
| 
 | |
| 
 | |
| @pytest.mark.parametrize(
 | |
|     "test_file",
 | |
|     [
 | |
|         "Tests/images/crash_1.tif",
 | |
|         "Tests/images/crash_2.tif",
 | |
|         "Tests/images/crash-2020-10-test.tif",
 | |
|     ],
 | |
| )
 | |
| @pytest.mark.filterwarnings("ignore:Possibly corrupt EXIF data")
 | |
| @pytest.mark.filterwarnings("ignore:Metadata warning")
 | |
| def test_tiff_crashes(test_file):
 | |
|     try:
 | |
|         with Image.open(test_file) as im:
 | |
|             im.load()
 | |
|     except FileNotFoundError:
 | |
|         if not on_ci():
 | |
|             pytest.skip("test image not found")
 | |
|             return
 | |
|         raise
 | |
|     except OSError:
 | |
|         pass
 |