Skip to content

Add enforce to avoid out-of-bounds read#9308

Open
kevinbackhouse wants to merge 2 commits into
Exiv2:0.28.xfrom
kevinbackhouse:fix-GHSA-hxph-pv7w-8649
Open

Add enforce to avoid out-of-bounds read#9308
kevinbackhouse wants to merge 2 commits into
Exiv2:0.28.xfrom
kevinbackhouse:fix-GHSA-hxph-pv7w-8649

Conversation

@kevinbackhouse

Copy link
Copy Markdown
Collaborator

Fix for https://github.com/Exiv2/exiv2/security/advisories/GHSA-hxph-pv7w-8649, an out-of-bounds read found by OSS-Fuzz.

@kevinbackhouse kevinbackhouse added forward-to-main Forward changes in a 0.28.x PR to main with Mergify bug labels May 25, 2026
@kevinbackhouse kevinbackhouse added this to the v0.28.9 milestone May 25, 2026
@kevinbackhouse kevinbackhouse force-pushed the fix-GHSA-hxph-pv7w-8649 branch from cf9fa03 to c798e33 Compare May 25, 2026 19:07
@codecov

codecov Bot commented May 25, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.55%. Comparing base (5b8f1f4) to head (c798e33).
⚠️ Report is 52 commits behind head on 0.28.x.

Additional details and impacted files
@@            Coverage Diff             @@
##           0.28.x    #9308      +/-   ##
==========================================
+ Coverage   64.98%   65.55%   +0.57%     
==========================================
  Files         104      104              
  Lines       22260    22293      +33     
  Branches    10878    10901      +23     
==========================================
+ Hits        14465    14614     +149     
+ Misses       5541     5355     -186     
- Partials     2254     2324      +70     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug forward-to-main Forward changes in a 0.28.x PR to main with Mergify

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants