Test: /ext/exif/tests/bug60150.phpt - Version 5.4.0RC2        

Security #60150 Integer overflow during the parsing of invalid exif header
Submitted: 2011-10-27 16:37:09 Modified: 2011-11-28 22:39:27
From: flolechaud Assigned: stas
Status: Closed Package: EXIF related
PHP Version: 5.4.0beta2 OS: All 32 bits

There are 6 different diffs reported by users for this test.

Count Diff
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < x4077D39C) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < x40AB73A8) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < x40C86338) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < x41C87074) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < xB77A339C) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < xB7FA23DC) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d