Test: /ext/exif/tests/bug60150.phpt - Version 5.4.0RC5        

Security #60150 Integer overflow during the parsing of invalid exif header
Submitted: 2011-10-27 16:37:09 Modified: 2011-11-28 22:39:27
From: flolechaud Assigned: stas
Status: Closed Package: EXIF related
PHP Version: 5.4.0beta2 OS: All 32 bits

There are 6 different diffs reported by users for this test.

Count Diff
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < xB7FAA3DC) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < xB7EE0F2C) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < xB78243D4) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < x4245FB78) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < x41ECD9F8) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d
1 (17%)
001+ Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(xF20008BC < x403BE7BC) in %s/bug60150.php on line 3
001- Warning: exif_read_data(bug60150.jpg): Process tag(x9003=DateTimeOri): Illegal pointer offset(x%x + x%x = x%x > x%x) in %s on line %d