89
81%

Ran 07 Feb 2019 11:34AM UTC

Jobs 1

Files 55

Run time 5min

Badge

Embed ▾

pending completion

Build # 89

Build Type

push

travis-ci

Committed by

dfandrich

Commit Message

Improve deep recursion detection in exif_data_load_data_content.

The existing detection was still vulnerable to pathological cases
causing DoS by wasting CPU. The new algorithm takes the number of tags
into account to make it harder to abuse by cases using shallow recursion
but with a very large number of tags.  This improves on commit 5d28011c
which wasn't sufficient to counter this kind of case.

The limitation in the previous fix was discovered by Laurent Delosieres,
Secunia Research at Flexera (Secunia Advisory SA84652) and is assigned
the identifier CVE-2018-20030.

Run Details

3082 of 3763 relevant lines covered (81.9%)

128759.09 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
18	89.18 (CONFIG=coverage)	07 Feb 2019 11:34AM UTC	0	81.9	Travis Job 89.18

Source Files on build 89

Detailed source file information is not available for this build.

libexif / libexif / 89
81%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 89

libexif / libexif / 89 81%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 89

libexif / libexif / 89
81%

README BADGES
x