18
81%
master: 81%

Ran 07 Feb 2019 11:34AM UTC

Files 55

Run time 2min

Badge

Embed ▾

Committed 07 Feb 2019 11:07AM UTC coverage: 81.903% (+0.02%) from 81.879%

Job # CONFIG=coverage

Build Type

push

travis-ci

Committed by

dfandrich

Commit Message

Improve deep recursion detection in exif_data_load_data_content.

The existing detection was still vulnerable to pathological cases
causing DoS by wasting CPU. The new algorithm takes the number of tags
into account to make it harder to abuse by cases using shallow recursion
but with a very large number of tags.  This improves on commit 5d28011c
which wasn't sufficient to counter this kind of case.

The limitation in the previous fix was discovered by Laurent Delosieres,
Secunia Research at Flexera (Secunia Advisory SA84652) and is assigned
the identifier CVE-2018-20030.

Run Details

3082 of 3763 relevant lines covered (81.9%)

128759.09 hits per line

libexif / libexif / 89 / 18
81%
master: 81%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 89.18 (CONFIG=coverage)

libexif / libexif / 89 / 18 81% master: 81%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 89.18 (CONFIG=coverage)

libexif / libexif / 89 / 18
81%
master: 81%

README BADGES
x