[php-src] PR #23934: ext/exif: Reject TIFF thumbnails that extend past the file
| From: | iliaal | Date: | Sat, 26 Sep 2026 22:17:37 +0000 |
| Subject: | [php-src] PR #23934: ext/exif: Reject TIFF thumbnails that extend past the file | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-38845@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23934
Author: iliaal
The SUB-IFD thumbnail path allocated Thumbnail.size with no check against the file, so a tag past
EOF tried to allocate the declared size. An offset or size that extends past the file is rejected
before the allocation.