CVE-2017-11553: illegal address access in the extend_alias_table function in localealias.c about exiv2

[fgeek]

I can confirm the crash with Git 31fc5d2

[D4N]

This has been fixed on master. I'll add the reproducer and check if it has been fixed on 0.26 too.

[carnil]

Hi

On Wed, Oct 18, 2017 at 11:13:22PM +0000, D4N wrote: This has been fixed on master. I'll add the reproducer and check if it has been fixed on 0.26 too.

Which commit in master fixes the issue?

[D4N]

I'll have to find out. This issue slipped through when I was fixing them. However, it won't be a single commit that fixes this issue.

I guess you are the package maintainer of exiv2 for Debian? In that case, you'll get all the security fixes for all the CVEs from the 0.26 branch. We have backported only security fixes and the respective tests (although this will be only fully completed after #127 is merged).

[D4N]

@carnil This was fixed ultimately by 74cb5ba, but you'll definitely need 6e3855a and 8a8f60a for that too. If you want to include the fixes for big-tiff processing you should find the commits in #105.