From b8459f413a7788b92dbd90bcf839d49534f21d1c Mon Sep 17 00:00:00 2001 From: Andreas Molzer Date: Wed, 22 Sep 2021 01:20:00 +0200 Subject: [PATCH] Add fuzzing work and bugs to release notes --- CHANGES.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/CHANGES.md b/CHANGES.md index 79ddaf7..501c610 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -2,15 +2,21 @@ New features: * Encoding signed integer formats is now supported. +* Extensive fuzzing with `cargo fuzz`. Changes: * Tile decoding should be a little faster, requires one less intermediate buffer. +* Images whose IFDs form a cycle due to their offsets will now raise an error + when the cycle would be entered (jumping back should still be supported). Fixes: * Fixed a regression that caused conflict between strips and tile images, causing errors in decoding some images. * Use checked integer arithmetic in limit calculations, fixes overflows. * IFD Tags are now always cleared between images. +* Found by fuzzing: Several memory limit overflows; JPEG now correctly + validates offsets and a minimum size of its table; Check upper limit of strip + byte size correctly; Notes: Our CI has warned that this version no longer builds on `1.34.2` out of the