This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.
This post first appeared on oss-security . I'm reporting three issues here in exiv2, a parser libary for image metadata. These are only examples, exiv2 is full of memory safety bugs that can trivially be found by running afl with asan for a few hours. I have not reported those issues upstream. When I previously tried to report bugs in exiv2 found via fuzzing the upstream author made it clear to me…
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.