There is a bug at pngimage.cpp:469. If iccOffset == 0, which happens if chunkLength == 0, then Exiv2 crashes with a SIGSEGV.
Here is the PoC, which I have tested on master (55dfdb9):
. You can run the PoC like this:
$ exiv2 poc1.png
Segmentation fault (core dumped)
There is a bug at pngimage.cpp:469. If
iccOffset == 0, which happens ifchunkLength == 0, then Exiv2 crashes with a SIGSEGV.Here is the PoC, which I have tested on master (55dfdb9):
. You can run the PoC like this: