| { |
| "item_id": "ker-exif_discard", |
| "kernel": "exif_discard", |
| "advisory": "RUSTSEC-2021-0143", |
| "crate": "kamadak-exif", |
| "pre_version": "0.5.2", |
| "post_version": "0.5.3", |
| "advisory_url": "https://github.com/kamadak/exif-rs/commit/1b05eab57e484cd7d576d4357b9cda7fdc57df8c", |
| "title": "kamadak-exif DoS with untrusted PNG data", |
| "source_file": "src/util.rs", |
| "function": "discard_exact", |
| "signature": "pub fn discard_exact(avail: usize, len: usize) -> Result<usize, u8>", |
| "spec_doc": "Models skipping len bytes of a reader that has only avail bytes: returns Ok(number of read rounds) when the reader had enough data, Err when it hits EOF early. Must terminate on every input.", |
| "bug_class": "dos_loop_or_recursion", |
| "fidelity": "verbatim_logic", |
| "extraction_note": "src/util.rs discard_exact: spins forever at EOF (consume_len == 0)", |
| "witness_args": "3usize, 10usize", |
| "labels": { |
| "buggy": "kamadak-exif@0.5.2", |
| "reference": "kamadak-exif@0.5.3" |
| } |
| } |
