[IMAGING-222] JPEG segment size not validated

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Cannot Reproduce
• Fix Version/s: 1.0-alpha1
• Component/s: Format: JPEG
• Assignee: Bruno P. Kinoshita
• Reporter: Le Huu Quang Linh
• Created: 26/Mar/19 12:23
• Updated: 07/Aug/20 04:32
• Resolved: 16/May/19 01:34

Description

Using my AFL-based fuzzer for Java. I found that a NegativeArraySizeException may be throw when attempting to read an invalid JPEG image.

public void traverseJFIF(final ByteSource byteSource, final Visitor visitor)
            throws ImageReadException,
            IOException {
        try (InputStream is = byteSource.getInputStream()) {
            readAndVerifyBytes(is, JpegConstants.SOI,
                    "Not a Valid JPEG File: doesn't begin with 0xffd8");
.....

I think you should add the handle NegativeArraySizeException exception