Le 05/09/2018 à 12:42, Hanfang Zhang a écrit :
I'm sorry, I did not run jhead with Debian patches before. I patched it just now. But I did not see the patch file for gpsinfo.c. So this vulnerability stiil exists in gpsinfo.c(line 104). I am not sure if I missed the patch file. The poc is in the attachment.
Exact. With the poc file I can reproduce the crash. I reopened the bug and will provide a fix. Thanks -- Dr. Ludovic Rousseau
