From 80e3b12b987a26fe7754c0e79e15d58557bdb939 Mon Sep 17 00:00:00 2001 From: Dustin Oprea Date: Sat, 2 May 2020 16:24:00 -0400 Subject: [PATCH] undefined/exif_9286_user_comment.go: Validate for minimum user-notes size --- v2/undefined/exif_9286_user_comment.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/v2/undefined/exif_9286_user_comment.go b/v2/undefined/exif_9286_user_comment.go index 7b92f10..0e36b00 100644 --- a/v2/undefined/exif_9286_user_comment.go +++ b/v2/undefined/exif_9286_user_comment.go @@ -105,6 +105,10 @@ func (Codec9286UserComment) Decode(valueContext *exifcommon.ValueContext) (value valueBytes, err := valueContext.ReadBytes() log.PanicIf(err) + if len(valueBytes) < 8 { + return nil, ErrUnparseableValue + } + unknownUc := Tag9286UserComment{ EncodingType: TagUndefinedType_9286_UserComment_Encoding_UNDEFINED, EncodingBytes: []byte{},