[Pkg-kde-extras] Bug#1037053: libexiv2-27: Uncaught exception reading XMP data making apps crashing

[Matthieu LAPADU-HARGUES]

Package: libexiv2-27
Version: 0.27.3-3+deb11u2
Severity: normal

Dear Maintainer,

After several crashes with Gwenview KDE viewer and some specific pictures, I
have tried several tests using following exiv2 command lines with a concerned
picture :

EXIF data :
exiv2 -pt 20230528_113116.jpg = no problem

IPTC data :
exiv2 -pi 20230528_113116.jpg = no problem

XMP data :
exiv2 -px 20230528_113116.jpg = finish with following error

Xmp.exif.DateTimeOriginal                    XmpText    19  Uncaught exception:
basic_string::at: __n (which is 19) >= this->size() (which is 19)

I think the problem comes from the library because Gwenview crashes appeared
before exiv2 programm install.

At your disposal for more tests.
Thanks !

Matthieu


-- System Information:
Debian Release: 11.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-23-amd64 (SMP w/12 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8),
LANGUAGE=fr:en_US
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libexiv2-27 depends on:
ii  libc6       2.31-13+deb11u6
ii  libexpat1   2.2.10-2+deb11u5
ii  libgcc-s1   10.2.1-6
ii  libstdc++6  10.2.1-6
ii  zlib1g      1:1.2.11.dfsg-2+deb11u2

libexiv2-27 recommends no packages.

Versions of packages libexiv2-27 suggests:
ii  exiv2  0.27.3-3+deb11u2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 20230528_113116.jpg
Type: image/jpeg
Size: 1114387 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-kde-extras/attachments/20230602/194582ed/attachment-0001.jpg>