offset_val 2792 ext/exif/exif.c size_t byte_count, offset_val, fpos, fgot; offset_val 2833 ext/exif/exif.c offset_val = php_ifd_get32u(dir_entry+8, ImageInfo->motorola_intel); offset_val 2835 ext/exif/exif.c value_ptr = offset_base+offset_val; offset_val 2841 ext/exif/exif.c if (byte_count > IFDlength || offset_val > IFDlength-byte_count || value_ptr < dir_entry || offset_val < (size_t)(dir_entry-offset_base)) { offset_val 2845 ext/exif/exif.c if (byte_count > ImageInfo->FileSize || offset_val>ImageInfo->FileSize-byte_count || (ImageInfo->FileType!=IMAGE_FILETYPE_TIFF_II && ImageInfo->FileType!=IMAGE_FILETYPE_TIFF_MM && ImageInfo->FileType!=IMAGE_FILETYPE_JPEG)) { offset_val 2849 ext/exif/exif.c exif_error_docref("exif_read_data#error_ifd" EXIFERR_CC, ImageInfo, E_WARNING, "Process tag(x%04X=%s): Illegal pointer offset(x%04X < x%04X)", tag, exif_get_tagname(tag, tagname, -12, tag_table), offset_val, dir_entry); offset_val 2853 ext/exif/exif.c exif_error_docref("exif_read_data#error_ifd" EXIFERR_CC, ImageInfo, E_WARNING, "Process tag(x%04X=%s): Illegal pointer offset(x%04X + x%04X = x%04X > x%04X)", tag, exif_get_tagname(tag, tagname, -12, tag_table), offset_val, byte_count, offset_val+byte_count, IFDlength); offset_val 2872 ext/exif/exif.c php_stream_seek(ImageInfo->infile, offset_val, SEEK_SET); offset_val 2874 ext/exif/exif.c if (fgot!=offset_val) { offset_val 2876 ext/exif/exif.c exif_error_docref(NULL EXIFERR_CC, ImageInfo, E_WARNING, "Wrong file pointer: 0x%08X != 0x%08X", fgot, offset_val); offset_val 2890 ext/exif/exif.c offset_val= value_ptr-offset_base; offset_val 2896 ext/exif/exif.c exif_error_docref(NULL EXIFERR_CC, ImageInfo, E_NOTICE, "Process tag(x%04X=%s,@x%04X + x%04X(=%d)): %s%s %s", tag, exif_get_tagname(tag, tagname, -12, tag_table), offset_val+displacement, byte_count, byte_count, (components>1)&&format!=TAG_FMT_UNDEFINED&&format!=TAG_FMT_STRING?"ARRAY OF ":"", exif_get_tagformat(format), dump_data);