document ignoring EXIF

2018-04-06 10:54:43 +02:00 · 2018-04-06 10:54:43 +02:00 · b5adf7d0ef
commit b5adf7d0ef
parent 36d699a6a6
1 changed files with 6 additions and 0 deletions
--- a/app/src/main/java/org/fdroid/fdroid/Utils.java
+++ b/app/src/main/java/org/fdroid/fdroid/Utils.java
@ -406,6 +406,12 @@ public final class Utils {
        return new Locale(languageTag);
    }

+    /**
+     * Since there have been vulnerabilities in EXIF processing in Android, this
+     * disables all use of EXIF.
+     *
+     * @see <a href="https://securityaffairs.co/wordpress/51043/mobile-2/android-cve-2016-3862-flaw.html">CVE-2016-3862</a>
+     */
    public static DisplayImageOptions.Builder getDefaultDisplayImageOptionsBuilder() {
        if (defaultDisplayImageOptionsBuilder == null) {
            defaultDisplayImageOptionsBuilder = new DisplayImageOptions.Builder()