Security: Malformed: Beyond Eof

The ICC specification defines the structure of individual tags, which are listed in the tag table. The tag table should define a contiguous sequence of unique tag elements, with no gaps between the last byte of any tag data element referenced from the tag table (inclusive of any necessary additional pad bytes required to reach a four-byte boundary) and the byte offset of the following tag element, or the end of the file.

If the required tags are present and correctly encoded, a CMM can ignore any bytes which are shown as extending beyond the end of the file (EOF).

The profile beyond-eof.icc is defined in the tag table as having a tag at an offset of 540 that has a length of 21 bytes, exceeding the EOF by one byte.

This profile can be used to test that a CMM or application can either ignore a tag length which appears to exceed the file length, or reject the profile, as appropriate.