Todo List

Member Exiv2::Photoshop::isIrb (const byte *pPsData)

This should be an implementation detail and not exposed in the API. An attacker could try to pass a smaller buffer or null pointer.

Class Exiv2::Uri

This class can probably be hidden from the API

Member Exiv2::urldecode (std::string &str)

This function can probably be hidden into the implementation details

Member Exiv2::urlencode (const std::string &str)

This function can probably be hidden into the implementation details

Member Exiv2::XmpProperties::mutex_

For a proper read-write lock, this shall be improved by a std::shared_timed_mutex (once C++14 is allowed) or std::shared_mutex (once C++17 is allowed). The read-access locks shall be updated to std::shared_lock then.