Fix: SBO in CIccTagFloatNum::GetValues()

[ChrisCoxArt]

Fixes #551

Pull Request Checklist

• Have you followed the guidelines in Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you built your Pull Request locally with the Build Instructions?
• Have you added or updated relevant tests?
• Have you added or updated relevant docs?

[xsscx]

PR565 Review

2026-02-02 02:44:44 UTC0

d726649 (HEAD -> pr-565, origin/issue-551) use the size limit passed in, not the size of the array

Repro

mkdir pr565
cd pr565
git clone https://github.com/InternationalColorConsortium/iccDEV.git
cd iccDEV
git fetch origin pull/565/head:pr-565
git checkout pr-565
cd Build
cmake -DCMAKE_INSTALL_PREFIX="$HOME/.local" -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_SHARED_LIBS=ON -DENABLE_STATIC_LIBS=ON -DENABLE_TESTS=ON -DENABLE_INSTALL_RIM=ON -DENABLE_ICCXML=ON -Wno-dev -DCMAKE_CXX_FLAGS="-g -fsanitize=address,undefined -fno-omit-frame-pointer -Wall" -Wno-dev Cmake/
make -j$(nproc)
        cd ../Testing/
        echo "=== Updating PATH ==="
         for d in ../Build/Tools/*; do
          [ -d "$d" ] && export PATH="$(realpath "$d"):$PATH"
         done
cd ..
wget https://github.com/xsscx/fuzz/raw/refs/heads/master/graphics/icc/stack-smashing-CIccTagFloatNum-CIccTagStruct-GetElemNumberValue-IccTagBasic_cpp-Line6634.icc
iccApplyNamedCmm Tools/CmdLine/IccApplyNamedCmm/DataSetFiles/DarkRed-RGB.txt 3 0 stack-smashing-CIccTagFloatNum-CIccTagStruct-GetElemNumberValue-IccTagBasic_cpp-Line6634.icc 0

PR565 Expected Output

Error 2 - Unable to begin profile application - Possibly invalid or incompatible profiles

[xsscx]

GHSA-xjr3-v3vr-5794