Join GitHub today
GitHub is home to over 36 million developers working together to host and review code, manage projects, and build software together.Sign up
Out-of-bound left shift in opj_j2k_setup_encoder (src/lib/openjp2/j2k.c) #1057
(This problem is discovered with UBSAN enabled)
src/lib/openjp2/j2k.c:7304:48: runtime error: shift exponent 4294967295 is too large for 32-bit type 'int'
To reproduce this issue, run: bin/opj_compress -n 1 -i $POC -o OUTPUT
The POC could be downloaded at: https://github.com/ProbeFuzzer/poc/blob/master/openjpeg/openjpeg_2-3_opj_compress_integer-overflow_opj_j2k_setup_encoder.bmp
The underlying issue is actually in
I'll investigate further and PR a patch.