sscanf buffer overflow

[setharnold]

openjpeg/src/bin/jp3d/convert.c

Line 856 in 06f7d41

sscanf(line, "%*s %*s%*[ \t]%s", filename);

        } else if (strncmp(line, "File", 4) == 0) {
            sscanf(line, "%*s %*s%*[ \t]%s", filename);
            strcat(dirpath, filename);
            strcpy(filename, dirpath);

Hello, I believe the sscanf(3) here can overflow filename, and suspect the next two lines may also cause overflows with sufficiently malicious inputs.

Thanks