Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Heap-buffer-overflow in opj_dwt_decode_1 #480

Closed
gcode-importer opened this issue Mar 11, 2015 · 2 comments
Closed

Heap-buffer-overflow in opj_dwt_decode_1 #480

gcode-importer opened this issue Mar 11, 2015 · 2 comments
Assignees
@detonin
Labels
bug Priority-Medium

Comments

@gcode-importer
Copy link

Originally reported on Google Code with ID 480

What steps will reproduce the problem?
The original issue was raised in 
https://code.google.com/p/chromium/issues/detail?can=2&q=450844&colspec=ID%20Pri%20M%20Week%20ReleaseBlock%20Cr%20Status%20Owner%20Summary%20OS%20Modified&id=450844.

What is the expected output? What do you see instead?
It crashes in Linux ASAN.

What version of the product are you using? On what operating system?
revision 2997. Linux ubuntu 64 bits.


Please provide any additional information below.
I attached a patch and it could fix this issue.

Reported by jun_fang@foxitsoftware.com on 2015-03-11 00:51:17

- _Attachment: [diff_dwt.c](https://storage.googleapis.com/google-code-attachments/openjpeg/issue-480/comment-0/diff_dwt.c)_
@gcode-importer gcode-importer self-assigned this Jun 11, 2015
mayeut added a commit that referenced this issue Aug 23, 2015
@mayeut
Fix some calculations in opj_tcd_init_tile
3877040 
Fixes #486
Fixes #394
Update #480
Update #388
@mayeut
Copy link
Collaborator

mayeut commented Aug 23, 2015

This could be fixed by commit 3877040 but no data to confirm

@mayeut mayeut mentioned this issue Jan 27, 2016
Closed
@rouault
Copy link
Collaborator

rouault commented Jul 29, 2017

I looked at a few of the samples provided in https://code.google.com/p/chromium/issues/detail?can=2&q=450844&colspec=ID%20Pri%20M%20Week%20ReleaseBlock%20Cr%20Status%20Owner%20Summary%20OS%20Modified&id=450844 and couldn't reproduce with current master. Closing

@rouault rouault closed this as completed Jul 29, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@detonin detonin

Labels
bug Priority-Medium
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@detonin @rouault @mayeut @gcode-importer