YangY-Xiao

NULL point dereference in function imagetobmp of convertbmp.c

7

**DESCRIPTION** OPENJPEG null ptr dereference in convertbmp.c:980 **VERSION** OPENJPEG-2.1.2 **Address Sanitizer Output** ==12736==ERROR: AddressSanitizer: SEGV on unknown address 0x00000f50 (pc 0x08150cc0 bp 0xbfad5d28 sp 0xbfad5cc0 T0) #0 0x8150cbf (/home/yang/openjpeg/openjpeg-2.1.2/build-clang/bin/opj_decompress+0x8150cbf) #1...

Potential heap-based buffer overflow in function t2_encode_packet in src/lib/openmj2/t2.c

1

There are two missing checks for length in function t2_encode_packet in src/lib/openmj2/t2.c . (see #992 ) ``` 167 /* */ 168 if (tcp->csty & J2K_CP_CSTY_SOP) { 169 c[0] = 255;...

fix several potential vulnerabilities

5

fixing oob, null pointer deference

CCF列表中会议、期刊等未正确识别

6

感谢作者给力的工具，但是近期在使用过程中发现一些未正常识别的情况，现说明如下。 软工期刊TSE、TDSC未识别  软工会议ASE未识别  AI会议ICLR未识别  安全期刊TIFS未识别  软工会议ICSE未识别