gco-v3.0
gco-v3.0 copied to clipboard
out-of-range memory read
GCoptimization.cpp, DataCostFnSparse::search(), line 1818:
const SparseDataCost* mid = (const SparseDataCost*)((((size_t)L+(size_t)R) >> 1) & cDataCostPtrMask);
It is possible that mid < L
, causing out-of-range memory read. As a result, random crashes may occur under some OS environments, e.g., IOS/Android.