openjpeg icon indicating copy to clipboard operation
openjpeg copied to clipboard

UB in ht_dec.c opj_t1_ht_decode_cblk - memcpy invoked on NULL pointer

Open pauldreik opened this issue 3 years ago • 0 comments

Using ubsan and afl, I found that memcpy can be invoked on a null pointer, which is undefined behaviour.

See #1442 for code to reproduce it.

pauldreik avatar Aug 25 '22 11:08 pauldreik