openjpeg icon indicating copy to clipboard operation
openjpeg copied to clipboard

UB in tcd.c opj_tcd_dc_level_shift_decode - pointer arithmetic on NULL pointer

Open pauldreik opened this issue 3 years ago • 1 comments

Using ubsan and afl, I found that pointer arithmetic may be carried out on a null pointer, which is undefined behaviour.

See #1442 for code to reproduce it.

pauldreik avatar Aug 25 '22 11:08 pauldreik

fixed per fixed per https://github.com/uclouvain/openjpeg/pull/1496

rouault avatar Dec 08 '23 15:12 rouault