YC

icon indicating a website link speakerdeck.com/yuawn icon indicating an email [email protected]

icon company NTU master of CS icon location Taipei, Earth, Milky Way Galaxy icon location former CTFer @balsn @DoubleSigma.

Results 5 comments of YC

Heap-buffer-overflow in color.c:379:42 in sycc420_to_rgb

@szukw000, you need to build it with address sanitizer to detect the bug.

Heap-buffer-overflow in color.c:379:42 in sycc420_to_rgb

I also reproduced it on released version [2.3.1](https://github.com/uclouvain/openjpeg/releases/tag/v2.3.1) released on Apr 2, 2019. This bug affects released versions 2.3.1 ~ 2.4.0.

Heap-buffer-overflow in color.c:379:42 in sycc420_to_rgb

@CityOfLight77 there is no need to build it with AFL. Both of GCC and Clang supports ASAN, just build it as I said above: ```bash CFLAGS='-g -fsanitize=address' cmake .. -DCMAKE_BUILD_TYPE=Release...

Heap-buffer-overflow in color.c:379:42 in sycc420_to_rgb

Hi @szukw000, It seems like you didn't compile it with ASAN successfully, where did you add the compiler flags? I can confirm that the following script can reproduce the bug...

heap-buffer-overflow in function sycc420_to_rgb() at openjpeg/src/bin/common/color.c:379

Duplicate of #1347.