Uploaded image for project: 'Commons Imaging'
  1. Commons Imaging
  2. IMAGING-279

Array sizes not checked for overflow in BmpImageParser

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.0-alpha2
    • 1.0-alpha3
    • Format: BMP
    • None

    Description

      In BmpImageParser.readImageContents, it is not verified that imageDataSize does not overflow. If it does, BinaryFunctions.readBytes crashes with an uncaught NegativeArraySizeException.

      Attachments

        1. negative_array_size_exception.bmp
          0.1 kB
          Fabian Meumertzheim

        Activity

          People

            kinow Bruno P. Kinoshita
            Meumertzheim Fabian Meumertzheim
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 0.5h
                0.5h