Posted on Jun 4, 2015 by
Happy Wombat
In this line:
l_src_ptr = l_img_comp->data + ((OPJ_UINT32)l_tilec->x0 - l_offset_x) + ((OPJ_UINT32)l_tilec->y0 - l_offset_y) * l_image_width;
l_image_width needs to be cast to OPJ_SIZE_T, and this will be fixed.
It might be useful for someone go through all offset calculations in library, and hunt for overflows.
Status: Accepted
Labels:
Type-Defect
Priority-Medium