Export to GitHub

openjpeg - issue #502

potential overflow in opj_j2k_get_tile_data() method


Posted on Jun 4, 2015 by Happy Wombat

In this line:

l_src_ptr = l_img_comp->data + ((OPJ_UINT32)l_tilec->x0 - l_offset_x) + ((OPJ_UINT32)l_tilec->y0 - l_offset_y) * l_image_width;

l_image_width needs to be cast to OPJ_SIZE_T, and this will be fixed.

It might be useful for someone go through all offset calculations in library, and hunt for overflows.

Status: Accepted

Labels:
Type-Defect Priority-Medium