You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@commons.apache.org by "Fabian Meumertzheim (Jira)" <ji...@apache.org> on 2021/01/14 10:48:00 UTC

[jira] [Updated] (IMAGING-279) Array sizes not checked for overflow in BmpImageParser

     [ https://issues.apache.org/jira/browse/IMAGING-279?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Fabian Meumertzheim updated IMAGING-279:
----------------------------------------
    Summary: Array sizes not checked for overflow in BmpImageParser  (was: Array sizes not checked for overflow)

> Array sizes not checked for overflow in BmpImageParser
> ------------------------------------------------------
>
>                 Key: IMAGING-279
>                 URL: https://issues.apache.org/jira/browse/IMAGING-279
>             Project: Commons Imaging
>          Issue Type: Bug
>          Components: Format: BMP
>    Affects Versions: 1.0-alpha2
>            Reporter: Fabian Meumertzheim
>            Priority: Major
>
> In BmpParser.readImageContents, there is no check that [imageDataSize|https://gitbox.apache.org/repos/asf?p=commons-imaging.git;a=blob;f=src/main/java/org/apache/commons/imaging/formats/bmp/BmpImageParser.java;h=09d560011ebbde5ea8df65a30ea9692c2e697d17;hb=HEAD#l441] does not overflow. If it does, BinaryFunctions.readBytes crashes with an uncaught NegativeArraySizeException.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)