Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Possible integer overflow in ImagingSgiRleDecode (SgiRleDecode.c) #8401

Closed
karasovsky opened this issue Sep 22, 2024 · 1 comment · Fixed by #8402
Closed

Possible integer overflow in ImagingSgiRleDecode (SgiRleDecode.c) #8401

karasovsky opened this issue Sep 22, 2024 · 1 comment · Fixed by #8402

Comments

@karasovsky
Copy link

Hello!

There is size check in code, that c->tablen = im->bands * im->ysize > INT_MAX.
But 8 * c->tablen can lead to integer overflow. I suggest to adjust the size check.

image

Found by Linux Verification Center (linuxtesting.org) with SVACE.
Reporter: Dmitriy Karasovsky (d.karasovsky@fobos-nt.ru).

@radarhere
Copy link
Member

I've created #8402 to resolve this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants