Skip to content

Add sanity check for tile coordinates#823

Merged
mayeut merged 2 commits intouclouvain:masterfrom
mayeut:patch-tcd-tile-init
Sep 7, 2016
Merged

Add sanity check for tile coordinates#823
mayeut merged 2 commits intouclouvain:masterfrom
mayeut:patch-tcd-tile-init

Conversation

@mayeut
Copy link
Copy Markdown
Collaborator

@mayeut mayeut commented Sep 7, 2016

Coordinates are casted from OPJ_UINT32 to OPJ_INT32
Add sanity check for negative values and upper bound becoming lower
than lower bound.
See also
https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574510178ea9

Coordinates are casted from OPJ_UINT32 to OPJ_INT32
Add sanity check for negative values and upper bound becoming lower
than lower bound.
See also
https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574
510178ea9
@mayeut
Copy link
Copy Markdown
Collaborator Author

mayeut commented Sep 7, 2016

there was an error when referencing test data.
Named issue822 #822 when it should be issue823

@mayeut mayeut merged commit e078172 into uclouvain:master Sep 7, 2016
@mayeut mayeut deleted the patch-tcd-tile-init branch September 8, 2016 20:16
mayeut added a commit to mayeut/openjpeg-data that referenced this pull request Sep 8, 2016
mayeut added a commit to mayeut/openjpeg that referenced this pull request Sep 8, 2016
Update uclouvain#826

Also correct names for data of issue uclouvain#823
mayeut added a commit to uclouvain/openjpeg-data that referenced this pull request Sep 8, 2016
@mayeut mayeut mentioned this pull request Sep 8, 2016
mayeut added a commit that referenced this pull request Sep 8, 2016
Update #826

Also correct names for data of issue #823
malaterre pushed a commit that referenced this pull request Sep 13, 2016
Coordinates are casted from OPJ_UINT32 to OPJ_INT32
Add sanity check for negative values and upper bound becoming lower
than lower bound.
See also
https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574510178ea9
malaterre pushed a commit that referenced this pull request Sep 13, 2016
Update #826

Also correct names for data of issue #823
@nluedtke
Copy link
Copy Markdown

nluedtke commented Oct 5, 2016

http://www.openwall.com/lists/oss-security/2016/09/08/8 indicates this issue was the same as CVE-2016-5157

@detonin detonin added the bug label Aug 3, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants