openjpeg/src/bin, branch v2.3.1

Revert "[JPWL] tgatoimage(): avoid excessive memory allocation attempt,"

2019-03-29T09:44:35Z

This reverts commit 05be3084460e46282ee63f04c72c451f3271fd28. This commit doesn't compile due to missing OPJ_UINT64 type

convertbmp: detect invalid file dimensions early

2018-12-14T04:10:35Z

width/length dimensions read from bmp headers are not necessarily valid. For instance they may have been maliciously set to very large values with the intention to cause DoS (large memory allocation, stack overflow). In these cases we want to detect the invalid size as early as possible. This commit introduces a counter which verifies that the number of written bytes corresponds to the advertized width/length. Fixes #1059 (CVE-2018-6616).

Merge pull request #1168 from Young-X/fix_dev

2018-12-07T20:27:38Z

Fix multiple potential vulnerabilities and bugs

[JPWL] tgatoimage(): avoid excessive memory allocation attempt,

2018-11-28T06:44:06Z

and fixes unaligned load Signed-off-by: Young Xiao

[JPWL] opj_compress: reorder checks related to code block dimensions to avoid potential int overflow

2018-11-28T06:39:14Z

Signed-off-by: Young_X

color_apply_icc_profile: avoid potential heap buffer overflow

2018-11-27T22:31:30Z

Derived from a patch by Thuan Pham

[JPWL] imagetotga(): fix read heap buffer overflow if numcomps < 3 (#987)

2018-11-23T09:08:57Z

Signed-off-by: Young_X

[JPWL] fix CVE-2018-16375

2018-11-23T09:08:56Z

Signed-off-by: Young_X

Merge pull request #1160 from hlef/master

2018-11-16T08:42:19Z

jp3d/jpwl convert: fix write stack buffer overflow

jp2: convert: fix null pointer dereference

2018-11-07T17:53:18Z

Tile components in a JP2 image might have null data pointer by defining a zero component size (for example using large horizontal or vertical sampling periods). This null data pointer leads to null image component data pointer, causing crash when dereferenced without != null check in imagetopnm. Add != null check. This commit addresses #1152 (CVE-2018-18088).