openjpeg/src/lib/openjp2/jp2.c, branch opt Fork of openjpeg library for JPEG2000 encoding and decoding https://git.carlh.net/cgit/openjpeg/atom?h=opt 2017-08-17T09:05:53Z Avoid asserting on assert(i == pcol) in opj_jp2_apply_pclr() by adding new check in opj_jp2_check_color(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3068. Credit to OSS Fuzz 2017-08-17T09:05:53Z Even Rouault even.rouault@spatialys.com 2017-08-17T09:05:53Z urn:sha1:09e83407fa2b53c606d3179031b8d8b31272e20c Partial revert BPC related check of #975 (#979) 2017-08-09T09:34:08Z Even Rouault even.rouault@spatialys.com 2017-08-09T09:34:08Z urn:sha1:ac375ac9f5b4ae47501b60795e905e3d25dd00f8 PR #975 introduced a check that rejects images that have different bit depth/sign per compoment in SIZ marker if the JP2 IHDR box has BPC != 255 This didn't work properly if decoding a .j2k file since the new bit added in opj_cp_t wasn't initialized to the right value. For clarity, tThis new bit has also been renamed to allow_different_bit_depth_sign But looking closer at the code, it seems we were already tolerant to inconsistencies. For example we parsed a JP2 BPCC box even if BPC != 255 (just a warning is emitted) So failing hard in opj_j2k_read_siz() wouldn't be very inconsistent, and that alone cannot protect against other issues, so just emit a warning if BPC != 255 and the SIZ marker contains different bit depth/sign per component. Note: we could also check that the content of JP2 BPCC box is consistant with the one of the SIZ marker. Merge pull request #975 from szukw000/changes-for-afl-tests 2017-08-08T23:51:54Z Antonin Descampe antonin@descampe.net 2017-08-08T23:51:54Z urn:sha1:0394f8d0f1c981e0bc587beddc14d1fb0b265b1b Catch images broken by AFL opj_jp2_apply_pclr() also needs to use opj_image_data_alloc/opj_image_data_free 2017-08-07T16:32:52Z Even Rouault even.rouault@spatialys.com 2017-07-06T00:17:26Z urn:sha1:434ace4ff74cc3eee401d4d3c02668c1d85f2a0d First change on changes-for-afl-tests 2017-08-02T15:27:08Z szukw000 szukw000@arcor.de 2017-08-02T15:27:08Z urn:sha1:57e36dbfeb57451444c5c20eab66ab0bedd3d3b3 Catch images broken by AFL 2017-07-31T11:58:08Z szukw000 szukw000@arcor.de 2017-07-31T11:58:08Z urn:sha1:00f45684a8339e69ed55df2397f3c19d09fecaed Fix warnings in USE_JPIP compilation mode 2017-07-30T16:46:34Z Even Rouault even.rouault@spatialys.com 2017-07-30T16:46:34Z urn:sha1:ffa9a4f6585dc199fb850dee4255e7a7b84aad63 Fix Doxygen warnings (patch derived from Winfried's doxygen-dif.txt.zip, #849) 2017-07-30T16:18:59Z Even Rouault even.rouault@spatialys.com 2017-07-30T16:18:59Z urn:sha1:83342f2aafcab4599b49f780e35fd249e8402b61 Avoid p_stream->m_user_data_length >= (OPJ_UINT64)p_stream->m_byte_offset assertion in opj_stream_get_number_byte_left(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2786. Credit to OSS Fuzz 2017-07-30T14:48:15Z Even Rouault even.rouault@spatialys.com 2017-07-30T14:48:15Z urn:sha1:e23e0c94d0eb30623bc67be19c38c22ee5378344 Fix null pointer dereference in opj_jp2_apply_pclr(). Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2558. Credit to OSS Fuzz 2017-07-28T19:55:22Z Even Rouault even.rouault@spatialys.com 2017-07-28T19:55:22Z urn:sha1:7bdbe490cba9990916f94a40379cc787434340ff