<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openjpeg/src/lib, branch v2.3.1</title>
<subtitle>Fork of openjpeg library for JPEG2000 encoding and decoding</subtitle>
<id>https://git.carlh.net/cgit/openjpeg/atom?h=v2.3.1</id>
<link rel='self' href='https://git.carlh.net/cgit/openjpeg/atom?h=v2.3.1'/>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/'/>
<updated>2019-03-29T10:17:39Z</updated>
<entry>
<title>opj_t1_encode_cblks: fix UBSAN signed integer overflow</title>
<updated>2019-03-29T10:17:39Z</updated>
<author>
<name>Even Rouault</name>
<email>even.rouault@spatialys.com</email>
</author>
<published>2019-03-29T10:17:39Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=a1d32a596a94280178c44a55d7e7f1acd992ed5d'/>
<id>urn:sha1:a1d32a596a94280178c44a55d7e7f1acd992ed5d</id>
<content type='text'>
Fixes #1053 / CVE-2018-5727

Note: I don't consider this issue to be a security vulnerability, in
practice.
At least with gcc or clang compilers on x86_64 which generate the same
assembly code with or without that fix.
</content>
</entry>
<entry>
<title>Revert "[MJ2] Avoid index out of bounds access to pi-&gt;include[]"</title>
<updated>2019-03-29T09:40:58Z</updated>
<author>
<name>Even Rouault</name>
<email>even.rouault@spatialys.com</email>
</author>
<published>2019-03-29T09:40:58Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=e1740e7ce79d0a1676db4da0f4189b64e85f52cb'/>
<id>urn:sha1:e1740e7ce79d0a1676db4da0f4189b64e85f52cb</id>
<content type='text'>
This reverts commit c277159986c80142180fbe5efb256bbf3bdf3edc.

The commit didn't compile. include_size is not defined in openmj2
</content>
</entry>
<entry>
<title> [JP3D] To avoid divisions by zero / undefined behaviour on shift (CVE-2018-14423</title>
<updated>2018-11-28T06:39:15Z</updated>
<author>
<name>Young_X</name>
<email>YangX92@hotmail.com</email>
</author>
<published>2018-11-23T09:15:05Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=bd88611ed9ad7144ec4f3de54790cd848175891b'/>
<id>urn:sha1:bd88611ed9ad7144ec4f3de54790cd848175891b</id>
<content type='text'>
Signed-off-by: Young_X &lt;YangX92@hotmail.com&gt;
</content>
</entry>
<entry>
<title>[OPENJP2] change the way to compute *p_tx0, *p_tx1, *p_ty0, *p_ty1 in function</title>
<updated>2018-11-28T06:39:14Z</updated>
<author>
<name>Young_X</name>
<email>YangX92@hotmail.com</email>
</author>
<published>2018-11-23T08:24:19Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=c58df149900df862806d0e892859b41115875845'/>
<id>urn:sha1:c58df149900df862806d0e892859b41115875845</id>
<content type='text'>
opj_get_encoding_parameters

Signed-off-by: Young_X &lt;YangX92@hotmail.com&gt;
</content>
</entry>
<entry>
<title>[MJ2] Avoid index out of bounds access to pi-&gt;include[]</title>
<updated>2018-11-28T06:39:14Z</updated>
<author>
<name>Young_X</name>
<email>YangX92@hotmail.com</email>
</author>
<published>2018-11-23T08:12:53Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=c277159986c80142180fbe5efb256bbf3bdf3edc'/>
<id>urn:sha1:c277159986c80142180fbe5efb256bbf3bdf3edc</id>
<content type='text'>
Signed-off-by: Young_X &lt;YangX92@hotmail.com&gt;
</content>
</entry>
<entry>
<title>[MJ2] To avoid divisions by zero / undefined behaviour on shift</title>
<updated>2018-11-23T06:47:36Z</updated>
<author>
<name>Young_X</name>
<email>YangX92@hotmail.com</email>
</author>
<published>2018-11-23T06:47:36Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=c5bd64ea146162967c29bd2af0cbb845ba3eaaaf'/>
<id>urn:sha1:c5bd64ea146162967c29bd2af0cbb845ba3eaaaf</id>
<content type='text'>
Signed-off-by: Young_X &lt;YangX92@hotmail.com&gt;
</content>
</entry>
<entry>
<title>openjp3d: Int overflow fixed (#1159)</title>
<updated>2018-11-16T08:40:31Z</updated>
<author>
<name>ichlubna</name>
<email>43234438+ichlubna@users.noreply.github.com</email>
</author>
<published>2018-11-16T08:40:31Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=c196b23b90321b5c7e3238294607a2e8626c503f'/>
<id>urn:sha1:c196b23b90321b5c7e3238294607a2e8626c503f</id>
<content type='text'>
When compressing a lot of slices (starting from 44 FullHD slices with 3 8bit components in our experiments) the rate values are high enough to cause an int overflow that leads to negative lengths and wrong results. The cast happens too late.
</content>
</entry>
<entry>
<title>Fix some potential overflow issues (#1161)</title>
<updated>2018-10-31T19:44:30Z</updated>
<author>
<name>Stefan Weil</name>
<email>sw@weilnetz.de</email>
</author>
<published>2018-10-31T19:44:30Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=948332e6ed17565100d1df5f6fdbf66865218e36'/>
<id>urn:sha1:948332e6ed17565100d1df5f6fdbf66865218e36</id>
<content type='text'>
* Fix some potential overflow issues

Put sizeof to the beginning of the multiplication to enforce that
size_t instead of smaller integer types is used for the calculation.

This fixes warnings from LGTM:

    Multiplication result may overflow 'unsigned int'
    before it is converted to 'unsigned long'.

It also allows removing some type casts.

Signed-off-by: Stefan Weil &lt;sw@weilnetz.de&gt;

* Fix code indentation

Signed-off-by: Stefan Weil &lt;sw@weilnetz.de&gt;
</content>
</entry>
<entry>
<title>Fix several memory and resource leaks</title>
<updated>2018-10-31T15:16:22Z</updated>
<author>
<name>Nikola Forró</name>
<email>nforro@redhat.com</email>
</author>
<published>2018-10-31T12:39:05Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=943db0f1c28ca6a7df6d18483f97166a03be9bf7'/>
<id>urn:sha1:943db0f1c28ca6a7df6d18483f97166a03be9bf7</id>
<content type='text'>
Signed-off-by: Nikola Forró &lt;nforro@redhat.com&gt;
</content>
</entry>
<entry>
<title>opj_thread_pool_setup(): fix infinite waiting if a thread creation failed</title>
<updated>2018-10-18T09:45:45Z</updated>
<author>
<name>Even Rouault</name>
<email>even.rouault@spatialys.com</email>
</author>
<published>2018-10-18T09:45:45Z</published>
<link rel='alternate' type='text/html' href='https://git.carlh.net/cgit/openjpeg/commit/?id=cd900d96618ab77e79812db654731dd6b5fc7bd8'/>
<id>urn:sha1:cd900d96618ab77e79812db654731dd6b5fc7bd8</id>
<content type='text'>
</content>
</entry>
</feed>
