openjpeg/src, branch v2.3.1

opj_t1_encode_cblks: fix UBSAN signed integer overflow

2019-03-29T10:17:39Z

Fixes #1053 / CVE-2018-5727 Note: I don't consider this issue to be a security vulnerability, in practice. At least with gcc or clang compilers on x86_64 which generate the same assembly code with or without that fix.

Revert "[JPWL] tgatoimage(): avoid excessive memory allocation attempt,"

2019-03-29T09:44:35Z

This reverts commit 05be3084460e46282ee63f04c72c451f3271fd28. This commit doesn't compile due to missing OPJ_UINT64 type

Revert "[MJ2] Avoid index out of bounds access to pi->include[]"

2019-03-29T09:40:58Z

This reverts commit c277159986c80142180fbe5efb256bbf3bdf3edc. The commit didn't compile. include_size is not defined in openmj2

convertbmp: detect invalid file dimensions early

2018-12-14T04:10:35Z

width/length dimensions read from bmp headers are not necessarily valid. For instance they may have been maliciously set to very large values with the intention to cause DoS (large memory allocation, stack overflow). In these cases we want to detect the invalid size as early as possible. This commit introduces a counter which verifies that the number of written bytes corresponds to the advertized width/length. Fixes #1059 (CVE-2018-6616).

Merge pull request #1168 from Young-X/fix_dev

2018-12-07T20:27:38Z

Fix multiple potential vulnerabilities and bugs

[JPWL] tgatoimage(): avoid excessive memory allocation attempt,

2018-11-28T06:44:06Z

and fixes unaligned load Signed-off-by: Young Xiao

[JP3D] To avoid divisions by zero / undefined behaviour on shift (CVE-2018-14423

2018-11-28T06:39:15Z

Signed-off-by: Young_X

[JPWL] opj_compress: reorder checks related to code block dimensions to avoid potential int overflow

2018-11-28T06:39:14Z

Signed-off-by: Young_X

[OPENJP2] change the way to compute p_tx0, p_tx1, p_ty0, p_ty1 in function

2018-11-28T06:39:14Z

opj_get_encoding_parameters Signed-off-by: Young_X

[MJ2] Avoid index out of bounds access to pi->include[]

2018-11-28T06:39:14Z

Signed-off-by: Young_X

openjpeg/src, branch v2.3.1

opj_t1_encode_cblks: fix UBSAN signed integer overflow

Revert "[JPWL] tgatoimage(): avoid excessive memory allocation attempt,"

Revert "[MJ2] Avoid index out of bounds access to pi->include[]"

convertbmp: detect invalid file dimensions early

Merge pull request #1168 from Young-X/fix_dev

[JPWL] tgatoimage(): avoid excessive memory allocation attempt,

[JP3D] To avoid divisions by zero / undefined behaviour on shift (CVE-2018-14423

[JPWL] opj_compress: reorder checks related to code block dimensions to avoid potential int overflow

[OPENJP2] change the way to compute *p_tx0, *p_tx1, *p_ty0, *p_ty1 in function

[MJ2] Avoid index out of bounds access to pi->include[]

[OPENJP2] change the way to compute p_tx0, p_tx1, p_ty0, p_ty1 in function