Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix resolution parsing issue in HDR image header reading #10

Merged
merged 2 commits into from
Jul 14, 2024
Merged

Fix resolution parsing issue in HDR image header reading #10

merged 2 commits into from
Jul 14, 2024

Conversation

chan233
Copy link
Contributor

@chan233 chan233 commented Jul 12, 2024

  • Added safety checks for string to integer conversion.

When a maliciously crafted HDR file is encountered, the program may crash because it only verifies the file header and does not validate the resolution field's validity. This is an example of a file that causes the program to crash.

crashs.tar.gz

tar -xvf  crashs.tar.gz
imageinfo crash_2

dehua and others added 2 commits July 12, 2024 18:38
- Added safety checks  for string to integer conversion.
@xiaozhuai
Copy link
Owner

Hello @chan233 , this pr looks good to me. Thank you!
In order to make the CI green, I modified your PR.
It's merged.

@xiaozhuai xiaozhuai merged commit 649721b into xiaozhuai:master Jul 14, 2024
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants