#10 A buggy memmove in libjpeg used in exif-0.6

closed-fixed
Lutz Müller
None
5
2003-06-16
2003-05-18
AnTiKoNs
No

There's a bug in libjpeg (inclued in exif-0.6) :

in libjpeg/jpeg-data.c, line 418

memmove (&data->sections[2], &data->sections[1],
data->count - 2);

is buggy, should be replaced by

memmove (&data->sections[2], &data->sections[1],
(data->count - 1)*sizeof(JPEGSection));

In addition, lines 117, 128, 132, 137, 148, 227, 233 there are
uncheck (re|m)alloc

Good luck for your project !!!

Discussion

  • Arnaud Launay
    Arnaud Launay
    2003-06-08

    • assigned_to: nobody --> lutz
     
  • Lutz Müller
    Lutz Müller
    2003-06-16

    • status: open --> closed-fixed
     
  • Lutz Müller
    Lutz Müller
    2003-06-16

    Logged In: YES
    user_id=58652

    Fixed in CVS.