[prev in list] [next in list] [prev in thread] [next in thread]
List: oss-security
Subject: [oss-security] libass ass_outline.c signed integer overflow
From: Fstark <f734222792 () gmail ! com>
Date: 2020-09-29 0:19:19
Message-ID: CAEFBov0z-zr4q=_srb3q7gq1-f1P6GBf78p8GYUj0DvsXVKLTw () mail ! gmail ! com
[Download RAW message or body]
In `ass_outline_construct`'s call to `outline_stroke` a signed integer
overflow happens *(undefined behaviour)*. On my machine signed overflow
happens to wrap around to a negative value, thus failing the assert.
https://github.com/libass/libass/issues/431
https://github.com/libass/libass/pull/432
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic