[gstreamer-bugs] [Bug 600553] New: jpegdec crashes on a fuzzed jpeg

GStreamer (bugzilla.gnome.org) bugzilla at gnome.org
Tue Nov 3 06:11:12 PST 2009


https://bugzilla.gnome.org/show_bug.cgi?id=600553
  GStreamer | gst-plugins-good | git

           Summary: jpegdec crashes on a fuzzed jpeg
    Classification: Desktop
           Product: GStreamer
           Version: git
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-good
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: ensonic at sonicpulse.de
         QAContact: gstreamer-bugs at lists.sourceforge.net
      GNOME target: ---
     GNOME version: ---


Created an attachment (id=146838)
 --> (https://bugzilla.gnome.org/attachment.cgi?id=146838)
fuzzed jpeg image

gstjpegdec.c:999:gst_jpeg_dec_chain:<jpegdec0> jpeg_color_space=3
gstjpegdec.c:1009:gst_jpeg_dec_chain:<jpegdec0> [0] h_samp_factor=2,
v_samp_factor=3, cid=1
gstjpegdec.c:1009:gst_jpeg_dec_chain:<jpegdec0> [1] h_samp_factor=1,
v_samp_factor=1, cid=2
gstjpegdec.c:1009:gst_jpeg_dec_chain:<jpegdec0> [2] h_samp_factor=1,
v_samp_factor=1, cid=3
gstjpegdec.c:1021:gst_jpeg_dec_chain:<jpegdec0> starting decompress
gstjpegdec.c:1063:gst_jpeg_dec_chain:<jpegdec0> setting caps video/x-raw-yuv,
format=(fourcc)I420, width=(int)300, height=(int)122, framerate=(fraction)0/1
gstjpegdec.c:1065:gst_jpeg_dec_chain:<jpegdec0> max_v_samp_factor=3
gstjpegdec.c:1067:gst_jpeg_dec_chain:<jpegdec0> max_h_samp_factor=2
gstjpegdec.c:1088:gst_jpeg_dec_chain:<jpegdec0> width 300, height 122, buffer
size 55144, required size 55144
gstjpegdec.c:1128:gst_jpeg_dec_chain:<jpegdec0> decompressing (reqired scanline
buffer height = 1)
gstjpegdec.c:701:gst_jpeg_dec_decode_indirect:<jpegdec0> unadvantageous width
or r_h, taking slow route involving memcpy

GST_DEBUG="jpeg*:5" gst-launch-0.10 filesrc location=00000290.jpeg ! jpegdec !
fakesink

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.




More information about the Gstreamer-bugs mailing list