Closed Bug 567593 Opened 14 years ago Closed 14 years ago

Possible integer overflow by "clut_size" in read_tag_lutType()

Categories

(Core :: Graphics: Color Management, defect)

Product:
Core
Component:
Graphics: Color Management
Platform:
x86_64
Windows Vista
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: posidron, Unassigned)

References

(Blocks 1 open bug)

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729)

http://mxr.mozilla.org/mozilla-central/source/gfx/qcms/iccread.c?mark=391,392,393,398,407,424#391

Reproducible: Didn't try
OMG no, please close it!
Status: UNCONFIRMED → RESOLVED
Closed: 14 years ago
Resolution: --- → INVALID
Blocks: fuzzing-fonts
Group: core-security
You need to log in before you can comment on or make changes to this bug.