Skip to content

v2.5.4
Compare
Choose a tag to compare
@cary-ilm cary-ilm released this 31 Dec 22:35
· 22 commits to RB-2.5 since this release
v2.5.4
1899a45

Patch release with various bug/sanitizer/security fixes, primarily related to reading corrupted input files.

Specific OSS-fuzz issues include:

  • OSS-fuzz #24854 Segv on unknown address in Imf_2_5::hufUncompress
  • OSS-fuzz #24831 Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  • OSS-fuzz #24969 Invalid-enum-value in Imf_2_5::TypedAttribute<Imf_2_5::Envmap>::writeVal
    ueTo
  • OSS-fuzz #25297 Integer-overflow in Imf_2_5::calculateNumTiles
  • OSS-fuzz #24787 Undefined-shift in Imf_2_5::unpack14
  • OSS-fuzz #25326 Out-of-memory in openexr_scanlines_fuzzer
  • OSS-fuzz #25399 Heap-buffer-overflow in Imf_2_5::FastHufDecoder::FastHufDecoder
  • OSS-fuzz #25415 Abrt in __cxxabiv1::failed_throw
  • OSS-fuzz #25370 Out-of-memory in openexr_exrenvmap_fuzzer
  • OSS-fuzz #25501 Out-of-memory in openexr_scanlines_fuzzer
  • OSS-fuzz #25505 Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer
  • OSS-fuzz #25562 Integer-overflow in Imf_2_5::hufUncompress
  • OSS-fuzz #25740 Null-dereference READ in Imf_2_5::Header::operator
  • OSS-fuzz #25743 Null-dereference in Imf_2_5::MultiPartInputFile::header
  • OSS-fuzz #25913 Out-of-memory in openexr_exrenvmap_fuzzer
  • OSS-fuzz #26229 Undefined-shift in Imf_2_5::hufDecode
  • OSS-fuzz #26658 Out-of-memory in openexr_scanlines_fuzzer
  • OSS-fuzz #26956 Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCoun
    ts
  • OSS-fuzz #27409 Out-of-memory in openexr_exrcheck_fuzzer
  • OSS-fuzz #25892 Divide-by-zero in Imf_2_5::calculateNumTiles
  • OSS-fuzz #25894 Floating-point-exception in Imf_2_5::precalculateTileInfo

See CHANGES.md for more details.

Assets 2
Loading