We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Found by OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45291
OSS-Fuzz has reported this as an integer overflow in sumToLong. The actual problem is in float_to_integer_helper:
float_to_integer_helper
exiv2/include/exiv2/value.hpp
Lines 1248 to 1258 in 5d5354e
It seems that the static_cast<I>(v) produces garbage when v is a fraction. In the poc, v == 6.0134700169990685e-154.
static_cast<I>(v)
v
v == 6.0134700169990685e-154
The text was updated successfully, but these errors were encountered:
kevinbackhouse
Successfully merging a pull request may close this issue.
Found by OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45291
OSS-Fuzz has reported this as an integer overflow in sumToLong. The actual problem is in
float_to_integer_helper
:exiv2/include/exiv2/value.hpp
Lines 1248 to 1258 in 5d5354e
It seems that the
static_cast<I>(v)
produces garbage whenv
is a fraction. In the poc,v == 6.0134700169990685e-154
.The text was updated successfully, but these errors were encountered: