Fix Heap-buffer-overflow READ in opj_jp2_apply_pclr (#1441)
authorAleks L <93376818+sashashura@users.noreply.github.com>
Fri, 12 Aug 2022 13:48:41 +0000 (14:48 +0100)
committerGitHub <noreply@github.com>
Fri, 12 Aug 2022 13:48:41 +0000 (15:48 +0200)
commitbe95561917aa9b1d8ea4614820a534917cfa6bbe
treed118c9a4b4489d2a170902824681206d986cd7d2
parent49fea5c45e9924621944d4d484a1d95559d09fbb
Fix Heap-buffer-overflow READ in opj_jp2_apply_pclr (#1441)

The issue was found while fuzzing opencv:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47342

The read overflow triggered by reading `src[j]` in
```cpp
            for (j = 0; j < max; ++j) {
                dst[j] = src[j];
            }
```
The max is calculated as `new_comps[pcol].w * new_comps[pcol].h`, however the `src = old_comps[cmp].data;` which may have different `w` and `h` dimensions.
src/lib/openjp2/jp2.c