
Search found 4 matches
- 2011-09-09T12:21:29-07:00
- Forum: Bugs
- Topic: memory overrun in coders/jpeg.c
- Replies: 6
- Views: 12546
Re: memory overrun in coders/jpeg.c
Merci beaucoup 

- 2011-09-09T12:09:29-07:00
- Forum: Bugs
- Topic: memory overrun in coders/jpeg.c
- Replies: 6
- Views: 12546
Re: memory overrun in coders/jpeg.c
Hello, the patch has been applied into the trunk, but the (automatic?) merge into branch 6.7.2 has failed : if you compare http://trac.imagemagick.org/browser/ImageMagick/branches/ImageMagick-6.7.2/coders/jpeg.c#L646 and http://trac.imagemagick.org/browser/ImageMagick/trunk/coders/jpeg.c#L671 you'll ...
- 2011-09-06T01:25:30-07:00
- Forum: Bugs
- Topic: memory overrun in coders/jpeg.c
- Replies: 6
- Views: 12546
Re: memory overrun in coders/jpeg.c
First of all, if someone should be thanked, it's you ! But I still don't understand why you copy a buffer twice at the same location (profile->datum). The first argument of memcpy() is the destination pointer, not the source one. Would you rather write, in http://trac.imagemagick.org/browser ...
- 2011-09-05T15:39:09-07:00
- Forum: Bugs
- Topic: memory overrun in coders/jpeg.c
- Replies: 6
- Views: 12546
memory overrun in coders/jpeg.c
Hello, The ReadProfile() function in coders/jpeg.c deals with a possible previous profile in the image: previous_profile=GetImageProfile(image,name); if (previous_profile != (const StringInfo *) NULL) { SetStringInfoLength(profile,GetStringInfoLength(profile)+ GetStringInfoLength(previous_profile ...