Skip to content

fix(softimage): More hardening against corrupted input files#5155

Merged
lgritz merged 1 commit intoAcademySoftwareFoundation:mainfrom
lgritz:lg-pic3
May 1, 2026
Merged

fix(softimage): More hardening against corrupted input files#5155
lgritz merged 1 commit intoAcademySoftwareFoundation:mainfrom
lgritz:lg-pic3

Conversation

@lgritz
Copy link
Copy Markdown
Collaborator

@lgritz lgritz commented Apr 22, 2026

  • Fix incorrect return check for fread in read_pixels_pure_run_length.
  • Detect and report error for unsupported packet type.
  • Fix possible infinite loop from malformed RLE packet with a zero run-count.
  • Check for valid y range in read_native_scanline.

* Fix incorrect return check for fread in read_pixels_pure_run_length.
* Detect and report error for unsupported packet type.
* Fix possible infinite loop from malformed RLE packet with a zero
  run-count.
* Check for valid y range in read_native_scanline.

Signed-off-by: Larry Gritz <lg@larrygritz.com>
@lgritz
Copy link
Copy Markdown
Collaborator Author

lgritz commented Apr 30, 2026

Release approaching, no objections for a week -> merging tomorrow if I don't hear anything to the contrary

@lgritz lgritz merged commit 6ec094c into AcademySoftwareFoundation:main May 1, 2026
30 checks passed
lgritz added a commit to lgritz/OpenImageIO that referenced this pull request May 1, 2026
…SoftwareFoundation#5155)

* Fix incorrect return check for fread in read_pixels_pure_run_length.
* Detect and report error for unsupported packet type.
* Fix possible infinite loop from malformed RLE packet with a zero
run-count.
* Check for valid y range in read_native_scanline.

Signed-off-by: Larry Gritz <lg@larrygritz.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant