{"action":"closed","issue":{"url":"https://api.github.com/repos/mdadams/jasper/issues/23","repository_url":"https://api.github.com/repos/mdadams/jasper","labels_url":"https://api.github.com/repos/mdadams/jasper/issues/23/labels{/name}","comments_url":"https://api.github.com/repos/mdadams/jasper/issues/23/comments","events_url":"https://api.github.com/repos/mdadams/jasper/issues/23/events","html_url":"https://github.com/mdadams/jasper/issues/23","id":182794784,"number":23,"title":"divide-by-zero in jpc_dec_process_siz (jpc_dec.c) (DIFFERENT FROM #22)","user":{"login":"asarubbo","id":4741819,"avatar_url":"https://avatars.githubusercontent.com/u/4741819?v=3","gravatar_id":"","url":"https://api.github.com/users/asarubbo","html_url":"https://github.com/asarubbo","followers_url":"https://api.github.com/users/asarubbo/followers","following_url":"https://api.github.com/users/asarubbo/following{/other_user}","gists_url":"https://api.github.com/users/asarubbo/gists{/gist_id}","starred_url":"https://api.github.com/users/asarubbo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/asarubbo/subscriptions","organizations_url":"https://api.github.com/users/asarubbo/orgs","repos_url":"https://api.github.com/users/asarubbo/repos","events_url":"https://api.github.com/users/asarubbo/events{/privacy}","received_events_url":"https://api.github.com/users/asarubbo/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-10-13T13:49:10Z","updated_at":"2016-10-15T19:33:14Z","closed_at":"2016-10-15T19:33:14Z","body":"Hello,\r\ntime ago I found multiple crashes on jasper. I didn't know where to post the bugs since the development seems dead, so I just informed the community on oss-security.\r\nNow I discovered that the development is still active, here the details:\r\n\r\n```\r\n# imginfo $FILE\r\nwarning: trailing garbage in marker segment (5 bytes)\r\nASAN:DEADLYSIGNAL\r\n=================================================================\r\n==24077==ERROR: AddressSanitizer: FPE on unknown address 0x7f78c36f9822 (pc 0x7f78c36f9822 bp 0x7ffe2bff10c0 sp 0x7ffe2bff0fa0 T0)\r\n    #0 0x7f78c36f9821 in jpc_dec_process_siz /tmp/jasper-version-1.900.3/src/libjasper/jpc/jpc_dec.c:1196:18\r\n    #1 0x7f78c36ff2b2 in jpc_dec_decode /tmp/jasper-version-1.900.3/src/libjasper/jpc/jpc_dec.c:390:10\r\n    #2 0x7f78c36ff2b2 in jpc_decode /tmp/jasper-version-1.900.3/src/libjasper/jpc/jpc_dec.c:254\r\n    #3 0x7f78c36a2a9a in jas_image_decode /tmp/jasper-version-1.900.3/src/libjasper/base/jas_image.c:372:16\r\n    #4 0x4f11bd in main /tmp/jasper-version-1.900.3/src/appl/imginfo.c:179:16\r\n    #5 0x7f78c27ba61f in __libc_start_main /var/tmp/portage/sys-libs/glibc-2.22-r4/work/glibc-2.22/csu/libc-start.c:289\r\n    #6 0x418bc8 in _start (/tmp/jasper-version-1.900.3/src/appl/.libs/imginfo+0x418bc8)\r\n\r\nAddressSanitizer can not provide additional info.\r\nSUMMARY: AddressSanitizer: FPE /tmp/jasper-version-1.900.3/src/libjasper/jpc/jpc_dec.c:1196:18 in jpc_dec_process_siz\r\n==24077==ABORTING\r\n```\r\n\r\nTested against the latest 1.900.3\r\nTestcase:\r\n[12.crash.zip](https://github.com/mdadams/jasper/files/527238/12.crash.zip)\r\n"}}
{"actor":{"display_login":"mdadams"}}